Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Zero-day WMF flaw underscores patch problems
Robert Lemos, SecurityFocus 2006-01-12

For four days in January, network administrators and security-savvy home users had a choice: Download and install an unofficial open-source fix for the critical flaw in the Windows Meta File (WMF) format or wait an estimated week for an official patch from Microsoft.

Comments Mode:
What Microsoft needs to be doing... 2006-01-12
Eric (2 replies)
Re: What Microsoft needs to be doing... 2006-01-13
Matthew Murphy (1 replies)
Alternative solution 2006-01-13
mxb (2 replies)
Re: Alternative solution 2006-01-13
DSMatthews
Great idea!

If the update profiles your system it can tell you what it has been tested against, then M$ can focus on testing the systems and apps that are used most, then get on to the rest later.

As soon as somthing is signed off as tested the update servers know about it and they can compare the realtime list against your config.

You could have a choice of using untested, beta tested or safe.

It would be MUCH faster!

Taking down the servers the black hats use is a good idea too, wipe them out like it was a war.

Screw the legal issues, get the DOD to DOS the bastards.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11368/32956#32956
Re: Alternative solution 2006-01-13
Anonymous
Make'em pay! 2006-01-13
assurbanipal
The Squander of MS Admins && Users 2006-01-13
Anonymous (1 replies)
Re: The Squander of MS Admins && Users 2006-01-16
Anonymous (1 replies)
Does any one see this 2006-01-13
Anonymous
Patch from Guilfanov was not the only one 2006-01-16
Juha-Matti Laurio







 

Privacy Statement
Copyright 2009, SecurityFocus