SpywareDr
January 2nd, 2006, 09:18 AM
A temporary WMF Exploit patch is available. Started reading about it on Steve Gibson's site: Security Now
http://www.grc.com/sn/notes-020.htm More about this WMF Patch can be found on the author's site (Ilfak Guilfanov):Windows WMF Metafile Vulnerability HotFix
http://www.hexblog.com/2005/12/wmf_vuln.html Ilfak has also written a little utility named:WMF Vulnerability Checker
http://www.hexblog.com/2006/01/wmf_vulnerability_checker.html Tip: For those of you that have used the CMD:regsvr32 -u shimgvw.dllyou can now run the CMD:regsvr32 shimgvw.dllto restore the "Thumbnail" view in Windows Explorer and Window's Image and FAX viewer.
Note: An ongoing discussion about this exploit can be vound in the following VirtualDr thread:New Windows Metafile (WMF) 0-day exploit in the wild
http://discussions.virtualdr.com/showthread.php?t=199345
http://www.grc.com/sn/notes-020.htm More about this WMF Patch can be found on the author's site (Ilfak Guilfanov):Windows WMF Metafile Vulnerability HotFix
http://www.hexblog.com/2005/12/wmf_vuln.html Ilfak has also written a little utility named:WMF Vulnerability Checker
http://www.hexblog.com/2006/01/wmf_vulnerability_checker.html Tip: For those of you that have used the CMD:regsvr32 -u shimgvw.dllyou can now run the CMD:regsvr32 shimgvw.dllto restore the "Thumbnail" view in Windows Explorer and Window's Image and FAX viewer.
Note: An ongoing discussion about this exploit can be vound in the following VirtualDr thread:New Windows Metafile (WMF) 0-day exploit in the wild
http://discussions.virtualdr.com/showthread.php?t=199345