Latest WMF flaw affects Internet Explorer 5.01 and 5.5
Microsoft has alerted users to a new WMF flaw
R E L A T E D   C O N T E N T
ADVERTISEMENT

Windows hit by yet another WMF hole

Older versions of Internet Explorer once again exposed

Tom Sanders in California, vnunet.com 08 Feb 2006
ADVERTISEMENT

Microsoft has issued a warning about a new vulnerability in the Windows Meta File (WMF) image format that affects older versions of Internet Explorer.

The vulnerability exists in IE 5.5 running on Windows 2000 and IE 5.01 on Windows ME.

Users of IE 6 or other Windows versions are not affected by this vulnerability, Microsoft emphasised in a security advisory. Roughly five per cent of the world's computers run IE 5.

While the vulnerability is new, it behaves in a similar way to the WMF flaw that Microsoft was forced to patch last month.

The vulnerability could allow an attacker to take control of a system through a specially crafted WMF image posted on a website or sent through a spam email. 

Microsoft was forced to publish an out-of-cycle security update in January to plug a first WMF vulnerability that affected all Windows versions. Attackers were actively exploiting the flaw at the time of the Microsoft patch release.

Bird fluPhoney email carries WMF Trojan  03 Feb 2006
AMDFailure to patch put users at risk  31 Jan 2006
MicrosoftRedmond dismisses new flaws as just 'performance issues'  11 Jan 2006
MicrosoftPatch Tuesday plugs two more holes  11 Jan 2006

All Bugs & Fixes

Like this story? Spread the news by clicking below:

Post this to Delicious del.icio.us    Post this to Digg Digg this    Post this to reddit reddit!

Permalink for this story
R E A D E R   C O M M E N T S

M A R K E T P L A C E
Sponsored links
F E A T U R E D   J O B S
| Aston Carter
Java, J2EE, Developer, Spring, Hibernate, London, city, Graduate. This is an amazing opportunity to join a successful city based team working at the cutting edge of development. My client is looking for strong Java/J2EE developers ... more >
| Aston Carter
E-Commerce, Greenfield, Agile, Java, J2EE, , JavaScript, SQL, London, City Graduate This is an exceptional opportunity for a talented Java, J2EE developer keen to work in a successful development team within arguable the best agile ... more >
| Rullion Computer Personnel Ltd
2nd Line Support Analyst London £35, 000 to £40, 500 My client is a global market leader in the Internet Applications Industry. The company is continually progressing and looking for areas of growth and this ... more >
| Rullion Computer Personnel Ltd
Security Architect / Information Security Specialist – St Albans - Global Leader - Shine At The Highest Level Security Solution Architect / Information Security Architect required by renowned blue-chip organisation offering the finest security projects ... more >
More job opportunities