Windows Meta File (wmf) virus

[Egg Bramhill]

As wmf is a very common file used by graphic users I thought it best to advise you of a new security threat using these files.
For info:
http://news.bbc.co.uk/1/hi/technology/4566504.stm
http://www.websensesecuritylabs.com/...hp?AlertID=385
http://www.microsoft.com/technet/sec...ry/912840.mspx
http://secunia.com/advisories/18255/
Egg

[williamdruid]

Thank you Egg. Nice heads-up, Willy

[Soquili]

Thanks, Egg. I had not received an alert for this problem.

[MerryOtter]

Just to be clear, there is no threat "using" these files -- you are not "less secure" when you are exporting or importing WMF images.

Rather, someone with malicious intent can create a corrupted WMF file that (when viewed in Outlook Express, IE, and certain other programs) will open the door to intall trojan software on your computer.

Thus, it's not so much of particular concern to Xara users (just because we may be more likley to use the WMF format), but of equal concern to anyone who uses the Web. (Merely clicking a link to a page which has one of these intentionally mal-formed WMF images could potentially infect your computer.)

[Xhris]

Fix out on January 10th. http://www.cbc.ca/cp/business/060103/b010372.html

[ED]

Read all about it here from one of the best security experts at GRC.COM, plus get the latest patch NOW and listen to the mp3 files for a discussion regarding this issue.

http://www.grc.com/sn/notes-020.htm