Main Page Forum Ringtones SMS Messages Games Free Downloads Contact UsTelepk Map
Make This Page Your Home Page Make TelePK.Com Your Favorite Website Telepk Header
Mobile Zone
  1. PTCL TelePhone Directory
  2. SMS Messages
  3. SmS Jokes
  4. Sms Dictionary
  5. Memory Card Rates
  6. Mobile Phones
  7. Mobile Phone Articles
  8. Mobile Tutorials
  9. Mobile Games
  10. Mobile Wallpapers
  11. Secret Codes
  12. Ring Tones
  13. Web To SmS
  14. Telecom Reviews
  15. SMS Worldwide

  1. Islam
  2. Listen Radio Live
  3. Watch TV Channels
  4. Elections
  5. Home Decoration
  6. Beauty And Health
  7. Tech News
  8. Kitchen
  9. Greeting Cards
  10. Animation
  11. Messenger Zone
  12. Online Chat
  13. Articles
  15. City Codes
  16. Computer
  17. Know Your Heart
  18. Palmistry
  19. Myspace
  20. Make Money
  21. World News
  22. Map Guide
  23. Eid Day
  24. Pakistan
  25. Pakistani Singers
  26. Personalities
  27. Emergency No.s
  28. Funny Jokes
  29. Finance
  30. Flights
  31. Funny Pictures
  32. Kids
  33. Songs
  34. Sports Online
  35. Spotlight
  36. Student Visa
  37. Education
  38. Online Games
  39. Study Abroad
  40. Tutorials
  41. Immigration
  42. Internet
  43. Urdu
  44. Weather Status
  45. Webmaster Tools
  46. Valentine Day
  47. Video Clips
  48. Videos

Latest Updates!
Please fill out the form below to get notified whenever will be update.
Enter your email address:

Active Visitors
  1. 213

Windows Metafile Exploit Could Spell Trouble

A new virus that exploits a critical vulnerability in the Windows Metafile Format (WMF) has been released to the wild and is being used by malware writers.

Security experts discovered the exploit, which affects versions of Microsoft's Windows XP and Windows 2003 Web Server. Unlike many of the larger virus threats that have caused a stir in 2005, there isn't a patch to plug the flaw.

Exploits with no correcting patch or the knowledge needed to prevent the attack are called zero-day exploits and are enough to drive any security administrator crazy. Because there's no patch for the flaw, workarounds are needed to prevent the spread of the virus on computers.

While the WMF exploit uses an unknown mechanism to crack past a user's computer, its delivery model is all-too-familiar. The only way, at the time of this report, to get infected with the exploit is to visit a corrupted Web page hosting a .wmf file using Internet Explorer (IE), according to security firm iDefense.

That doesn't mean the delivery model won't change, however. The iDefense advisory notes the exploit's threat will increase dramatically if attackers are able to get the virus to replicate through file shares, e-mail or instant messages.

Officials at Microsoft stated they are investigating the reports of a possible vulnerability and will take the necessary steps to protect its customers after concluding the investigation.

In the meantime, officials suggest customers follow the guidelines at Microsoft's Protect Your PC Web site; if customers suspect their computer's been attacked, they recommend users contact their local FBI office or post a complaint on the Internet Fraud Complaint Center Web site.

If you've been hit with the virus, you'll know it. According to the iDefense advisory, PCs will display clear signs of infection -- changes to the desktop, infection warnings displayed in the taskbar and degraded system performance.

Ken Dunham, director of iDefense's rapid response team, said it's unclear yet what exactly the exploit is trying to accomplish. Discovery in the past 12 hours, he noted, has showed only limited applications such spyware and adware getting installed on the end user's computer.

"We don't know if it's fraud-related or whatever," he said. "Clearly, they're being silently and illegally installed, at a minimum, for personal profit and they may also involve fraud or exploitation."

Dunham said the next week will show whether the WMF exploit will morph into a truly dangerous virus. He predicts the virus will be be very successful in the short- and long-term and become a popular exploit of choice against Windows XP in the coming months.

Whether it becomes as popular as Zotob or the other bots this summer remains to be seen, he said. That depends on whether security experts are able to get a handle on the vulnerability and the information gets out to computer users; The first six days will be critical.

"I think the next week is going be the most telling and the most significant in terms of risk," Dunham said.

Its popularity and success is predicated entirely on whether Microsoft is able to put out a patch plugging the vulnerability, or devising a workaround in time and whether end users install the patch.

Microsoft is infamous for the delay between discovery and patch for vulnerabilities to its software, though the company has released critical-rated patches outside its monthly "Patch Tuesday" updates if the threat is serious enough.

For the time being, security experts are recommending some quick-fix workarounds to keep PCs safe from the WMF exploit.

