Alternate WMF vulnerability patch for  WinNT,2000,XP, 2003 systems

Alternate WMF vulnerability patch for WinNT,2000,XP, 2003 systems

Secure Home | Search | About
 Anti-Virus Software    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Alternate WMF vulnerability patch for WinNT,2000,XP, 2003 systems Ian Kenefick 01-04-2006
Posted by Ian Kenefick on January 4, 2006, 3:43 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Quote NOD32 Switzerland

"Paolo Monti has released a temporary patch for the WMF vulnerability
( see Microsoft Security Bulletin 912840 ). This patch intercepts the
Escape GDI32 API in order to filter the SETABORTPROC (function number
9). It uses dynamic API hooks avoiding patching/modifying of the GDI32
code. Advantages of this approach: fully dynamic - no reboot is
required.
This patch also works on Windows 9x/ME. Administrator rights are
required to install it on WinNT,2000,XP, 2003 systems.

Installation: unzip the file WMFPATCH11.ZIP and run the provided
INSTALL.EXE file. Follow the instructions of the installer.

Uninstallation: go into Windows Control Panel, Add/Remove Programs,
select "GDI32 - WMF Patch" and remove it."

You can get it here http://www.nod32.ch/en/download/tools.php

--
Ian Kenefick
http://www.ik-cs.com
ian@ik-cs.com

Posted by Ian Kenefick on January 4, 2006, 3:55 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
On Wed, 04 Jan 2006 20:43:28 +0000, Ian Kenefick

>Quote NOD32 Switzerland
>
>"Paolo Monti has released a temporary patch for the WMF vulnerability
>( see Microsoft Security Bulletin 912840 ). This patch intercepts the
>Escape GDI32 API in order to filter the SETABORTPROC (function number
>9). It uses dynamic API hooks avoiding patching/modifying of the GDI32
>code. Advantages of this approach: fully dynamic - no reboot is
>required.
>This patch also works on Windows 9x/ME. Administrator rights are
>required to install it on WinNT,2000,XP, 2003 systems.
>
>Installation: unzip the file WMFPATCH11.ZIP and run the provided
>INSTALL.EXE file. Follow the instructions of the installer.
>
>Uninstallation: go into Windows Control Panel, Add/Remove Programs,
>select "GDI32 - WMF Patch" and remove it."
>
>You can get it here http://www.nod32.ch/en/download/tools.php

OOOOPS!!

The patch also works on Win9x platform.

--
Ian Kenefick
http://www.ik-cs.com
ian@ik-cs.com

Posted by louise on January 4, 2006, 4:14 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Ian Kenefick wrote:
> On Wed, 04 Jan 2006 20:43:28 +0000, Ian Kenefick
>
>
>>Quote NOD32 Switzerland
>>
>>"Paolo Monti has released a temporary patch for the WMF vulnerability
>>( see Microsoft Security Bulletin 912840 ). This patch intercepts the
>>Escape GDI32 API in order to filter the SETABORTPROC (function number
>>9). It uses dynamic API hooks avoiding patching/modifying of the GDI32
>>code. Advantages of this approach: fully dynamic - no reboot is
>>required.
>>This patch also works on Windows 9x/ME. Administrator rights are
>>required to install it on WinNT,2000,XP, 2003 systems.
>>
>>Installation: unzip the file WMFPATCH11.ZIP and run the provided
>>INSTALL.EXE file. Follow the instructions of the installer.
>>
>>Uninstallation: go into Windows Control Panel, Add/Remove Programs,
>>select "GDI32 - WMF Patch" and remove it."
>>
>>You can get it here http://www.nod32.ch/en/download/tools.php
>
>
> OOOOPS!!
>
> The patch also works on Win9x platform.
>
> --
> Ian Kenefick
> http://www.ik-cs.com
> ian@ik-cs.com

Win XP Pro - would this patch be preferable to the hexblog one?

TIA

Louise

Posted by Art on January 4, 2006, 4:21 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

>Win XP Pro - would this patch be preferable to the hexblog one?

Who knows? At least Ilfak's patch has received wide expert scrutiny
and acceptance. Stick with it.

Art

http://home.epix.net/~artnpeg


Posted by Art on January 4, 2006, 4:19 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
On Wed, 04 Jan 2006 20:43:28 +0000, Ian Kenefick

>This patch also works on Windows 9x/ME.

LOL! That should drive Virus Guy absolutely nuts! :)
He'll no doubt try to assasinate the author of such
blasphemy, so Paolo had better watch out!

Art

http://home.epix.net/~artnpeg


Similar ThreadsPosted
Microsoft patch for WMF vulnerability January 5, 2006, 3:16 pm
What to use to block outgoing ARP on Win98 systems ? October 22, 2007, 10:51 am
Anyone recognize these files found in Winnt directory? March 22, 2006, 8:01 pm
Testing for alternate data stream scanning November 25, 2005, 5:18 am
KIS 6 after NIS 2003 June 19, 2006, 4:54 pm
Win 2000 freezes July 17, 2005, 11:54 am
Windows 2000 September 20, 2008, 7:04 am
NAV 2003 update error September 9, 2005, 3:29 pm
re-installing SystemWorks 2003 March 28, 2006, 11:25 am
Windows 2000 virus July 9, 2007, 2:34 pm

The site map in XML format XML site map

Contact Us | Privacy Policy