How can WMF infect server other then browsing on it?

jonw757

Gawd
Joined
Dec 7, 2004
Messages
661
From another thread, it got me wondering. Anyone know if its possible to be infected in other ways besides direct interaction with the server? Will it spread if a desktop is infected to a unpatched server? :confused:
 
from what ive heard its propagating through any means possible now. interesting flaw.
 
The WMF flaw cant be "Spread". it is just a backdoor into the system that could be use to install anything they wanted. So technicaly if a network aware virus was installed then it it could spread to another machine.
 
If an infected file is stored on the server and then indexed, the server will get infected. Such as if a user's home directory/roaming profile is stored on a server that does indexing, it will be infected.
 
Does the WMF affect Windows Server 2003? I was surfing the net on my server, like a retard, and I suddenly got the Windows Fax and Picture viewer opening a .wmf, and I freaked out! Thankfully I had Macfee up to date!! What exactly does the WMF stuff install?
 
AMD[H]unter said:
Does the WMF affect Windows Server 2003? I was surfing the net on my server, like a retard, and I suddenly got the Windows Fax and Picture viewer opening a .wmf, and I freaked out! Thankfully I had Macfee up to date!! What exactly does the WMF stuff install?

Yes, it does affect Server 2003. The .WMF vulnerability can install anything, it just executes any program. So it could install a virus your AV has a def for, or it could install something that it doesn't even know about. You should never browse on your server and the hotfix is out so you should have that installed as well.
 
Back
Top