UNSOLVED
Fix latest Windows security problem
Steve Gibson, a well-known software guru, posted a small app to close the hole in Windows Metafiles that was recently uncovered. Download the file from the link on this page and install it. When Microsoft gets around to an official fix, you can uninstall this patch using the Add/Remove control panel.
For Windows XP SP2 and XP 64-bit ONLY!
http://www.grc.com/sn/notes-020.htm
You do not have to unregister a dll as is described in the red box on this same page. That was a prior attempt to fix the problem but the download makes this unnecessary.
Ron
For Windows XP SP2 and XP 64-bit ONLY!
http://www.grc.com/sn/notes-020.htm
You do not have to unregister a dll as is described in the red box on this same page. That was a prior attempt to fix the problem but the download makes this unnecessary.
Ron
436
0
Posted December 31st, 2005 20:00
I have posted a similar reference in the virus forum436
0
Posted December 31st, 2005 21:00
as an added measure I blocked any URLs with .wmf in them with my router. i know other files can be used, but hopefully that will limit the potential number of exploits I can actually connect to436
0
Posted December 31st, 2005 21:00
So I far I have not seen any issues with this temporary fix. I've surfed the net, read email, used Word 2003, played video with Windows Media Player...
(XPpro SP2 on Dimension 8400)
RonMessage Edited by RoHe on 12-31-2005 03:28 PM
436
0
Posted January 1st, 2006 13:00
I started using Opera (browser) until Mickeysoft gets the permanent fix out.
Inspiron 16 5630 Laptop and WD22TB4 Docking StationSelf-built desktop for recording studio application436
0
Posted January 1st, 2006 16:00
the fix on hexblog now works with w2k as well436
0
Posted January 1st, 2006 16:00
fire, a different browser won't help. if you download the file and open it, it's still game over. if you only download it and anything indexes it (like that google image thing a lot of people have) it's also game over. either unregister the dll or use this patch436
0
Posted January 2nd, 2006 16:00
Here is what I got from another forum, that I'm registered on.
"Yes, it's an OS issue but alternative browsers will display a warning before downloading the malicious content, IE will not. Of course, if a user accepts the download it's a moot point"
Inspiron 16 5630 Laptop and WD22TB4 Docking StationSelf-built desktop for recording studio application436
0
Posted January 2nd, 2006 17:00
fire, true ... but how often are you going to consider a jpg file a threat? email apps are also at risk164
0
Posted January 5th, 2006 19:00
Looks like MS released the patch a bit earlier than expected:
JRosenfeld
2 Intern
•
4383 Posts
436
0
Posted December 31st, 2005 19:00
It patches the Escape() function in gdi32.dll. The result of the patch is that the SETABORT escape sequence is not accepted anymore.