Security news and information

Not only has Ilfak Guilfanov released a patch for this vulnerability, but he also created a program that will let you know if your computer is vulnerable. You can find information about this vulnerability checker here:

http://www.hexblog.com/2006/01/wmf_vulnera…ty_checker.html

For a concise guide on installing the patch, disabling the Shimgvw.dll, and checking your system you should read our WMF vulnerability guide here:

How to protect yourself from the Windows Metafile Vulnerability

Tags: No Tags

An unofficial patch for the WMF vulnerability patch has been released. This program will patch in memory the Escape() routine of GDI32.dll so that it will not accept the SETABORT escape sequence that is being used to exploit this vulnerability.

You can get the patch here:

http://www.hexblog.com/security/files/wmffix_hexblog13.exe

This patch has been tested and works as advertised and is supported under Windows 2000, XP 32-bit, XP 64-bit, and Windows Server 2003. This patch should be installed by every Windows users until Microsoft releases an official patch.

Tags: No Tags