Saturday, January 07, 2006

Windows Security flaw: WMF flow

Nearly one hundred different instances of exploitation of "WMF flow", a newly discovered vulnerability, have been found. Frequently it messes up with the Windows 'picture viewing' capabilities

When it hits, the screen says: "Congratulations, you're infected!" and the computer is no longer in your control.

WMF flow has root access and you may end up having to re-build the machine from scratch, even if your machine had been up-to-date in terms of software patches, anti-virus and anti-spyware software.

'...exploit has so many variants that anti-virus firms are having a difficult time keeping up with the exploit's changes in attack code.'

An official WMF Vulnerability update from Microsoft is now available. See more info and patches for various flavors of Windows here.

Or just go to http://update.microsoft.com/ to pick up the right update automatically.

The patch requires that the PC be rebooted.

After applying the Microsoft's patch, go to Start > Run, paste there the following line:

regsvr32 shimgvw.dll

and press OK. You should see the following message: 'DllRegisterServer in shimgvw.dll succeeded.'

All your Windows 'picture viewing' capabilities are back to normal now.

0 Comments:

Post a Comment

<< Home