Skip to main content

Stand by to repel boarders on Port Eighty

Looks like it’s not a good day to be Microsoft. Again.

Without directly raising the spectre of another CodeRed-intensity wormflood, The Washington Post is reporting an advisory from Symantec: an unpatched WMF vulnerability is exploited and...

The exploit code, first posted on security mailing list Bugtraq, states that the included Internet address can successfully exploit a fully patched Windows XP system with a freshly updated [Symantec] Norton Anti-Virus.

(bracketed amendment in original)

Now would be a good time to hide your MS-Windows workstations behind a proxy, and order it to block anything named .wmf, claiming to be a WMF image, or file(1)ing as a WMF, since it seduces any graphical web browser running in BillSpace.

Comments

Leon RJ Brooks said…
Er... no.

Symantec/Norton didn’t detect it. Other virus makers may or may not be able to detect it. Nevertheless, the original vulnerability applies to every Windows-NT-architecture machine on the planet (NT, 2000, XP, 2003), regardless of its Symantecness or otherwise.
30 December, 2005 17:00
Post a Comment

Popular posts from this blog

every-application-is-part-of-a-toolkit at work

I have a LibreOffice Impress slideshow that I wish to turn into a narrated video. 1. export the slideshow as PNG images (if that is partially broken — as at now — at higher resolutions, Export Directly as PDF then use ‘pdftoppm’ (from the poppler-utils package) to do the same). 2. write a small C program (63 lines including comments) to display those images one at a time, writing a config file entry for Imagination (default transition: ‘cross fade’) based on when the image-viewer application (‘display,’ from the GraphicsMagick suite) is closed on each one; run that, read each image aloud, then close each image in turn. 3. run ‘Imagination’ over the config file to produce a silent MP4 video with the correct timings. 4. run ‘Audacity’ to record speech while using ‘SMPlayer’ to display the silent video, then export that recording as a WAV file. 4a. optionally, use ‘TiMIDIty’ to convert a non-copyright-encumbered MIDI tune to WAV, then import that and blend it with the speech (as a quiet b
1 comment
Read more

new life for an old (FTX) PSU, improved life for one human

the LEDs on this 5m strip happen to emit light centred on a red that does unexpectedly helpful things to (and surprisingly deeply within) a human routinely exposed to it. it has been soldered to a Molex connector, plugged into a TFX power supply from a (retired: the MoBo is cactus) Small Form Factor PC, the assorted PSU connectors (and loose end from the strip) have been taped over. the LED strip cost $10.24 including postage, the rest cost $0, the PSU is running at 12½% of capacity, consumes less power than a laptop plug-pack despite running a fan. trial runs begin today.
Post a Comment
Read more

boundaries

pushing the actual boundaries of the physical (not extremes, the boundaries themselves) can often remove barriers not otherwise perceived. one can then often resolve an issue itself, rather than merely stonewalling at the physical consequences of the issue.
Post a Comment
Read more