Beating Microsoft to the punch

Sidney · 5th January 2006, 07:31

In a rare move, security experts at the SANS Institute's Internet Storm Center and at F-Secure are advising people to download Guilfanov's patch, which aims to fix a flaw in the Windows Meta File.

This vulnerability has spawned a torrent of exploits that seek to take advantage of the wait while Microsoft works on its own patch. The software company has said it will release a WMF patch on Jan. 10, as part of its monthly security update cycle. That would come 14 days after the flaw was first publicly disclosed.

People eager to download the unofficial patch inundated Guilfanov's personal Web site, which had to be temporarily shut down as a result. He has since reduced his home page to its bare minimum.

In this case, Guilfanov, a senior developer at DataRescue in Liege, Belgium, has gained the trust of security companies, which usually are reluctant to suggest that customers use a patch from someone other than the original maker of the software.

http://news.com.com/Beating+Microsof...32.html?tag=nl

jmke · 5th January 2006, 13:42

they released that patch 4 days ago already

5th January 2006, 07:31	#1
Sidney Member Join Date: Mar 2004 Posts: 15,738	Beating Microsoft to the punch In a rare move, security experts at the SANS Institute's Internet Storm Center and at F-Secure are advising people to download Guilfanov's patch, which aims to fix a flaw in the Windows Meta File. This vulnerability has spawned a torrent of exploits that seek to take advantage of the wait while Microsoft works on its own patch. The software company has said it will release a WMF patch on Jan. 10, as part of its monthly security update cycle. That would come 14 days after the flaw was first publicly disclosed. People eager to download the unofficial patch inundated Guilfanov's personal Web site, which had to be temporarily shut down as a result. He has since reduced his home page to its bare minimum. In this case, Guilfanov, a senior developer at DataRescue in Liege, Belgium, has gained the trust of security companies, which usually are reluctant to suggest that customers use a patch from someone other than the original maker of the software. http://news.com.com/Beating+Microsof...32.html?tag=nl __________________ lazyman Opteron 165 (2) @2.85 1.42 vcore AMD Stock HSF + Chill Vent II

5th January 2006, 13:42	#2
jmke Madshrimp Join Date: May 2002 Location: 7090/Belgium Posts: 79,022	they released that patch 4 days ago already __________________

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Microsoft Patch Tuesday: 5 Criticals, 2 Important, 1 Moderate Patch	jmke	WebNews	0	14th April 2009 19:47
Microsoft Security Bulletin Summary for September 2008	jmke	WebNews	0	9th September 2008 20:20
Microsoft Security Bulletin Summary for August 2007	jmke	WebNews	0	14th August 2007 23:21
Microsoft Security Bulletin Summary for February 2007	jmke	WebNews	0	14th February 2007 01:25
Microsoft Issues Zero-Day Attack Alert For Word	jmke	WebNews	0	6th December 2006 11:46
Microsoft Reveals Nine New Ways to Get in Touch With the PC	Sidney	WebNews	0	8th September 2004 19:58
Why Microsoft won't change	Sidney	WebNews	0	21st July 2004 06:15
ATI Supports Development of Microsoft Windows XP Media Center Edition	jmke	WebNews	0	14th July 2004 13:29
HP and Microsoft Expand Security Solutions Portfolio	Sidney	WebNews	0	25th May 2004 07:28
INFO: Windows XP Services ( what to enable/disable)	The Senile Doctor	FAQ / INFO / HOW-TO	7	9th September 2003 14:59