When the going gets weird, the weird turn pro. - Hunter S. Thompson

11 January 2006

WMF Redux

(sigh) Here we go again.
Just days after Microsoft patched a critical vulnerability in the way the Windows operating system renders certain types of graphics files, a hacker has published details of two new flaws that affect the same part of the operating system.

The new vulnerabilities were posted to the Bugtraq security mailing list today by a hacker using the name "cocoruder."

All three flaws concern the way Windows renders images in the Windows Metafile (WMF) format used by some CAD (computer-aided design) applications, but these latest flaws are far less serious than the vulnerability that Microsoft patched last week, according to security experts. That vulnerability was serious enough to cause Microsoft to take the unusual step of releasing an early patch for the problem, ahead of its monthly security software update.
I think a policy of "watchful waiting" is probably in order for this one.

PCWorld.com - Two New Windows Metafile Bugs Found

No comments: