Windows users -- important update for your system, posted 1/5/06

[jim]

Microsoft has released a patch for the WMF exploit (been in the news these past few days) found in all versions of Windows past 95.  It's important you all update your systems ASAP as this exploit opens the door for attackers to remotely compromise your system with a carefully crafted webpage, email, or image.

From the MS TechNet page (http://www.microsoft.com/technet/security/Bulletin/MS06-001.mspx)

A remote code execution vulnerability exists in the Graphics Rendering Engine because of the way that it handles Windows Metafile (WMF) images. An attacker could exploit the vulnerability by constructing a specially crafted WMF image that could potentially allow remote code execution if a user visited a malicious Web site or opened a specially crafted attachment in e-mail. An attacker who successfully exploited this vulnerability could take complete control of an affected system.  

News articles covering this bug: http://news.google.com/news?hl=en&q=wmf&sa=N&tab=wn

Finally, the patch for Windows, accessible through MS' Windows Update, with more information here: http://www.microsoft.com/athome/security/update/bulletins/200601_WMF.mspx

The patch will show up within Windows Update as: "Security Update for Windows XP (KB912919)"

All Windows users are urged to update ASAP, this bug is based on a flaw found in GDI32.dll, a file used by almost every Windows application--Firefox, Maxthon, Opera, Internet Explorer, all Office Applications, etc.   Be sure to keep your AntiVirus software up to date as well.  If you've let your Nortons subscription expire, either renew it to get access to their updates, or download a free AV program such as Avast! (http://www.avast.com/), which will let you run a Home Edition, with free unlimited updates, at no cost to you.

Jim

[OakParkSpartan]

Or, buy a Mac :-).