Work arounds for the WMF exploit

There is a work around for the WMF zero-day exploit that I mentioned the other day. While NOT a complete solution, this one will unregister the dll associated with displaying WMF information. Please note that this will also prevent you from using the Microsoft Picture and Fax viewer application. That can be annoying if you like to browse through photos on your hard drive but at least you'll be safe and you can use other image viewers instead.

ViaSecurity Now:

regsvr32 -u %windir%\system32\shimgvw.dll

once Microsoft has provided a patch you can re-register the dll by:

regsvr32 %windir%\system32\shimgvw.dll

UPDATE: There is a better fix now. Read my new post.

Other sources:

http://www.f-secure.com/weblog/archives/archive-122005.html#00000754
http://secunia.com/advisories/18255/
http://vil.mcafeesecurity.com/vil/content/v_137760.htm
http://www.securityfocus.com/bid/16074/info
http://sunbeltblog.blogspot.com/2005/12/new-exploit-blows-by-fully-patched.html
http://redxii.blogspot.com/2005/12/vulnerabilities-in-graphics-rendering.html
http://www.microsoft.com/technet/security/advisory/912840.mspx

Technorati Tags : wmf, virus, shimgvw