resource center
  See your link here
|
Computerworld -
Attempts to exploit a flaw in Windows WMF files have "become increasingly serious over the past two days" with "significant developments ... in the past few hours," according to a New Year's Day alert issued by iDefense Inc.
"Risk has gone up significantly in the past 24 hours for any network still not protected against the WMF exploit," it said.
Attacks are carried out through a vulnerability in the way Windows XP and Windows Server 2003 handle corrupted Windows Metafile graphic files (see "Malicious hackers exploit zero-day Windows flaw"). So far, it appears that Windows Data Execution Prevention software or disabling Windows' shimgvw.dll file will block WMF attacks to date, according to iDefense.
The HappyNY.A attack has been using an e-mail with the subject "happy new year" and includes the attached file HappyNewYear.jpg. That file, actually a hostile WMF file, installs the Bifrose backdoor Trojan in the victim's system when the file executes.
Websense Security Labs says it is tracking "several dozen" Web sites seeking to use the WMF vulnerability. More information is available on the Websense blog at www.websensesecuritylabs.com/blog.
"WMF exploitation has started to take off in the wild," iDefense spokesman Ken Dunham said in an e-mail statement. "Dozens if not hundreds of WMF exploiting sites are likely to be reported in the coming days and weeks.
"A new, upgraded WMF exploit was posted to the public today and is highly functional," Dunham added.
For more on this, see "How to protect against Windows WMF attacks".
Share our Strength
Download Now
Extending Client Refresh - 11 Steps to Maximize Savings
Register Now!
Can Heuristic Technology Help Your Company Fight Viruses?
What is Heuristic Technology and how can it help safeguard your business against viruses? Learn more.
Lower the Cost and Complexity of a Mobile Workforce through Automation
Download This Resource Now!
Eradicate Spam & Gain 100% Asurance of Clean Mailboxes
Get this paper now!
Managing Mobility: Improve Data Security, Compliance and Manageability
Download This Resource Now!
Mastering eDiscovery: The IT Manager's Guide to Preservation, Protection & Production
Get this paper now!
Consolidate Your Servers and Storage to Lower Costs with Oracle Database 11g
Register for this webcast!
Not Just Words: Enforce Your Email and Web Acceptable Usage Policies
Get this paper now!
The Commercialization of ITIL: Lessons Learned
Register for this event today!
Sign up to receive updates on the latest Security resources
CIO
Computerworld
CSO
DEMO
GamePro
Games.net
IDC
IDG
IDG Connect
IDG Knowledge Hub
IDG TechNetwork
IDG Ventures
IDG.net
InfoWorld
ITwhitepapers
ITworld
JavaWorld
LinuxWorld
Macworld
Network World
PC World
The Industry Standard
Copyright © 1994 - 2009 Computerworld Inc. All
rights reserved. Reproduction in whole or in part in any form or medium
without express written permission ofComputerworld Inc. is prohibited. Computerworld and Computerworld.com and the respective logos are trademarks of International Data Group Inc. |
