Update: Windows zero-day flaw 'very dangerous,' experts say

With Vista at risk, eEye issues unofficial patch; attacks traced to Chinese hackersThe Windows zero-day bug now being used by attackers is extremely dangerous, security researchers said today, and ranks with the Windows Metafile vulnerability of more than a year ago on the potential damage meter. "This is a good exploit," Roger Thompson, CT

continue reading

Update: Windows zero-day flaw 'very dangerous,' experts say

The Windows zero-day bug now being used by attackers is extremely dangerous, security researchers said today, and ranks with the Windows Metafile vulnerability of more than a year ago on the potential damage meter.

continue reading

OpenOffice patches Windows Metafile hole

The vendors who distribute OpenOffice issued a patch this week to fix a Windows Metafile (WMF) vulnerability in the open-source productivity suite.

continue reading

Security Now 23: Mousetrap

Steve Gibson with the final word on the Windows Metafile (WMF) vulnerability, and a new program he's written to detect it in all versions of Windows. "It's now pretty clear that the ability to execute code in WMF graphics files was intentional - but we may never know why it's there." He's starting to back down now.

continue reading

Microsoft releases WMF patch for Vista !!!

Microsoft has just released a patch for Vista that fixes the Windows Metafile vulnerability that affects every version of Windows. Patches are available for Beta 1 (Build 5112) as well as the latest December CTP (Build 5270).

continue reading

Oops Steve Gibson did it Again

Steve Gibson is suggesting that the recent Windows MetaFile vulnerability was deliberately coded by Microsoft - aka a backdoor. Users in our Security Forum dissect the likelihood of Gibson's claims, and many of our resident security gurus come away unconvinced.

continue reading

Flaw Could Allow Hacker To 'Own Every Outlook User In The World In A Week'

The Outlook and Exchange vulnerability disclosed by Microsoft Tuesday has the potential to become a much more virulent problem than the long-hyped Windows Metafile bug patched last week, said one of the e-mail flaw's discoverers Wednesday.

continue reading

Microsoft's Newest Bug Could Be WORSE than the hyped WMF flaw

"The Outlook and Exchange vulnerability disclosed by Microsoft Tuesday has the potential to become a much more virulent problem than the long-hyped Windows Metafile bug patched last week, said one of the e-mail flaw's discoverers Wednesday."

continue reading