Re: Ilfak's WMF patch v. Microsoft's solution

["Alex Shipp (elist)" <ashipp () messagelabs com>]

> I don't have any good way to test it
> myself.
>
> Richard

It is fairly easy to use the metasploit framework to create a WMF that autoloads
(for example) calc.exe. You could then use this to test out autoloading emails, etc.


______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
______________________________________________________________________
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.