Jump to content


Sites exploit Windows image flaw


  • Please log in to reply
3 replies to this topic

#1 Neon

Neon

    Karl

  • Members
  • PipPipPipPipPipPip
  • 4,728 posts
  • Country:Space

Posted 29 December 2005 - 12:24 PM

Computer users are being alerted to a new flaw in Microsoft Windows which can be used to attack a PC.
The US net watchdog, the Computer Emergency Response Center (Cert), and security firms have issued warnings about certain types of image files called Windows Metafiles.

Experts said numerous websites were taking advantage of the flaw to sneak into computers and install spyware.

Microsoft has said it is looking into the issue.

Spam bots

The flaw centres on the way Microsoft's operating system handles Windows Metafiles (.wmf). These are image files that can contain both vector and bitmap-based picture information.

Microsoft encourages users to exercise caution when they open e-mail and links in e-mail from untrusted sources

Microsoft security advisory
The hole means that an attacker can hide malicious code on a webpage or an e-mail containing files with the wmf extension.

"Exploit code has been publicly posted and used to successfully attack fully-patched Windows XP SP2 systems," said Cert. "However, other versions of the Windows operating system may be at risk as well."

#2 Visentinel

Visentinel

    Established Member

  • Members
  • PipPipPipPipPip
  • 998 posts
  • Location:NSW Australia

Posted 31 December 2005 - 04:33 AM

Hmmm not good

#3 Neon

Neon

    Karl

  • Members
  • PipPipPipPipPipPip
  • 4,728 posts
  • Country:Space

Posted 31 December 2005 - 01:47 PM

ha, not good at all...everyone has images on their pc!

#4 bmn

bmn

    Member

  • Members
  • PipPipPip
  • 32 posts
  • Country:USA

Posted 01 January 2006 - 04:43 AM

Here is a link to solve the problem! DO IT ASAP!!! (sorry for the caps but this is big!)

Link: http://www.grc.com/sn/notes-020.htm




1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users