January 5th, 2006
About Notes and the WMF exploit
I’ve been pinged a bunch about the Windows
WMF graphics rendering engine file vulnerability that cropped up last week.
IBM’s official technote is posted, #1227004
– Is Lotus Notes affected by the Windows Meta File vulnerability reported
in Microsoft Security Advisory # 912840?
It also references NIST.ORG’s
specific bulletin about Lotus Notes and this exploit
(which has been updated to clearly indicate that Notes is “not to
blame”).
Other useful sources of information:
Originally by Ed Brill from Ed Brill on January 3, 2006, 12:04pm
