WMF + M$ = Linux


A new Windows exploit out there, and of course M$ isn’t going to issue a fix for any OS below XP or NT, in other words, thanks for the money sucker! Nothing that flogging a flawed OS called WinNT, but in WinXP clothing can’t fix! Not good enough? Well, then we’ve got another OS for you to buy, it’s just about the same as the other one except it costs more, and you need a new, more powerful computer to use it. Oh yeah, and all that other software you bought needs to be purchased again too, and anything new you buy won’t run on your older machine.

At least there is a litle comfort in that “in a practical sense, only Windows XP and Windows Server 2003 (in all their service pack levels) are vulnerable to the WMF flaw.” as outlined by Larry Seltzer. Others have tested, and I have landed on a page myself with an Iframe and the wmf file on it, with no worries as that sort of file is not opened natively on my trusty Win98 or Linux box. Even programs that I use all the time like Irfanview are not affected according to some sources, which makes sense, as it uses it’s own methods of interperting a file header.