Microsoft
Latest flaws affect Windows Graphics Rendering Engine

More WMF woes for Microsoft

Redmond dismisses new flaws as just 'performance issues'

Written by Iain Thomson

Even as Microsoft was releasing its latest batch of patches, two previously undocumented Windows Meta File (WMF) flaws have been exposed. 

The new vulnerabilities were discovered by a computer enthusiast known as 'cocoruder' and affect all Windows operating systems beyond Windows 95.

Advertisement

The flaws are in the Graphics Rendering Engine and could allow a hacker to exploit a memory overrun and crash a PC. 

"Our initial investigation has found that these are not security vulnerabilities but rather performance issues that could cause an application to stop responding," said Microsoft in a statement.

"These issues do not allow an attacker to run code or crash the operating system. They may cause the WMF application to crash, in which case the user may restart the application and resume activity.

"Microsoft had previously identified these issues as part of its ongoing code maintenance and is evaluating them for inclusion in the next service pack for the affected products."

The flaws were posted on the Bugtraq mailing list, and code purporting to exploit the flaws appeared shortly afterwards.

Tags:

Related whitepapers

Related jobs

Do you agree?

IT white papers

Search vnunet IThound

Top categories

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Watch

Shaun Nichols and Iain Thomson

10 Oct 2008

7.33 MBPodcast Special: Views from the Valley More...

Podcast image

09 Oct 2008

12.99 MBComputing podcast - IT implications of the banking crisis, and the FSA clamps down on IT security More...

Shaun Nichols and Iain Thomson

03 Oct 2008

6.49 MBPodcast Special: Views from the Valley More...

Poll

Google Android

Google Android

Are you intending to try out a Google Android mobile phone?

Previous poll results

Spotlight

MoD building

Latest data breach leads MPs to demand culture change

MoD admits to losing a hard drive containing up to...  More...

Online shopping

E-retailers urged to prepare for Christmas

Credit crunch sending shoppers online for cheaper presents   More...

Mobile phone

Emerging markets drive mobile growth

Mobile penetration rates expected to reach 95 per cent by...  More...

Digital information

Poor data classification costing companies dear

Millions wasted on searching through clutter, says analyst   More...

Primary Navigation