Consulting

Results 1 to 7 of 7

Thread: Microsoft Vulnerability

  1. 01-04-2006, 12:40 PM #1
    Jacob Hilderbrand
    Jacob Hilderbrand is offline
    Site Admin
    Jedi Master         VBAX Guru Jacob Hilderbrand's Avatar
    Joined
    Jun 2004
    Location
    Roseville, CA
    Posts
    3,712
    Location

    Microsoft Vulnerability

    There is a new Windows vulnerability... I know, what else is new. Anyways there is no patch yet for MS or Nortal so it is a concern.

    Read more: http://www.irongeek.com/i.php?page=videos/metasploitwmf

    Fix: Start > Run: regsvr32 -u %windir%\system32\shimgvw.dll

    Unregister this dll. It is a metafile rendering com file.



    Reply With Quote Reply With Quote
  2. 01-04-2006, 01:30 PM #2
    Killian
    Killian is offline
    VBAX Master Killian's Avatar
    Joined
    Nov 2004
    Location
    London
    Posts
    1,132
    Location
    Good call

    ... and I went on to do some very interesting surfing from that link


    bonus
    K :-)
    Reply With Quote Reply With Quote
  3. 01-05-2006, 01:18 PM #3
    Jacob Hilderbrand
    Jacob Hilderbrand is offline
    Site Admin
    Jedi Master     VBAX Guru Jacob Hilderbrand's Avatar
    Joined
    Jun 2004
    Location
    Roseville, CA
    Posts
    3,712
    Location
    Also you should disable images from any webmail you use and turn off the preview pane in OL or whatever email program you use. Just showing the image is enough.



    Reply With Quote Reply With Quote
  4. 01-05-2006, 01:30 PM #4
    Jacob Hilderbrand
    Jacob Hilderbrand is offline
    Site Admin
    Jedi Master     VBAX Guru Jacob Hilderbrand's Avatar
    Joined
    Jun 2004
    Location
    Roseville, CA
    Posts
    3,712
    Location
    Download this file. Run the checker to see if you are vulnerable, then run the patch to protect your PC. This patch is unofficial, but was verified by Nortan. MS should be releasing a patch today through windows update.

    http://www.vbaexpress.com/jacob/Patch.zip



    Reply With Quote Reply With Quote
  5. 01-05-2006, 03:16 PM #5
    Jacob Hilderbrand
    Jacob Hilderbrand is offline
    Site Admin
    Jedi Master     VBAX Guru Jacob Hilderbrand's Avatar
    Joined
    Jun 2004
    Location
    Roseville, CA
    Posts
    3,712
    Location
    The patch is up at microsoft.com/windowsupdate. Patch asap.



    Reply With Quote Reply With Quote
  6. 01-05-2006, 06:02 PM #6
    Bob Phillips
    Bob Phillips is offline
    Distinguished Lord of VBAX VBAX Grand Master Bob Phillips's Avatar
    Joined
    Apr 2005
    Posts
    25,453
    Location
    Anything to run to test if we are already infested?
    Reply With Quote Reply With Quote
  7. 01-05-2006, 06:22 PM #7
    Jacob Hilderbrand
    Jacob Hilderbrand is offline
    Site Admin
    Jedi Master     VBAX Guru Jacob Hilderbrand's Avatar
    Joined
    Jun 2004
    Location
    Roseville, CA
    Posts
    3,712
    Location
    Nothing that I saw.



    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules