Microsoft WMF vulnerability 1

[porkchopexpress]

This is merely an information post and not a personal encouragement to install this 'unofficial' patch.

SANS internet storm centre is offering an MSI version of Ilfak Guilfanov's unofficial patch for the Windows .WMF flaw, for anyone who is concerned about the effect of this flaw the link is worth a look.

SANS also report that Lotus Notes versions 6.x and higher is vulnerable to the WMF 0-day exploit.

Look here for further info.

http://isc.sans.org/diary.php

I stress again that i am not promoting this unofficial patch but wish to make people aware of the option, many unofficial patches are completely bogus but it's a rare occasion for one to get such strong backing from SANS.

 

[porkchopexpress]

http://www.microsoft.com/technet/security/Bulletin/MS06-001.mspx

 

[markdmac]

Official Microsoft patch is being released today 1/5/2006 at 2:00PM PST. Don't bother with the third party patch and go with the official Microsoft solution.

I hope you find this post helpful.

Regards,

Mark

 

[porkchopexpress]

Thats what is in the link and agreed go with the MS patch.

 

[markdmac]

Official word is that any systems with the 3rd party patch are in an unsupportable state from Microsoft's ability to support regarding this issue. Anyone that has installed the 3rd party patch will need to fully remove it from their system before installing the MS patch.

I hope you find this post helpful.

Regards,

Mark

 

[damion68]

Does anyone know if there is (and where it is) an msi version of the microsoft patch? The only thing I saw was executables.
Thanks,

 

[porkchopexpress]

MS patches don't come as MSI's, they can be scripted or installed by Windows Update or the FREE WSUS.

http://www.microsoft.com/windowsserversystem/updateservices/default.mspx

 

[porkchopexpress]

You can script the installs using Qchain.exe tho take a look here.

http://support.microsoft.com/default.aspx?scid=kb;en-us;296861&sd=tech

 

[markdmac]

FYI to all following this thread, there is no MS Patch for Windows 98. If you have 98 in your environment, start ripping it out!

I hope you find this post helpful.

Regards,

Mark