Very nasty new Windows exploit.

[Silanda]

I don't think this has been mentioned on here yet but there is a nasty new exploit that uses the windows picture viewer and WMF files. Most browsers are vunerable since they open the files through the vunerable windows component and it looks like it is really easy to get infected.

There is some info here: http://www.f-secure.com/weblog/

 

[Blacklash]

If you are using IE I strongly encourage you to disable active X as a general practice.

From what I understand that will thwart this exploit.

 

[karlotta]

If you are using IE I strongly encourage you to disable active X as a general practice.

From what I understand that will thwart this exploit.

Wrong. Its the WMF. ActivX is another can of worms.

 

[Blacklash]

Thank you for setting me straight,

I unregistered the appropriate DLL.

 

[karlotta]

with IE you can just go to a bad site and it will install automaticly! no promp, no user interaction!, Opera is in the same boat to a degree as FF 1.4 and under..
1.5FF is okish becuse of a bug! lol. stay ontop of this. http://www.f-secure.com/weblog/

 

[Bouncing Zabaglione Bros.]

User made temporary fix.

 

[Bouncing Zabaglione Bros.]

Microsoft has now released an official patch. Also available on Windows Update. Everyone running a MS OS needs to update as there are many exploits for this now in the wild, mostly being used to put trojan backdoors on people's PCs.

 

[suryad]

Yep I grabbed the patch the day it was released.