I'm sorry to interrupt your New Years plans but there is now a patch available to stop the exploit of WMF (and all the other images processed by the vulnerable shimgvw.dll library). It is made public, along with the source code, by Ilfak Guilfanov who is a very popular decompilation expert. http://www.hexblog.com/2005/12/wmf_vuln.html Should you patch? Yes, immediately. Even if you've blocked WMF files at the firewall and everything else is up to date there is now a first worm running in the wild under the file xmas-2006 FUNNY.jpg so exercise caution and start patching.
You can leave a response, or trackback from your own site.
6 Comments
Leave a Reply
|
|
|
Whats on Vlad's Mind?
|
Rolling out Shockey Monkey 2 Beta, SMB Buddy Beta and ExchangeDefender 4 Beta. Not an ounce of stable software anywhere in sight, should be a spectacular summer.
|
|
|
|
Sponsors:
This blog is made possible by
Own Web Now Corp and ExchangeDefender.
If you like this blog and are in the need of products we offer I hope you give us some
consideration.
|
|
|
|
|
|
Get The Newsletter
|
Looking for a more focused, exclusive insight into the world of SMB tech & business? Sign up for my newsletter:
Click here to sign up
|
|
|
|
|
Vladfire Vlog
|
Vladfire is my video blog showcasing successful people and technology in small to medium business.
Below are a few recent episodes, check out the archive for all other films.
|
See more episodes...
|
|
|
SBS Show Podcast
|
SBS Show is a free weekly podcast (Internet for recorded radio show) focusing on small business and technology. More at sbsshow.com but check out our latest episode:
SBS Show #26
Erick Simpson
Managed Services Part 2
Listen to older shows..
|
|
|
|
| |
|
|
Categories
|
|
Archives
|
|
About
|
Apple
Awesome
Beta
Blogroll
Deals
E12
Events
Exchange
ExchangeDefender
Friends
Gadgets
Gaypile
Google
iPhone
IT Business
IT Culture
Legal
Linux
Microsoft
Misc
Mobility
Open Source
OS
OwnWebNow
Podcast
Programming
SBS Show
Security
Shockey Monkey
SMB
System Admin
Thieving Weasel
Uncategorized
Vista
Vladcast
Vladfire
Vladville
Web 2.0
Windows Home Server
WordPress
|
 |
October 2008,
September 2008,
August 2008,
July 2008,
June 2008,
May 2008,
April 2008,
March 2008,
February 2008,
January 2008,
December 2007,
November 2007,
October 2007,
September 2007,
August 2007,
July 2007,
June 2007,
May 2007,
April 2007,
March 2007,
February 2007,
January 2007,
December 2006,
November 2006,
October 2006,
September 2006,
August 2006,
July 2006,
June 2006,
May 2006,
April 2006,
March 2006,
February 2006,
January 2006,
December 2005,
November 2005,
October 2005,
September 2005,
August 2005,
July 2005,
|
|
Vlad says:
Thanks for checking out my blog. You've officially reached the end of the Internet so take in what you've read and don't look at it as gospel but an invitation to start thinking for yourself.
|
|
|
|
| |
Copyright © 2005, 2006, 2007 Vlad Media, Inc. All Rights Reserved.
Content is provided AS-IS without warranty of any kind.
Syndicate this blog: 
|
|