Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
    Digg this story   Add to del.icio.us  
Microsoft fixes imperfect picture flaw
Published: 2005-11-08

If a picture is worth a thousand words, with the latest Windows vulnerability, some of those words might be "compromised," "rooted" and "infected."

On Tuesday, Microsoft released a patch for a flaw in the Windows Metafile and Enhanced Metafile image formats. The vulnerability could allow a specially created image in the WMF or EMF formats to compromise a computer running any recent version of Windows, including Windows XP Service Pack 2 and Windows 2003 Service Pack 1, the software giant said in advisory MS05-053.

This is not the first time that Windows has had to deal with image format vulnerabilities. Last year, Microsoft closed a flaw in how its operating system handled JPEG images. Earlier this year, the company closed holes in how its operating system displayed the portable network graphics (PNG) format. Security firm eEye Digital Security, which found the latest flaw, even penned a Vogonesque ode to the PNG flaw.

If the latest flaw is used in an attack, the image could be part of a malicious Web site or sent in an e-mail, Microsoft said in the advisory. The patch is available for download or through Windows Update.



Posted by: Robert Lemos
    Digg this story   Add to del.icio.us  
 
Comments Mode:







 

Privacy Statement
Copyright 2008, SecurityFocus