WMF exploit testing on Windows 98
I had hoped to get in another test of Windows 98 with yet another WMF viewer (tried Kodak imaging, and irfanview). So far I haven’t seen a way that the WMF exploits can work on Windows 98 SE. I’m running out of time before I have to run to some computer service appointments and maybe will be able to pick up again this afternoon/evening. Larry Seltzer had a post this morning that earlier versions of Windows might not be as vulnerable because they had no default WMF viewer, but with a default WMF viewer they may be susceptible. I’m still looking for a WMF viewer that makes the exploit possible on Windows 98 SE.
Again, I’ll leave this thread open to comments in case someone else finds a combination that is vulnerable. Previous posts on the issue with WMF and Windows 98 on my site are:
http://www.averyjparker.com/2006/01/02/windows-98-and-the-wmf-exploit/
http://www.averyjparker.com/2006/01/01/version-2-of-the-wmv-exploit-vs-windows-98-se/
http://www.averyjparker.com/2006/01/01/more-wmf-exploit-testing-on-windows-98/
http://www.averyjparker.com/2006/01/01/wmf-exploit-and-windows-98/
Popularity: 1% [?]
Related Posts - Google indexing weirdness In looking at my Google Analytics info.... I checked on the Northcarolinagenealogy.net site's stats and found that it's really dropped since about Friday or Saturday from decent traffic to next to nothing. (20 visitors a day now.) The first thing I noticed was no google.com referrers.... So, I started looking......
- Windows 98 WMF patch This hopefully will be my last post on the whole WMF exploit stuff.... It's prompted in part by a comment on one of the articles on Windows 98 and the vulnerability. I realized that I hadn't really brought things to a full conclusion for the Windows 98 users. Of course,......
- More testing on the second WMF exploit After my Windows 98 tests which failed to exploit the system with either the first or the second vulnerability, I started wondering how well the antivirus companies were doing in detecting this second exploit variation. I had setup and updated metasploit so I could test my Windows 98 SE install......
Related Websites - The Research of Monkey Business This is a post written by Avishai Shuter, and up-and-coming zoologist who lives in his parents house while on the cusp of getting a job with the Bronx Zoo. Finance is a complex topic- a combination of art and science…and other things I’m sure I'm just not aware of. Millions of......
- My Prosper Internal Rate of Return Update (End of Jan 07) -- 1.67% I am tracking my Prosper internal rate of return (IRR). As a reminder my prosper IRR is defined as actual cash flows up to the current month. The current month is positive account balance minus monies added minus loan values in default. I currently have 0 loans in default and......
- WedNEWSday - December 10th, 2008 Grave Situation in Greece Civil unrest rages on as citizens there continue to lose faith in a corrupt government. The country's economy is in shambles with roughly 20% of the population living below the poverty line and the youngest members of the workforce (those ages 15-24) not able to find......
Similar Posts
- Windows 98 and WMF exploit posts
- Version 2 of the WMF exploit vs Windows 98 SE
- Windows 98 and the WMF exploit
- WMF exploit vs. Windows 98 again…
- WMF exploit virus detection revisited
January 3rd, 2006 at 5:41 pm
The following HTML snippet turns InternetExplorer 5.0 into a WMF viewer; doesn’t work with Mozilla. Only tested with valid WMF files;
January 3rd, 2006 at 5:42 pm
[less than] img src=”file.wmf” alt=”not vulnerable” [greaterthan]
January 4th, 2006 at 4:18 pm
I tested that possibility – it didn’t render, didn’t trigger the exploit. IE treated it like a broken image.