D3ads Posted January 6, 2006 Report Share Posted January 6, 2006 There is a really bloody nasty security hole in Windows at the moment, that uses malformed WMF files to execute arbitrary code on your system. The bad thing about this is that simply viewing an effected image will cause this security hole to execute. Even us using Firefox aren't 100% safe; the image won't fire up straight away like on IE, but if you later happen to browse your cache and hit that file... yeah, not safe. http://www.microsoft.com/technet/securi ... 6-001.mspx Download: http://www.microsoft.com/downloads/deta ... laylang=en Quote Link to comment Share on other sites More sharing options...
RD Posted January 6, 2006 Report Share Posted January 6, 2006 And for evrybody that uses XP, you already got it installed automatically. Quote Link to comment Share on other sites More sharing options...
D3ads Posted January 6, 2006 Author Report Share Posted January 6, 2006 And for evrybody that uses XP, you already got it installed automatically. No you don't, that's the whole point, the leak is in the original, Service Pack 1 and 2... Quote Link to comment Share on other sites More sharing options...
Fletch Posted January 6, 2006 Report Share Posted January 6, 2006 And for evrybody that uses XP, you already got it installed automatically. No you don't, that's the whole point, the leak is in the original, Service Pack 1 and 2... I think RD's point was that if you had Auto Updates on (which I can assume most people on this forum do), you already got the security fix downlaoded back in November. My service log says it came out on November 7th and I had it installed on the 9th. Quote Link to comment Share on other sites More sharing options...
D3ads Posted January 6, 2006 Author Report Share Posted January 6, 2006 Don't have Auto-updates on actually, I'm sure I'm not the only one (even though this is my dad's pc.. heh) Quote Link to comment Share on other sites More sharing options...
Bic-B@ll Posted January 6, 2006 Report Share Posted January 6, 2006 auto updates are for losers Quote Link to comment Share on other sites More sharing options...
Lurker Posted January 6, 2006 Report Share Posted January 6, 2006 I'm still on SP1... I'm a rebel. Quote Link to comment Share on other sites More sharing options...
Thrik Posted January 7, 2006 Report Share Posted January 7, 2006 Erm.. D3 is kind of right in that there is a massive vulnerability with XP right now, but somehow managed to link to the completely wrong security bulletins? The correct one is here and dated January 5th, vital for any XP users as quite literally viewing a suspicious image (ie: I could post it in this thread right now) can screw the user over -- and yes, it should automatically update. Ask hinkey all about it, as far as I'm aware he managed to trojan a few people by experimenting with it. xD Quote Link to comment Share on other sites More sharing options...
D3ads Posted January 7, 2006 Author Report Share Posted January 7, 2006 Oh I didn't realise there was a more recent version out, I just copied the post from RUST and found the link on Google Main post edited, sorry about that. Quote Link to comment Share on other sites More sharing options...
Fletch Posted January 7, 2006 Report Share Posted January 7, 2006 Auto Update for the win. Seriously, there isn't a good reason not to have it on. Windows doesn't have any minor bugs anymore. Every update seems to fix some vulnerability that can toast your machine. Quote Link to comment Share on other sites More sharing options...
skdr Posted January 9, 2006 Report Share Posted January 9, 2006 Auto Update for the win. Seriously, there isn't a good reason not to have it on. Windows doesn't have any minor bugs anymore. Every update seems to fix some vulnerability that can toast your machine. QFT Quote Link to comment Share on other sites More sharing options...
D3ads Posted January 9, 2006 Author Report Share Posted January 9, 2006 Auto Update for the win. Seriously, there isn't a good reason not to have it on. Windows doesn't have any minor bugs anymore. Every update seems to fix some vulnerability that can toast your machine. Auto-update is actually enabled on here it just does it automatically at a set time which is why I never knew it was on, so I ended up installing the updates twice.. oops. Oh well, no harm done. Dont have Auto-update enabled on my own computer though 'cause I never use the Internet on there. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.