WMF Exploit.

There is a really bad Windows exploit floating around the net, so be very carefull when attempted to download anything with a WMF file extension. Or just get a Mac or run *nix. :)


Info:

http://www.frsirt.com/english/advisories/2005/3086
http://isc.sans.org/diary.php?storyid=975 (includes link to video of it happening)
http://isc.sans.org/diary.php?storyid=972
http://www.f-secure.com/weblog/archives/archive-122005.html#00000753
http://www.f-secure.com/weblog/archives/archive-122005.html#00000752



If you are interested in learning hands on about how it works it's available through the Metasploit Framework on my server aerial.mine.nu. Email me: joe at 621 dot org for a SSH account.

Info:

http://metasploit.com/projects/Framework/exploits.html#ie_xp_pfv_metafile