F-Secure is reporting on another SPAM attack that tries to get people to click on a link to a site with an exploit-crafted WMF file. The message is along the lines of a claimed Professor at Yale announcing the unfortunate vandalism over the New Year holiday, the link purports to be pictures of the act in the “hope that someone may recognize the culprits work”. I’m sure this won’t be the last of that sort….
Tag: New Year
-
WMF vulnerability checker
The same person that has given the New Year’s gift of an unofficial patch for the WMF exploit circulating has also provided a WMF vulnerability checker, download and install, it will tell if you’re vulnerable. Post is available here. According to the first comment it seems as though the vulnerability checker is triggering Norton’s auto-protect. (Norton detects it as “Bloodhound.Exploit.56”). (Which is a good sign…)
-
Workaround for the critical WMF zero-day exploit
The Windows Meta File (WMF) zero-day (0-day) exploit is apparently, VERY nasty, no user intervention required (unless running firefox or opera). Just VISITING a malicous site (viewing a malicious email with image…) would be enough to get the system owned. It sounds as though a FULL reinstall is the best solution. Sunbelt has had some coverage…
-
Merry Christmas and a Happy New Year
For those that read this I’d like to wish you all a Merry Christmas and a Happy New Year. I have several posts scheduled to come out each day through the 1st of the New Year, but will likely not be adding to that unless something big happens. I’ll also be taking the week away from scheduled computer appointments. I’m one of those people that has a hard time setting tasks aside, but this time of year is usually the best opportunity for me to have a week away from the typical routine of chasing computer problems.
I hope that everyone will have an opportunity during this Holiday season to reflect on those things that are truly important which aren’t necessarily those same things that we spend everyday working with.