[Dshield] WMF Ilfak Guilfanov workaround

stu secmail at patchsupplier.dyndns.org
Sun Jan 1 14:07:28 GMT 2006


It's a sad day when patches have to come from the community instead of
the vendor :)

I have setup some rules to block WMF extensions/streams from the
firewall and used REGSVR32 /U SHIMGVW.DLL to unregister the dll
(however, not really practical) 

I would have thought using patches like this is extremely dangerous from
a security standpoint.

I suppose this is one way Microsoft is copying open source :)

-----Original Message-----
From: list-bounces at lists.dshield.org
[mailto:list-bounces at lists.dshield.org] On Behalf Of Paul Marsh
Sent: 31 December 2005 16:09
To: General DShield Discussion List
Subject: [Dshield] WMF Ilfak Guilfanov workaround


Morning All and Happy New Year's EVE or New Year's, what ever the case
maybe.

Has anyone tried http://www.hexblog.com/2005/12/wmf_vuln.html

Thanx, Paul



The information in this transmittal (including attachments, if any) is
privileged and confidential and is intended only for the recipient(s)
listed above. Any review, use, disclosure, distribution or copying of
this transmittal is prohibited except by or on behalf of the intended
recipient. If you have received this transmittal in error, please notify
me immediately by reply email and destroy all copies of the transmittal.
Thank you.

_________________________________________
Learn about Intrusion Detection in Depth from the comfort of your own
couch:
https://www.sans.org/athome/details.php?id=1341&d=1

_______________________________________________
send all posts to list at lists.dshield.org
To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list



More information about the list mailing list