Secunia recommends users set their IE security level to high while iDefense recommends administrators lock down WMF files on the gateway when possible. iDefense also recommends browsing in non-privileged mode on an operating system other than Windows XP or Windows Server 2003.

<<< Back

Send this page to a friend

Most Viewed Services:
  1. New Year
  2. Free TV
  3. Watch GEO News
  4. Watch Disney TV USA
  5. AIM Away Messages
  6. AIM Buddy Icons
  7. BBQ Recipes
  8. Burger Recipes
  9. Fruit Salad Recipes
  10. Funny Pictures
  11. Spider-Man
  12. Spider-Man The Film
  13. Spider-Man Wallpapers
  14. Family
  15. Family Fun
  16. Windows Live Messenger
  17. Easter E-Cards
  18. 2008 Festivals
  19. Christian Festivals
  20. Msn Display Pictures
  21. Yahoo Avatars
  22. Myspace
  23. Nokia 5700
  24. Nokia 5070
  25. Bob Woolmer
  26. SMS Messages
  27. SMS Jokes
  28. Animals
  29. Apple
  30. Bikes
  31. Zong
  32. World
  33. Cars
  34. Celebrity
  35. Facebook
  36. Ali Lohan
  37. Computer
  38. Finance
  39. Fitness
  40. Shoes
  41. New Homes
  42. MSN Web Messenger
  43. Download MSN Messenger
  44. Download Latest Msn Messenger
  45. Multi MSN
  46. Download Multi MSN
  47. MSN Emoticon
  48. MSN Nick Name
  49. MSN Screen Names
  50. MSN Nick
  51. MSN Names
  52. Cool MSN Emoticon
  53. Urdu
  54. Urdu Jokes
  55. Urdu Dictionary
  56. Urdu Poetry
  57. Automobile
  58. Cars
  59. New Cars
  60. Food
  61. Kitchen
  62. Cell Phone
  63. Free Mobile Game
  64. Free Mobile Wallpapers
  65. Mobile Phone Secret Code
  66. Free Web SMS
  67. Free Worldwide Sms
  68. Islam Way
  69. Home Interior Decoration
  70. Health And Beauty Tip
  71. Latest Tech News
  72. Kitchen Remodeling
  73. Free E Greeting Card
  74. Know Heart
  75. Palmistry Line
  76. Make Money Online
  77. Myspace HTML Codes
  78. Myspace Toolbox
  79. Toyota RAV4
  80. Nokia Cell Phone
  81. Sony Ericsson Cell Phone
  1. Chinese New year Celebration
  2. Blackberry Phone
  3. Funny Joke
  4. MSN Avatars
  5. MSN Smileys
  6. MSN Display Pics
  7. MSN Display Pictures
  8. Pakistan Cricket Team
  9. Spicy Food
  10. Health Food
  11. Pakistan
  12. AOL Block Checker
  13. Urdu News
  14. Yahoo Web Messenger
  15. Download Yahoo Messenger
  16. Download Latest Messenger Version Yahoo
  17. Multi Yahoo Messenger
  18. Download Multi Yahoo Messenger
  19. Yahoo Emoticon
  20. Yahoo Hidden Emoticon
  21. Yahoo Avatars
  22. Yahoo Display Pictures
  23. Yahoo Animated Avatars
  24. Yahoo Smileys
  25. Free Cooking Recipe
  26. Hindu Festivals
  27. Sikh Festivals
  28. March Madness
  29. Tutorials
  30. Article of Mobile Phone
  31. Abrar Ul Haq
  32. Zong Sms
  33. Internet
  34. Better Homes
  35. Home
  36. Pets
  37. Forex
  38. Real Estate
  39. Science
  40. Stock Exchange
  41. WWE
  42. Information
  43. Football
  44. Flights
  45. Cricket News
  46. Latest World News
  47. Personality
  48. Emergency Phone Numbers
  49. Family Kid
  50. Online Spotlight
  51. Student Visa
  52. Download Online Game
  53. Study Abroad
  54. Immigration Law
  55. College University
  56. Web Master Tool
  57. Weather Report
  58. Funny Video Clips
  59. Funny SMS Joke
  60. Urdu SMS
  61. New Year SMS Joke
  62. Free SMS Joke
  63. AIM Block Checker
  64. City Code
  65. Find Article
  66. Dual Sim T500
  67. Asus P535
  68. Asus Cell Phone
  69. Sky Scrappers
  70. Funny Jokes
  71. History of Pakistan
  72. Government of Pakistan
  73. Lahore Resolution
  74. English Chat
  75. Online Chat Rooms
  76. Computer Wallpaper
  77. Software Downloads
  78. Samsung i710
  79. Ali Zafar
  80. Atif Aslam

More Resources...

© All Rights Reserved : Pakistan : Privacy Policy : Disclaimer : Advertise with us : Sitemaps : 1, 2, 3, 4, 5