Jan 09 2006
2 More Windows Metafile Bugs
Microsoft recently patched a critical vulnerability in the way Windows shows certain graphic files. This vulnerability was so severe that Microsoft released the patch outside of their normal monthly update. So, if you haven’t updated yet please make sure that you update as soon as possible.
The new vulnerabilities are not as severe as the previous one, but deals with the same thing. All three flaws concern the way Windows renders images in the Windows Metafile (WMF) format used by some CAD (computer-aided design) applications. The old flaw could allow hackers to take control of Windows; these two bugs only cause the WMF-viewing software, typically Internet Explorer, to crash. Pretty much all of the current Windows versions are vulnerable to attack; the vulnerability has been confirmed in Windows XP, Service Pack 2; Windows Server 2003, Service Pack 1; and Windows 2000, Service Pack 4.