Latest WMF flaw affects Internet Explorer 5.01 and 5.5
Microsoft has alerted users to a new WMF flaw
R E L A T E D   C O N T E N T

Free email newsletters




ADVERTISEMENT

Windows hit by yet another WMF hole

Older versions of Internet Explorer once again exposed

Tom Sanders in California, vnunet.com 08 Feb 2006
ADVERTISEMENT

Microsoft has issued a warning about a new vulnerability in the Windows Meta File (WMF) image format that affects older versions of Internet Explorer.

The vulnerability exists in IE 5.5 running on Windows 2000 and IE 5.01 on Windows ME.

Users of IE 6 or other Windows versions are not affected by this vulnerability, Microsoft emphasised in a security advisory. Roughly five per cent of the world's computers run IE 5.

While the vulnerability is new, it behaves in a similar way to the WMF flaw that Microsoft was forced to patch last month.

The vulnerability could allow an attacker to take control of a system through a specially crafted WMF image posted on a website or sent through a spam email. 

Microsoft was forced to publish an out-of-cycle security update in January to plug a first WMF vulnerability that affected all Windows versions. Attackers were actively exploiting the flaw at the time of the Microsoft patch release.

Bird fluPhoney email carries WMF Trojan  03 Feb 2006
AMDFailure to patch put users at risk  31 Jan 2006
MicrosoftRedmond dismisses new flaws as just 'performance issues'  11 Jan 2006
MicrosoftPatch Tuesday plugs two more holes  11 Jan 2006

All Bugs & Fixes

Like this story? Spread the news by clicking below:

Post this to Delicious del.icio.us    Post this to Digg Digg this    Post this to reddit reddit!

Permalink for this story
R E A D E R   C O M M E N T S

M A R K E T P L A C E
Sponsored links
F E A T U R E D   J O B S
Welwyn Garden City, Hertfordshire, United Kingdom | Tesco.com
CMS Engineer - Welwyn Garden CityWho's behind the world's most successful online retailer? Just over 10 years ago we started Tesco.com (aka Dotcom). Today, we've an incredible 750,000 active customers and sales at just under ... more >
Durham, United Kingdom | Durham University
Durham University Shaped by the past, creating the future Ocean-Bottom Instrumentation Consortium Software Developer £25,888 - £33,780 per annum Applications are invited for a software developer to join the Ocean-Bottom Instrumentation Consortium (http://www.obs.ac.uk/), who provide ... more >
Aylesbury, Buckinghamshire, United Kingdom | Grass Roots
SQL Database Administrator - Aylesbury - £DOEGrass Roots are one of the Sunday Times Top 100 companies to work for (2007 and 2008). Established in 1980, we're part of the Grass Roots Group, which is ... more >
Berkshire, Reading, United Kingdom | Foster Wheeler
Analyst Programmer - Applix TM1 -Competitive Salary - Reading Foster Wheeler is a leading international project management, engineering and construction organisation with global construction capabilities working on major projects within upstream oil & gas, midstream ... more >
More job opportunities