Newsmaker: Beating Microsoft to the punch ~ Russian authors patch for WMF flaw

CNET ^ | January 4, 2006, 12:45 PM PST | Dawn Kawamoto Staff Writer, CNET News.com

[Ernest_at_the_Beach]

Of Course we now see that Microsoft has responded:

Microsoft pushes out Windows patch ahead of time

[Petronski]

I just wonder if Microsoft engineers decompiled his solution, checked it (to the best of their ability), and started from there to build their own fix.

[Dan Nunn]

It's real easy to make a patch when you don't have to test it against 100,000 different configurations, languages, and other applications for compatibility.

[Ernest_at_the_Beach]

Don't know but it would have been smart....

[Ernest_at_the_Beach]

So what is your point?

[TomGuy]

I had that patch installed.

MS apparently didn't like taking the heat, so the got in gear. This today:

Windows Security Fix released for graphics rendering bug

Posted by Cicero On 01/05/2006 4:43:56 PM CST · 11 replies · 341+ views Microsoft Update | 12/5/06 | Self Microsoft has posted a security fix for the windows metafile bug, and it is available at the Windows Update site. I can't speak for earlier operating systems, but I have downloaded and installed it for Windows XP and Windows 2000. Because of the urgency, Microsoft released the fix early. Other updates will be available as usual next Tuesday at the Update site.

[TomGuy]

Guilfanov's website got pounded. It still is being pounded.

[Ernest_at_the_Beach]

From the article:

***************************************

Guilfanov: It is the first time I have created such a patch. It is the first time the vulnerability has been really bad and dangerous. It scared me.

I created the fix for me and my friends.

The headline writer of course wants to hype his article to attract eyeballs....

[Syntyr]

Here let me save the Mac/Linux crowd the time...

Aww just get a Mac or Linux and you will never get another virus, you will live forever, you will look great, birds will follow you chirping everyday etc

:) Just having some fun ;-)

[NonLinear]

I just wonder if Microsoft engineers decompiled his solution, checked it (to the best of their ability), and started from there to build their own fix.

They wouldn't have to decompile it. He published the source code along with the patch.

[TommyDale]

Security Update for Windows XP (KB912919) was released today, but those who installed the Russian's patch should remove it and reboot before applying the Microsoft patch.

[RedBloodedAmerican]

Security Update for Windows XP (KB912919)

A remote code execution security issue has been identified in the Graphics Rendering Engine that could allow an attacker to remotely compromise your Windows-based system and gain control over it.

[SwordofTruth]

I'll keep the unofficial patch since there is no problem with it, I don't need MS's patch fot this.

[Ernest_at_the_Beach]

Yes, the badguys want another shot at your system....

[rudy45]

but won't the MS patch get installed automatically, if one has Windows configured that way?

How does one uninstall the Ilfak patch?

[Company Man]

How does one uninstall the Ilfak patch?

Info I have seen says it should be listed in add/remove

[TommyDale]

It's listed as Windows Hot Fix 1.4 or something like that.

[TommyDale]

It's listed as Windows Hot Fix 1.4 or something like that.

[rudy45]

Thanks for the reply, but I'm still unclear.

I have my computer set to download and install Windows updates automatically. A few days ago, I installed the Ilfak patch.

Is it possible that the Microsoft patch is downloaded and installed automatically, even without my doing anything? If so, will that cause a problem for me in that I have the Ilfak patch?

Thanks.