Re: MS (in)security warning



Art wrote:


BTW, for anyone interested in trying out filtering methods, I put up a benign WMF file at the top of my web page. You have to use IE for the test since all you see with Firefox and Opera is the text TEST WMF FILE. With IE you see the graphic image rendered, and when you click on it, you see a small popup offering some options, such as to Save or Print the image file. Presumably, a working filter would block the download ... you would be unable to Save ot Print the image. The image file is named IAMHAPPY.WMF


Art,

Here is another link for your info list:
  (http://secunia.com/advisories/18255/)

1) Has anyone seen this exploit with an email client such as Outlook, OE, Opera, Thunderbird, Netscape, etc.?

2) Is there anyone with half a brain who still thinks that using HTML, or God forbid EML, for email is a good idea?

Ron :)
.



Relevant Pages

  • Re: MS (in)security warning
    ... >> I put up a benign WMF file at the top of my web page. ... The image file is named IAMHAPPY.WMF ... and I don't know how to implement the filter. ... Art ...
    (alt.comp.anti-virus)
  • Re: MS (in)security warning
    ... >>> with Firefox and Opera is the text TEST WMF FILE. ... >>> to Save or Print the image file. ... > at it and I don't know how to implement the filter. ...
    (alt.comp.anti-virus)
  • Re: A Very Dangerous Worm in Windows Metafile Images (WMF)
    ... >>> I've finally installed Opera ... ... > Doesn't matter, it's picture links that get you, and Opera will ... The display of wmf images by Opera can also be affected by whether the ... The wmf file types are ...
    (sci.electronics.design)
  • Re: A Very Dangerous Worm in Windows Metafile Images (WMF)
    ... >> Doesn't matter, it's picture links that get you, and Opera will ... >Opera can be set to automatically download application/x-msmetafile ... >The display of wmf images by Opera can also be affected by whether the ... The wmf file types are ...
    (sci.electronics.design)