Metasploit mailing list archives

wmf never worked on my default winxp ever


From: sandalwood at inMail24.com (sandalwood)
Date: Wed, 4 Jan 2006 13:06:01 -0800

Hello all,

I don't understand how this is a bad bug.  As soon as I saw the first
exploit for this I installed a fresh completely new blank install of
windows xp professional sp2, and tested it.  It has never worked even
once.  I have also tried HD's exploits for it, including the one
released today that uses BMP format and gzip content encoding (elite
dude thank you).. however that still doesn't work.

In my default fresh install of windows, I go to the url and it pops up
a warning about downloading a file.  I have to click on the
information bar and choose download.  Then if I go to the desktop and
doubleclick the file, it does run the picture viewer which then
crashes.

So who is this a threat to??  Just sp1 systems? are there even any out
there?

In case you are wondering if my testing methodology was poor: I also
then LATER tried accessing public websites that were exploiting people
such as crack sites and porn that people talked about as carrying this
bug. Those did not work either.  I have zero software installed.  This
is a clean default install of windows. no antivirus, firewall, nothing
but microsoft windows.

I would post screenshots or video clip of it if it would help.  I
think it is clear that there are some systems that are NOT VULNERABLE
to this, by default. For everyone to be saying this affects winxp sp2
I think is an error.

addition:  i have now confirmed 2 other friends of mine say that it
throws up a warning saying it blocked a download and does not work on
their machines either.

-- 
Best regards,
 sandalwood                            mailto:sandalwood at inMail24.com



----------
* Zoner PhotoStudio 8 - Your Photos perfect, shared, organised! www.zoner.com/zps




Current thread: