full-disclosure - REWMF Risk Analysis for Win9X anyone ?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Fri Jan  6 19:42:29 2006
From: pferrie at symantec.com (Peter Ferrie)
Subject: REWMF Risk Analysis for Win9X anyone ?

>Did anyone conduct a compreensive risk analysis of the WMF vulnerability
>for Win9X/ME systems ? ISC analysis is very ambiguous, and MS position
>on the issue is more on the lines of "we don't want to be bothered".
>
>What ARE the real risks (or lack of them) for Win9X/ME systems ?

The same as for Windows NT and 2000 - files without the placeable header will not display automatically in applications such as Internet Explorer, and files with the placeable header are not allowed to call the vulnerable function.
However, applications other than Internet Explorer, which do recognise files without the placeable header, can call directly into the GDI!PlayMetaFile() function, which will eventually call into the vulnerable function.

8^) p.