more windows WMF vulnerabilities?

jdport

Senior member
Oct 20, 2004
710
0
71
According to this little article, at least 2 more WMF exploits remain following the microsoft patch to "fix" the WMF vulnerability... has anybody seen any more information on this anywhere? I was just pointed to this blurb by a friend but it doesn't give much information and I haven't seen anything posted about it anywhere else yet...

http://www.osnews.com/story.php?news_id=13247

 

jjones

Lifer
Oct 9, 2001
15,424
2
0
"A Microsoft spokesperson insists the publicly released code can simply cause a denial-of-service crash.

"As it turns out, these crashes are not exploitable but are instead Windows performance issues that could cause some WMF applications to unexpectedly exit. These issues do not allow an attacker to run code or crash the operating system. They may cause the WMF application to crash, in which case the user may restart the application and resume activity," said Lennart Wistrand, lead security program manager in the MSRC (Microsoft Security Response Center).

In a blog posting, Wistrand said Microsoft had already identified the issues as part of its ongoing code maintenance and is evaluating them for inclusion in the next service pack for the affected products."