Archive for December, 2005


Another new WMF exploit

Saturday, December 31st, 2005
Print this article
EMail this article


It's been a busy few days and there's little sign of things easing off.  Now SANS  is reporting a new WMF vulnerability:

The source code claims to be made by the folks at metasploit and xforce, together with a anonymous source. The exploit generates files:

with a random size;

no .wmf extension, (.jpg), but could be any other [...]

WMF exploit now spreading via IM

Saturday, December 31st, 2005
Print this article
EMail this article


An IM worm is now using the WMF exploit .  According to Kaspersky Labs it's not spreading fast as of yet but that could all change.

We have received multiple reports from the Netherlands about an IM-Worm which spreads via MSN using a link to "http://[snip]/xmas-2006 FUNNY.jpg".This may well turn out to become a local epidemic(in NL), [...]

Office 12 screenshots

Saturday, December 31st, 2005
Print this article
EMail this article


Paul Thurrott  has some Office 12 beta screenshots that are well worth taking a look at.
From a personal perspective I'm not allowed to post anything about Office 12 which is annoying to say the least and seeing some people doing so (either braving the wrath of Microsoft of with permission) is doubly annoying.
Technorati Tags: Office [...]

How antivirus companies have responded to the WMF exploit

Saturday, December 31st, 2005
Print this article
EMail this article


An article in eWeek  has posted results from AV-Test looking at how antivirus companies have responded to the WMF threat. 
So far there have been 73 analyzed variants and products from the following companies identify all 73 (if you have the latest updates downloaded and installed!):

Alwil Software (Avast)
ClamAV
ESET (Nod32)
Fortinet Inc.
F-Secure Inc. [...]

Send an email to yourself in the future

Saturday, December 31st, 2005
Print this article
EMail this article


Making a New Year resolution or two and want to remind yourself of it in a year, five years of ten years?  Quick Online Tips  has links to a number of services that allow you to do just that - write an email now and have it sent to you (or someone else) in the [...]

Indexing and the WMF exploit (plus some extra information)

Saturday, December 31st, 2005
Print this article
EMail this article


It seems that indexing programs (that is, programs that index your hard drives to make searching faster, such as Google Desktop) can, if they come across an infected WMF file, run the file and trigger the exploit.  As such, SANS  and F-Secure  now recommend disabling (or removing) all such indexing programs.
Also, I need to point [...]

Pages (45) : [1]2 3 » ... Last »

Creative Commons License
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 2.5 License.