WMF exploit testing on Windows 98



I had hoped to get in another test of Windows 98 with yet another WMF viewer (tried Kodak imaging, and irfanview). So far I haven’t seen a way that the WMF exploits can work on Windows 98 SE. I’m running out of time before I have to run to some computer service appointments and maybe will be able to pick up again this afternoon/evening. Larry Seltzer had a post this morning that earlier versions of Windows might not be as vulnerable because they had no default WMF viewer, but with a default WMF viewer they may be susceptible. I’m still looking for a WMF viewer that makes the exploit possible on Windows 98 SE.


Again, I’ll leave this thread open to comments in case someone else finds a combination that is vulnerable. Previous posts on the issue with WMF and Windows 98 on my site are:

http://www.averyjparker.com/2006/01/02/windows-98-and-the-wmf-exploit/
http://www.averyjparker.com/2006/01/01/version-2-of-the-wmv-exploit-vs-windows-98-se/
http://www.averyjparker.com/2006/01/01/more-wmf-exploit-testing-on-windows-98/
http://www.averyjparker.com/2006/01/01/wmf-exploit-and-windows-98/

Related Posts

Blog Traffic Exchange Related Posts
  • Google indexing weirdness In looking at my Google Analytics info.... I checked on the Northcarolinagenealogy.net site's stats and found that it's really dropped since about Friday or Saturday from decent traffic to next to nothing. (20 visitors a day now.) The first thing I noticed was no google.com referrers.... So, I started looking......
  • Windows 98 WMF patch This hopefully will be my last post on the whole WMF exploit stuff.... It's prompted in part by a comment on one of the articles on Windows 98 and the vulnerability. I realized that I hadn't really brought things to a full conclusion for the Windows 98 users. Of course,......
  • More details on php exploit from last week Ok. I have a bit of time that I can sit down and get a little more detailed on what specifically happened late last week that shut the site down for a couple days. At one point, I had updated the ezcontents script for the main site (averyjparker.com), but I......
Blog Traffic Exchange Related Websites
  • Etihad Airways Etihad Airways is the National Airline of the United Arab Emirates. Etihad started commercial operations in November 2003 with Abu Dhabi, the capital of the UAE, as its hub. After the launch in November 2003 the airline grew at a phenomenal pace, adding almost one new route a month.......
  • WedNEWSday - December 10th, 2008 Grave Situation in Greece Civil unrest rages on as citizens there continue to lose faith in a corrupt government. The country's economy is in shambles with roughly 20% of the population living below the poverty line and the youngest members of the workforce (those ages 15-24) not able to find......
  • My Prosper Internal Rate of Return Update (End of Jan 07) -- 1.67% I am tracking my Prosper internal rate of return (IRR).  As a reminder my prosper IRR is defined as actual cash flows up to the current month.  The current month is positive account balance minus monies added minus loan values in default. I currently have 0 loans in default and......
www.pdf24.org    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

3 Responses to “WMF exploit testing on Windows 98”

  1. caius Says:


    The following HTML snippet turns InternetExplorer 5.0 into a WMF viewer; doesn’t work with Mozilla. Only tested with valid WMF files;

  2. caius Says:


    [less than] img src=”file.wmf” alt=”not vulnerable” [greaterthan]

  3. Avery Says:


    I tested that possibility – it didn’t render, didn’t trigger the exploit. IE treated it like a broken image.

Leave a Reply

You must be logged in to post a comment.


Switch to our mobile site