exploit virus

The Windows Metafile vulnerability is a security vulnerability in Microsoft Windows which has been used in a variety of exploits since late December 2005. The vulnerability was first discussed in the computer security community around 26 and 27 December 2005, with the first reports of affected computers subsequently announced within 24 hours. As of January 5, 2006, a high priority update to fix this vulnerability is available via Windows Update (see announcement). However, there is no patch for Windows 98, Windows 98 Second Edition, or Windows Millennium Edition, because Microsoft did not deem the vulnerability critical in those versions. RAV AntiVirus - HTML/IFrame_Exploit* Virus Description.

The vulnerability, located in gdi32. dll, arises from the way in which Windows operating systems handle Windows Metafile (WMF) vector images, and permits arbitrary code to be executed on affected computers without the knowledge or permission of their users. The vulnerability therefore facilitates the propagation of various types of malware, typically through drive-by downloads.

Affected systems

Windows Metafiles are extensively supported by all versions of the Microsoft Windows operating system. All versions from Windows 3. This is not a virus, but rather a method to exploit a security vulnerability in the Microsoft JavaByteVerify!exploit : Description Published: Sunday, September 07, 2003. 0 to the latest Windows Server 2003 R2 contain this security flaw. However, versions from Windows XP onwards are more severely affected than earlier versions, since they have a handler and reader for the WMF file in their default installation. [1]

According to Steve Gibson's M. I. C. Exploit-OleModule. E. analysis, no version of Windows before NT 4 is affected. However, Windows NT 4 may be affected by known exploits if it has an Image Preview Feature enabled.