Microsoft WMF vulnerability patch (not for 98/Me)

[dbMark]

If you're wondering whether Microsoft will fix the bad file in the older 98/98se/Me computers, I saw this in the FAQ section: (underlines are my emphasis)

http://www.microsoft.com/technet/security/Bulletin/MS06-001.mspx

"Are Windows 98, Windows 98 Second Edition, or Windows Millennium Edition critically affected by one or more of the vulnerabilities that are addressed in this security bulletin?
No. Although Windows 98, Windows 98 Second Edition, and Windows Millennium Edition do contain the affected component, the vulnerability is not critical because an exploitable attack vector has not been identified that would yield a Critical severity rating for these versions."

Don't feel bad, Windows NT has reached end-of-life, even further along on its life cycle.

Possibly Microsoft released its patch early due to worldwide pressure and that fact that an alternate patch was developed by independent researchers. From press reports I've read, it seems the file updated is GDI32.DLL so maybe some computer guru could determine the best way all of us 98/Me users could update our computers ourselves. Somehow I doubt all we need to do is just swap the file out, maybe during a DOS boot, since WinMe still uses its original June 2000 version of that file.

For XP systems, the old GDI32.DLL file is dated 10/05/2005 and the new one, same size, is 12/28/2005.

dbMark

 

[dbMark]

I've been reading more (dangerous thing to do!) and see that Windows XP and 2003 are the most vulnerable systems since they are loaded by default with programs that try to read or interpret the WMF formats. So other Windows versions, including Millennium Edition, are not vulnerable to a clear attack vector... unless some software is added which tries to do so. Yeah, sure. Nice to feel [maybe] safe.

So far I've seen comments that the current version of Lotus Notes may be vulnerable, so look for them to come out with an update real soon if that's the case. If there's one, then there's probably many other applications too...

 

[smitee]

I wonder what NON-CRITICAL is; as defined EXACTLY in Microslush's vernacular. After reading several blogs on the new threat it seems MSPAINT is also a target..?
At any rate I am using Win95 and am probably on the low end of attack targets as well as being totally ignored by the company that made the product! I wish I was adventurous enough to try a different operating system..

Good Luck to both of you in you attempts to keep the M$ products afloat!

smitee