« Dell Notebook Batteries Recalled | Main | There is no "MSN Messenger 8 Working BETA" ! »

Wednesday, December 28, 2005

Windows Metafiles (.WMF) Exploits

You might add unionseek[DOT]com to your host file. The site is using images, specifically .WMF files (Windows Metafiles), to carry a payload of trojans. Internet Explorer is vunerable, older versions of Firefox and Opera are also at risk but at least they prompt users before they launch external applications ("Windows Picture and Fax Viewer") to view the image. F-secure has the details here: http://www.f-secure.com/weblog/archives/archive-122005.html#00000752. The first I saw of it was at The Register: http://www.theregister.co.uk/2005/12/28/messenger_virus/.

Posted by Matthew Carrick at 9:54.30 AM EST | Permanent Link
| Categories: Alternative Applications, Best Practices, Security Alerts, Virus-Trojan-Worm Alerts