Re: MS Security Bulletin MS06-001: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution (912919)

From: "Ottmar Freudenberger" <freudi@xxxxxxx>
Date: Fri, 6 Jan 2006 20:20:10 +0100

"~greg" <g_m@xxxxxxxxxxxxxxxxxx> schrieb:

> You're right - unless the patch *also* does something to shimgvw.dll.

It doesn't.

> But as I understand it now there would be no need for that.

True, since the whole is/has been in gdi32.dll, while shimgvw.dll is/was
an easy way to deploy exploits into affected systems.

Bye,
Freudi
.

References:
- Re: MS Security Bulletin MS06-001: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution (912919)
  - From: Rock
- Re: MS Security Bulletin MS06-001: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution (912919)
  - From: ~greg
- Re: MS Security Bulletin MS06-001: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution (912919)
  - From: Ottmar Freudenberger
- Re: MS Security Bulletin MS06-001: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution (912919)
  - From: ~greg

Prev by Date: Re: Why no patch for the .wmf problem?
Next by Date: Re: Why no patch for the .wmf problem?
Previous by thread: Re: MS Security Bulletin MS06-001: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution (912919)
Next by thread: Why was IE6 vulnerable to the wmf exploit?
Index(es):
- Date
- Thread