Buongiorno,
\nfinalmente e` stata rilasciata una patch per il baco di Windows che
\npermette l`esecuzione di codice malevolo tramite l`apertura di immagini
\n.wmf.
\nSi raccomanda pertanto di effettuare l`update di tutti i sistemi windows
\nil prima possibile e di mantenere sempre aggiornato l`antivirus.<\/p>\n
Domenica Quartarella
\nServizio Calcolo<\/p>\n
—–BEGIN PGP SIGNED MESSAGE—–
\nHash: SHA1<\/p>\n
National Cyber Alert System<\/p>\n
Technical Cyber Security Alert TA06-005A<\/p>\n
Update for Microsoft Windows Metafile Vulnerability<\/p>\n
Original release date: January 5, 2006
\n Last revised: —
\n Source: US-CERT<\/p>\n
Systems Affected<\/p>\n
* Systems running Microsoft Windows<\/p>\n
Overview<\/p>\n
Microsoft Security Bulletin MS06-001 contains an update to fix a
\n vulnerability in the way Microsoft Windows handles images in the
\n Windows Metafile (WMF) format.<\/p>\n
I. Description<\/p>\n
TA05-362A describes a vulnerability in the way Microsoft Windows
\n handles Windows Metafile images. This vulnerability could allow a
\n remote attacker to execute arbitrary code. Microsoft Security Bulletin
\n MS06-001 contains an update to fix this vulnerability.<\/p>\n
The vulnerability is described in further detail in VU#181038.<\/p>\n
II. Impact<\/p>\n
A remote, unauthenticated attacker may be able to execute arbitrary
\n code if the user is persuaded to view a specially crafted Windows
\n Metafile.<\/p>\n
III. Solution<\/p>\n
Apply a patch from your vendor<\/p>\n
Install the appropriate update according to Microsoft Security
\n Bulletin MS06-001.<\/p>\n
Appendix A. References<\/p>\n
* Microsoft Security Bulletin MS06-001 – * US-CERT Vulnerability Note VU#181038 – * US-CERT Technical Cyber Security Alert TA05-362A – ____________________________________________________________________<\/p>\n The most recent version of this document can be found at:<\/p>\n <www.us-cert.gov\/cas\/techalerts\/TA06-005A.html<\/a>> Feedback can be directed to US-CERT Technical Staff. Please send For instructions on subscribing to or unsubscribing from this Produced 2006 by US-CERT, a government organization.<\/p>\n Terms of use:<\/p>\n
\n <www.microsoft.com\/technet\/security\/Bulletin\/MS06-001.mspx<\/a>><\/p>\n
\n <www.kb.cert.org\/vuls\/id\/181038<\/a>><\/p>\n
\n <www.us-cert.gov\/cas\/techalerts\/TA05-362A.html<\/a>><\/p>\n
\n ____________________________________________________________________<\/p>\n
\n email to <cert@cert.org<\/a>> with “TA06-005A Feedback VU#181038” in the
\n subject.
\n ____________________________________________________________________<\/p>\n
\n mailing list, visit <www.us-cert.gov\/cas\/signup.html<\/a>>.
\n ____________________________________________________________________<\/p>\n