patch for the WMF vulnerability

NICK ADSL UK · Jan 4, 2006

NOD 32 - WMF Patch
by Paolo Monti

Paolo Monti has released a temporary patch for the WMF vulnerability ( see Microsoft Security Bulletin 912840 ). This patch intercepts the Escape GDI32 API in order to filter the SETABORTPROC (function number 9). It uses dynamic API hooks avoiding patching/modifying of the GDI32 code. Advantages of this approach: fully dynamic - no reboot is required.

This patch also works on Windows 9x/ME. Administrator rights are required to install it on WinNT,2000,XP, 2003 systems.

Installation: unzip the file WMFPATCH11.ZIP and run the provided INSTALL.EXE file. Follow the instructions of the installer.

Uninstallation: go into Windows Control Panel, Add/Remove Programs, select "GDI32 - WMF Patch" and remove it.
Click to expand...

More Info & Download»

Insomniac · Jan 4, 2006

How typical, someone fixes a problem Micro$$oft is aware of before they do.

And what's Micro$$oft's suggestion, disable Windows Picture and Fax Viewer! What's wrong with these people?

DavidGP · Jan 4, 2006

TBH Insomniac, MS have a duty of care to customers to test any patch they ( well in most cases are told of by 3rd parties ) are aware of before release, SADLY this means they are usually a week or so to late, while others can just issue patches and dont have any comback if they go pairshaped on you, while if MS release something and it goes funky the internet community hang them............... not to say these patches are not good as Ilfak Guilfanov's work is renowned and I'm using his patch now.

Not potecting MS as they have the resources to test and issue these things quicker IMO, but as the big bad wolf they have a fine line to walk these days, with all the critisism?

Insomniac · Jan 4, 2006

Yes, I understand and see your point, but they've known about this for a while.

And it's their code and responsibility. I guess I should be surprised, sadly nothings new.

DavidGP · Jan 4, 2006

Insomniac said:

And it's their code and responsibility. I guess I should be surprised, sadly nothings new.
Click to expand...

Very true and one reason I have always taken an os as still being beta, even if final as they are never finished.

Insomniac · Jan 4, 2006

That's a good way to look at it, a work in progress, albeit very slow sometimes.

Brandon · Jan 4, 2006

KAV 5.0 Windows products patched for .wmf vulnerability

Patches have been issued for Kaspersky AV Personal 5.0, Kaspersky Personal Security Suite, Kaspersky AV Personal Pro 5.0, Kaspersky AV for Windows Workstations 5.0, Kaspersky AV for Windows File Servers 5.0. This ensures that the product will provide protection against the Microsoft Windows .wmf vulnerability.

The patches mean that Kaspersky Anti-Virus will be able to to scan wmf-files in real-time protection mode. Previously, such files were considered not to be vulnerabile to infection, and were therefore not scanned in real-time protection mode.

The kav_pers_patch.exe patch applies to Kaspersky Anti-Virus Personal from version 5.0.121 and upwards and Kaspersky Personal Security Suite version 1.1.53 and upwards. For KAV Personal it is recommended to install it on version 5.0.388, 5.0.390.

The patch kav_ppro_patch.exe is applicable to Kaspersky Anti-Virus Personal Pro starting from version 5.0.121. It should be installed on versions 5.0.388, 5.0.390.

The patch_all_wks_to_5.0.xxx.exe patch applies to Kaspersky Anti-Virus for Windows Workstations versions 5.0.145 and upwards. It should be installed on version 5.0.225.

The patch_all_fs_to_5.0.xx.exe patch applies to Kaspersky Anti-Virus for Windows File Servers, versions 5.0.33 and higher. It should be installed on version 5.0.72.

The patches replace avlib.ppl, and do not change the product version. You must have Administrator privileges in order to install the patch. Once the product has been installed, you should reboot (a prompt will be displayed).
Click to expand...

News & Download

star17 · Jan 4, 2006

http://www.majorgeeks.com/Ilfaks_WMF_Vulnerability_test_d4917.html

http://www.majorgeeks.com/Ilfaks_WMF_Metafile_Vulnerability_Hotfix_d4918.html

Insomniac · Jan 4, 2006

Wow, nice utilities, thanks for the links.

Log in or Sign up

patch for the WMF vulnerability

NICK ADSL UK MajorGeeks Forum Administrator Staff Member

Insomniac Billy Ray Cyrus #1 Fan

DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

Insomniac Billy Ray Cyrus #1 Fan

DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

Insomniac Billy Ray Cyrus #1 Fan

Brandon controlmind

star17 MajorGeek

Insomniac Billy Ray Cyrus #1 Fan