|
Warning: Microsoft Windows WMF Handling Arbitrary Code Execution - Exploit In the Wild |
|
Thursday, 29 December 2005
by Michel Roth
|
|
A vulnerability has been discovered in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to an error in the handling of corrupted Windows Metafile files (".wmf"). This can be exploited to execute arbitrary code by tricking a user into opening a malicious ".wmf" file in "Windows Picture and Fax Viewer" or previewing a malicious ".wmf" file in explorer (i.e. selecting the file). This can also be exploited automatically when a user visits a malicious web site using Microsoft Internet Explorer.
-This unpatched vulnerability is currently being exploited in the wild.-
A workaround is to not open or preview untrusted ".wmf" files and set security level to "High" in Microsoft Internet Explorer.
Read the full advisory here and study the exploit code here.
Updated: Read the Microsoft Advisory here.
|
