Linked by Thom Holwerda on Sat 31st Dec 2005 16:55 UTC
Windows Microsoft acknowledged late Wednesday the existence of a zero-day exploit for Windows Metafile images, and said it was looking into ways to better protect its customers. Even worse, by the end of the day nearly 50 variants of the exploit had already appeared. One security company said the possibilities were endless on how the flaw could be exploited. 'This vulnerability can be used to install any type of malicious code, not just Trojans and spyware, but also worms, bots or viruses that can cause irreparable damage to computers,' said Luis Corrons of Panda Software.
Thread beginning with comment 80829
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[3]: Perfect example!
by hal2k1 on Mon 2nd Jan 2006 09:17 UTC in reply to "RE[2]: Perfect example!"
hal2k1
Member since:
2005-11-11

"obviously if you are using a legacy filesystem with no defined NT SDDL ACL, the object will be instantiated by the system with a blank ACL"

... where a legacy filesystem is defined as? anything other than NTFS perhaps? meaning floppy disks, USB sticks, CDROMs and data DVD's perchance? meaning that Sony can install a rootkit because it came to the system via CDROM, possibly?

There are hundreds of exploits of Windows supposed security that have nothing at all to do with buffer overflows. They are just plain and simple holes in the system - the system whose API was designed circa 1995 (not Windows NT - the API is still Win'95 design).

Reply Parent Bookmark Score: 1