All the latest UK technology news, reviews and analysis

AMD forum users exposed to WMF worm

by Tom Sanders in California

31 Jan 2006

Be the first to comment

  • Tweet this
AMD
Visitors to AMD's forums were presented with an infected .wmf image file

AMD's user forums were yesterday found to be hosting a worm that attempted to infect visitors using the well documented Windows WMF vulnerability. 

Users visiting the site were presented with a download of a .wmf image file which carries a malicious payload. The image appeared to be linked to an adware affiliate website called toolbardollars.biz.

Microsoft was caught out in early January when online criminals started exploiting a vulnerability in the way that Windows renders images in the Windows Meta Files format.

The software giant eventually issued an out-of-cycle patch for the flaw, which it does in only rare cases.

AMD's forums website was no longer harbouring the worm at the time of this story's publication, and a spokesman for the company told vnunet.com that the issue had been resolved. 

AMD blamed the problem on a third party that handles the user forums for the chipmaker.

This company had failed to apply a software patch to the service, according to the spokesman, exposing users to the potentially harmful .wmf file. He declined to identify the third party.

The spokesman emphasised that users with fully patched systems had at no time been at risk of infection.

Security vendor F-Secure reported the AMD worm on its blog on Monday and warned users not to visit the website.

Do you agree?

 

Add your comment

We won't publish your address
By submitting a comment you agree to abide by our Terms & Conditions. Your comment will be moderated before publication.

Poll

The workplace of the future poll - in association with IBM

What will be the biggest change to corporate technology in the future?

89%

6%

1%

3%

1%

Connect with V3.co.uk

Sign up to our daily or weekly newsletters

Riso

Colour printing: why the bill keeps outstripping the budget

The wrong printers, for the wrong tasks on the wrong contracts

Qlikview

Magic quadrant for business intelligence platforms

Who leads the BI pack and who should we be watching out for?

PHP developer - CSS, HTML, Javascript, MySQL, Linux

PHP developer - CSS, HTML, Javascript, MySQL, Linux...

Senior BPM Developer

Senior BPM Developer (Java, J2EE, Agile, Spring, Struts...

Business Analyst

As a Business Analyst you will play a key role in understanding...

C#/ASP.NET Team Lead - Gloucester

C#/ASP.NET Team - Gloucester - My client has an urgent...

Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.

To send to more than one email address, simply separate each address with a comma.