Windows Metafile Vulnerability - Affected Systems

Affected Systems

Windows Metafiles are extensively supported by all versions of the Microsoft Windows operating system. All versions from Windows 3.0 to the then-latest Windows Server 2003 R2 contain this security flaw. However, versions from Windows XP onwards are more severely affected than earlier versions, since they have a handler and reader for the WMF file in their default installation.

According to Steve Gibson's M.I.C.E. analysis, Windows NT 4 may be affected by known exploits if it has an Image Preview Feature enabled. Computers not susceptible to known exploits of the flaw (but potentially susceptible to future versions or as-yet undiscovered exploits) include those running other versions of Windows, without Image Previewing enabled, or those with hardware-based Data Execution Prevention (DEP) effective for all applications.

Machines running non-Windows operating systems (e.g. Mac OS, Linux, etc.) are not directly affected. A scenario in which such computers might become vulnerable would be where a third-party program or library, designed to view WMF files on a non-Windows system, used the native Windows GDI DLL, or a clone which copied the design flaw leading to this bug, e.g. through a Windows emulator or compatibility layer.

Steve Gibson stated that the vulnerability could be exploited in Wine, and has provided a tool called MouseTrap to detect this on all Windows and Windows emulator systems.

Read more about this topic:  Windows Metafile Vulnerability

Famous quotes containing the words affected and/or systems:

    Friendship is by its very nature freer of deceit than any other relationship we can know because it is the bond least affected by striving for power, physical pleasure, or material profit, most liberated from any oath of duty or of constancy.
    Francine Du Plesssix Gray (20th century)

    No civilization ... would ever have been possible without a framework of stability, to provide the wherein for the flux of change. Foremost among the stabilizing factors, more enduring than customs, manners and traditions, are the legal systems that regulate our life in the world and our daily affairs with each other.
    Hannah Arendt (1906–1975)