Another update to exploit?



I didn’t see this reported anywhere, but since yesterday when there was an update to the metasploit module for the WMF vulnerability I think there’s been yet another update. I read yesterday that it had been updated and could evade all known IDS signatures. I downloaded the update to continue my Win98 testing. Then today found that there was another update. I haven’t compared the old/new versions but can’t help but wonder if this means more scrambling of antivirus writers for new signatures to keep up.


Spyware Confidential is linking to an update at Larry Seltzer’s blog updating the situation on antivirus scanning for the exploit.

It’s good to see the list current, I was afraid the 12/31 list was giving a bit of overconfidence.

After I read, I tested the new module variation against clamav and must say it performed very well, 100%.

Related Posts

Blog Traffic Exchange Related Posts
  • Antivirus scanning update for WMF I hung on to the last batch of 20 wmf exploit samples I had been working with for the purpose of testing my clamantivirus install against them to see when "full detection" of all 20 had been acheived. Last night, with version 1227 of the daily.cvd database, they were still......
  • WMF vulnerability advisory update Microsoft has updated their security bulletin on the WMF vulnerability to note a couple things. One, they acknowledge that embedded images within a document can trigger the exploit. Previously they said this needed further investigation. Second, they are seconding what I've been finding that Windows 98 and other pre-XP systems......
  • How to Remove Internet Security 2010 | Internet Security 2010 Removal Guide Internet Security 2010 is the name of a rogue antivirus application that is one of the more recent to be making the rounds. It will typically install itself on your system through the use of other malware. These rogue antivirus applications typically will pop up warnings and alerts about the......
Blog Traffic Exchange Related Websites
  • Becoming Aware Of The Time Between Blog Updates In most instances not leaving time before a content update is a problem for bloggers. If you start an internet business and your main presence is a blog over and over you will be told that the way to succeed you need to have your blog constantly updated. The problem......
  • CengageBrain.com Free Shipping on college textbook purchases of $25 or moreCengageBrain.com rents textbooks, sells new print textbooks; eBooks; eChapters; individual digital chapters; plus print and digital study tools. eBooks are priced up to 50% off list price of a regular print textbook while eChapters start as low as $1.99 each.......
  • RateLadder Loan And Portfolio Plan Power My Prosper Listing has 1 day left in the auction.  I reached 100% funding late afternoon last Wednesday.  Today is the final day to bid on my loan request.  Short of an Act of God this loan is as safe as they come. My listing fell into the the conservative......
PDF24    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site