The Windows metafile vulnerability is undoubtedly a story that will carry over from 2005 into 2006. Ilfak Guilfanov brings everyone a gift in the form of a temporary patch while Microsoft works on an official patch.
Guilfanov writes in his Hex Blog, "The fix does not remove any functionality from the system, all pictures will continue to be visible. It should work for Windows 2000, XP SP2 and XP 64-bit. It might also work for XP SP1 or XP without any service packs applied. This is a DLL which gets injected to all processes loading user32.dll. It patches the Escape() function in gdi32.dll. The result of the patch is that the SETABORT escape sequence is not accepted anymore."
Tom Liston as SANS Internet Storm Center said that he has "taken this [patch] apart and looked at it very, very closely. It does exactly what it advertises and nothing more. [...] This should allow for Windows to display WMF files normally while still blocking the exploit. We want to give a huge thanks to Ilfak Guilfanov for building this and for allowing us to host and distribute it."
So there you have it. Madmen are creating still more working exploits. So, if you feel adventurous then consider using this patch to temporarily protect your systems.
That said, I'm off to celebrate the New Year! Happy New Year to you all !
End of Article
You must be a registered user or online subscriber to comment on this article. Please log on before posting a comment. Are you a new visitor?
Register now
Free CDs Offer Fundamental Content for IT Pros Are you up to speed on the latest technologies and solutions? Don't miss out on your chance to get up to speed quickly on fundamental, in-depth information on some of the hottest topics in our library of content.
Let Your Users Reset Their Own Passwords: Free Download Try a 30 day free trial of Desktop Authority Password Self-Service – it provides an easy-to-use, robust system for allowing users to reset their own forgotten passwords or locked accounts.
Get Windows IT Pro & Mark Minasi’s Favorite Power Tools Guide Order Windows IT Pro now and get "More of Mark Minasi's Favorite Power Tools"--a in-depth guide to the most useful Windows commands --FREE with your paid order! Subscribe today, and save 58% off the cover price!
Deep Dive into VMware vSphere, eLearning Series Join John Savill to explore the major functionality capabilities of the vSphere virtualization platform, including identification of the changes from ESX 3.5.
Register
