|
Posted by Mĺlidők on January 2, 2006, 11:01 am
If you were Registered and logged in, you could reply and use other advanced thread options
> With the publication of the recent exploit of Windows *.wmf files, it
>would seem that the best way to avoid any problems would be to filter
>out or block any *.wmf files.
>
> This is easily done using Zone Alarm Pro for incoming mail. The
>problem is that I have found no way to block *.wmf files when browsing
>the net. I can't find any way to configure my router/firewall or Zone
>Alarm to provide any protection from web based exploits using *.wmf
>files.
>
> Does anyone have any suggestions how this could be done?
>
>
I believe that even if you filter by extension, .wmf, the file could
be renamed by the attacker as .jpg or .bmp and still get through.
Windows looks at the file format when rendering and will recognise it.
|