WMF exploit testing on Windows 98



I had hoped to get in another test of Windows 98 with yet another WMF viewer (tried Kodak imaging, and irfanview). So far I haven’t seen a way that the WMF exploits can work on Windows 98 SE. I’m running out of time before I have to run to some computer service appointments and maybe will be able to pick up again this afternoon/evening. Larry Seltzer had a post this morning that earlier versions of Windows might not be as vulnerable because they had no default WMF viewer, but with a default WMF viewer they may be susceptible. I’m still looking for a WMF viewer that makes the exploit possible on Windows 98 SE.


Again, I’ll leave this thread open to comments in case someone else finds a combination that is vulnerable. Previous posts on the issue with WMF and Windows 98 on my site are:

http://www.averyjparker.com/2006/01/02/windows-98-and-the-wmf-exploit/
http://www.averyjparker.com/2006/01/01/version-2-of-the-wmv-exploit-vs-windows-98-se/
http://www.averyjparker.com/2006/01/01/more-wmf-exploit-testing-on-windows-98/
http://www.averyjparker.com/2006/01/01/wmf-exploit-and-windows-98/

Related Posts

Blog Traffic Exchange Related Posts
  • Windows XP and IPP printers I really like printers with their own built in print server. They can be plugged into the network and some operating systems can just find them. Unfortunately most of the time Windows doesn't just find an IPP printer. One tool that can be handy for such a time as this......
  • NEW exploit for the WMF vulnerability Just when you thought we had a good understanding of the recent zero-day WMF (Windows metafile exploit) it's worse. Sans is reporting on a new variation on the exploit released today. They have gone to yellow (again) to warn people. Here are some details. This exploit was "made by the......
  • Cleaning up after the WMF exploit OK, I mentioned that I infested a virtual machine with the current WMF 0-day exploit. First I should probably clarify. An exploit is a means of getting in to a system. The payload is the software that is installed. In the case of my experience there was a long list......
Blog Traffic Exchange Related Websites
  • Pacific Grove Golf Course, Pacific Grove, CA Pacific Grove Golf Course is located in Pacific Grove, CA Phone: 831.648.5775 Website: http://www.ci.pg.ca.us/golf/default.htm Course History: This is a beautiful municipal course that has been voted one of the best municipal courses in the nation. The value is absolutely unbeatable and the old English links style of play is......
  • South Beach Harbor Marnia South Beach Harbor is located in San Francisco, CA  It is adjacent to AT&T Park -- home of the SF Giants -- and McCovey Cove.  Pirr 40 at the Embarcadero. Phone: 415.495.4911 email: sb.harbor@sfgov.org    Website: http://www.southbeachharbor.com/ Berths: 700 Regular Berth Pricing 26? $202 30? $237 34? $289 38? $358 42?......
  • Books Closeouts BookCloseouts is the bestseller of bargain books on the internet. All of our product is offered at 50-90% off the list price. Triple your savings! BUY NEW BOOKS at 50-90% off! Shop at BookCloseOuts.comA wide range of quality books at low prices is an easy sell for affiliates. BookCloseouts.com......
PDF24    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

3 Responses to “WMF exploit testing on Windows 98”

  1. caius Says:


    The following HTML snippet turns InternetExplorer 5.0 into a WMF viewer; doesn’t work with Mozilla. Only tested with valid WMF files;

  2. caius Says:


    [less than] img src=”file.wmf” alt=”not vulnerable” [greaterthan]

  3. Avery Says:


    I tested that possibility – it didn’t render, didn’t trigger the exploit. IE treated it like a broken image.

Leave a Reply

You must be logged in to post a comment.


Switch to our mobile site