Talkings of a Tyrant

The WMF security vulnerability in Windows (all versions of Windows) has really got Microsoft running.

What the vulnerability boils down to (if you want more details, try some other site) is by simply viewing an image (or rather, a Windows Metafile disguised as an image), a hacker has the potential to do anything the user can do. For most people, who are pretty much admins of their PC, this includes everything. Wipe your hard drive? Sure. Whatever.

By “viewing an image,” this means: viewing an image on the web, viewing an image in an email client, or however else you look at images. No downloading required.

Huge security vulnerability.

Microsoft, however, moved and worked with the quickest speed I’ve ever seen them, and have created a patch that fixes this problem. It is currently still being “quality tested” to make sure it doesn’t open up any other security vulnerabilities.

If you really can’t wait, you can download an unofficial vendor patch. I’m going to take my chances and wait.

I’m still trying to figure out if this vulnerability can be exploited in Firefox.