Zero-day WMF flaw underscores patch problems

Zero-day WMF flaw underscores patch problems
Robert Lemos, SecurityFocus 2006-01-12

For four days in January, network administrators and security-savvy home users had a choice: Download and install an unofficial open-source fix for the critical flaw in the Windows Meta File (WMF) format or wait an estimated week for an official patch from Microsoft.

Expand all | Post comment

What Microsoft needs to be doing... 2006-01-12
Eric (2 replies)

Re: What Microsoft needs to be doing... 2006-01-13
Matthew Murphy (1 replies)

Re: Re: What Microsoft needs to be doing... 2006-01-13
Eric

Re: What Microsoft needs to be doing... 2006-01-13
Anonymous

Zero-day WMF flaw underscores patch problems 2006-01-12
Penguinisto

Alternative solution 2006-01-13
mxb (2 replies)

Re: Alternative solution 2006-01-13
DSMatthews

Re: Alternative solution 2006-01-13
Anonymous

Make'em pay! 2006-01-13
assurbanipal

The Squander of MS Admins && Users 2006-01-13
Anonymous (1 replies)

Re: The Squander of MS Admins && Users 2006-01-16
Anonymous (1 replies)

Re: Re: The Squander of MS Admins && Users 2006-01-17
Penguinisto

Does any one see this 2006-01-13
Anonymous

where come from a zero-day flaw 2006-01-15
lucmars

Patch from Guilfanov was not the only one 2006-01-16
Juha-Matti Laurio

AV vendor ESET released their own patch on 4th January as a ZIP package too, and it was reportedly working in Windows 98/98SE systems too.

The download link was removed after the official MS06-001 release, only one day later on Thursday.

Additionally, the official press release has been updated due to new situation as well at

http://www.eset.com/about/press.htm#media

?> (January 4, 2005).

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11368/32967#32967

Unofficial fix eliminates GDI32 Escape() functionality in Windows 98SE 2006-01-16
Juha-Matti Laurio