|
Posted by Todd H. on January 2, 2006, 11:40 pm
If you were Registered and logged in, you could reply and use other advanced thread options
> Has anyone checked out the "unofficial" WMF exploit patch found on the
> NIST website? Does it do anything worth trying?
>
> Linked from their article on :
> http://www.nist.org/news.php?extend.50
>
> Closest link I think is:
>
> http://www.nist.org/download.php?list.2%3Cbr%20/%3E
>
> The page says that you still need to unregister shimgwv.dll.
> Naturally, what is really needed is the ability to get back to
> business as usual. (I've been amazed at how many things apparently use
> shimgwv for image rendering.)
>
> Thanks for thoughts
I was hesitant and finally deployed the patch on my machines once it
showed up in the SANS handler's diary as having be pored over by one
of their folks.
http://isc.sans.org/diary.php?storyid=993
--
Todd H.
http://www.toddh.net/
|