~ U P D A T E : P A T C H N O W. Official patch links inside for Windows MetaFile Exploit ~~~~~~

[MBrown]

Is there a patch for Windows NT 4.0?

 

[stash]

Is there a patch for Windows NT 4.0?

You need a custom support agreement to receive patches for NT4, because it is out of support. CSAs are only available to customers with premier contracts.

 

[archcommus]

If I had already gotten this, would my fully updated copy of NOD32 have caught it in my daily morning full system scan?

 

[SnoPearL69]

I have Windows 2000 and I can't seem to get the patch as described. I have automatic update enabled to notify me to download any new updates, and nothing has come up so far. So I went to the Microsoft Update site, and after scanning my computer, it tells me that the only high priority update is Windows 2000 Service Pack 4 (which came out a long time ago I believe). I currently have SP3 installed. So... how am I supposed to get this patch? Looking through my add/remove programs also did not reveal anything to suggest that I already have this patch. Grrr!

 

[archcommus]

Originally posted by: SnoPearL69
I have Windows 2000 and I can't seem to get the patch as described. I have automatic update enabled to notify me to download any new updates, and nothing has come up so far. So I went to the Microsoft Update site, and after scanning my computer, it tells me that the only high priority update is Windows 2000 Service Pack 4 (which came out a long time ago I believe). I currently have SP3 installed. So... how am I supposed to get this patch? Looking through my add/remove programs also did not reveal anything to suggest that I already have this patch. Grrr!

Follow link from OP?

 

[SnoPearL69]

Oh, sorry, that was dumb of me. I see the light now, thanks

 

[mechBgon]

Originally posted by: SnoPearL69
I have Windows 2000 and I can't seem to get the patch as described. I have automatic update enabled to notify me to download any new updates, and nothing has come up so far. So I went to the Microsoft Update site, and after scanning my computer, it tells me that the only high priority update is Windows 2000 Service Pack 4 (which came out a long time ago I believe). I currently have SP3 installed. So... how am I supposed to get this patch? Looking through my add/remove programs also did not reveal anything to suggest that I already have this patch. Grrr!

Service Pack 3 isn't supported, so if you continue having problems, install SP4 first. There will be some other Critical security updates to get after SP4 is installed, so go back for a couple more rounds until the system's got them all

 

[mzkhadir]

WINE Still Vulnerable to WMF Exploit

ZDNet Blog posting by George Ou, stating that WINE is still vulnerable to the WMF flaw. From the article: "All applications launched inside Wine, Cedega, or Cross-Over Office are technically still exploitable. Wine runs on most x86 platforms, including Linux and the various BSDs. The surprising part about finding this flaw in Wine is that they implemented the entire Meta File API without realizing that this could be a security issue. Exploiting a Windows application running inside Wine depends on that application calling the vulnerable function with malicious data."


http://blogs.zdnet.com/Ou/index.php?p=146


slashdot.org

 

[xtknight]

I believe WINE actually just reads in DLLs itself, so any flaws MS made in the DLL, WINE also has. However WINE should be able to take in the new DLL just fine.

 

[harobikes333]

omg my school's computer teacher<-- He teacher the computer app. etc. Didn't even know what I was talking about when I asked him if they had fixed up the computers to prevent this exploit.

Then the next day he said something like the main computer tech guy for the entire school district told him to tell people not to check email... but he didn't even tell us all not to use internet, etc. Aka they don't know that their in for.>_< We do have some pretty good firewalls, etc. though but still.

 

[SVT Cobra]

There are two new exploits found...less vulnerable though

 

[stash]

They are not exploits. Exploits take advantage of vulnerabilites. These are not vulnerabilities either, since they are not exploitable. They are bugs that were discovered awhile ago during normal code review and were scheduled for inclusion in the next service pack, which is the normal practice.

 

[pyonir]

Thank you mechBgon!!

 

[WT]

Anyone know if this patch is available as an MSI ?? I know the unofficial patch was available in an MSI form, but we are having issues rolling out the official MS patch as an executable on the network. Thanks for the info ... thanks again for the post/updates, Mech !!

 

[Googer]

You can always count on mechBgon to give useful and very imformative posts!

 

[SagaLore]

Originally posted by: WT
Anyone know if this patch is available as an MSI ?? I know the unofficial patch was available in an MSI form, but we are having issues rolling out the official MS patch as an executable on the network. Thanks for the info ... thanks again for the post/updates, Mech !!

I don't see any MSI's available. What kind of problems are you having with the exe?

 

[firewall]

bump.

Mods, re-sticky this thread please.

 

[firewall]

bump