Thursday, December 29, 2005

Windows WMF Flaw Found not Patched Yet

This one looks bad because they can execute the code simply from going to the website and currently there is no patch or workaround. I'm staying in the corporate part of the internet until they can get this thing patched.

The attacks can be carried out thanks to a newly discovered vulnerability in those operating systems' handling of corrupted.WMF (Windows Metafile) graphic files, the firms said.

The firms describe the exploit as "zero day," because malicious hackers are taking advantage of it while there is no patch or certified workaround against the vulnerability.

No comments: