Windows MetaFiles still vulnerable - Security

Author

All Replies

tytfhtfjh

@telus.net

reply to redxii

Re: Windows MetaFiles still vulnerable

Hmmmmm this isnt a good situation

to forum · permalink · 2006-01-07 22:57:47 · (locked)

ZOverLord
Premium
join:2003-10-20
Minneapolis, MN

Meaning?

to forum · permalink · 2006-01-07 23:03:04 · (locked)

tytfhtfjh

@telus.net

reply to redxii
meaning this crap exists

to forum · permalink · 2006-01-08 04:38:39 · (locked)

ZOverLord
Premium
join:2003-10-20
Minneapolis, MN

said by tytfhtfjh :

meaning this crap exists

Any Chance you could answer this question?

»Has anyone installed the Nod WMF Patch for 98
--
Black, Grey and White Hats Unite here -> »testing.OnlyTheRightAnswers.com

to forum · permalink · 2006-01-08 05:06:39 · (locked)

caffeinator
Coming soon to a cup near you..
Premium
join:2005-01-16
WA, USA
kudos:3

Reviews:

·CenturyLink

3 edits

reply to redxii
i've tried the latest eset patch ..seems better.
I cant expect tooo much..GDI in 98 sukz.

Sorry, not very sober atm, but the latest eset patch, it's not that bad IMO. Still bit of a mem hog, but that's 98 memory handeling for ya. The man who writes all singular patches for Nod32 peeps made this..he's good.

New patch they have is better...Beats being open to exploit.
You don't have a choice. Patch, has an un-install if ya hate it.
--
"Only two things are infinite, the universe and human stupidity, and I'm not sure about the former." - A. Einstein

to forum · permalink · 2006-01-08 06:52:31 · (locked)

ZOverLord
Premium
join:2003-10-20
Minneapolis, MN

reply to redxii
Yep,

I have spent the better part of a few hours going to shall we say NOT the Internets Finest Web Sites "For Research Purpose :P" and can say some sites are launching as many as 10 .wmf files from one page, each one has a different payload.

I do pity the folks that can become infected that have not found or tried some sort of protection method from this. :-(
--
Black, Grey and White Hats Unite here -> »testing.OnlyTheRightAnswers.com

to forum · permalink · 2006-01-08 07:03:20 · (locked)

Dude111
An Awesome Dude
Premium
join:2003-08-04
USA
kudos:10

reply to redxii
Steve Gibson is saying that MICROSOFT purposely put this in Windows (I wouldnt be a bit surprised)

»media.grc.com/sn/sn-022-lq.mp3

16Bit Stream - 39Mins

Whadda ya think?

to forum · permalink · 2006-01-15 03:28:11 · (locked)

Marilla
I Am My Own Arbiter
Premium
join:2002-12-06
Belpre, OH

said by Dude111:

Steve Gibson is saying that MICROSOFT purposely put this in Windows (I wouldnt be a bit surprised)

»media.grc.com/sn/sn-022-lq.mp3

16Bit Stream - 39Mins

Whadda ya think?

What do I think? I think you didn't read a word of the forum before posting. That's what I think:
»- - > MS Metafile Backdoor !!! - -
--
I am the sole arbiter of what is important enough to spend my time on - not anyone else here, or anywhere else. You take care of yourself, and leave me to me, got it?

to forum · permalink · 2006-01-15 03:32:11 · (locked)

Dude111
An Awesome Dude
Premium
join:2003-08-04
USA
kudos:10

reply to redxii
Ah man!!!! I mi$$ed that thread!!!!!

Thank you my friend