31 Jan 2006
AMD's user forums were yesterday found to be hosting a worm that attempted to infect visitors using the well documented Windows WMF vulnerability.
Users visiting the site were presented with a download of a .wmf image file which carries a malicious payload. The image appeared to be linked to an adware affiliate website called toolbardollars.biz.
Microsoft was caught out in early January when online criminals started exploiting a vulnerability in the way that Windows renders images in the Windows Meta Files format.
The software giant eventually issued an out-of-cycle patch for the flaw, which it does in only rare cases.
AMD's forums website was no longer harbouring the worm at the time of this story's publication, and a spokesman for the company told vnunet.com that the issue had been resolved.
AMD blamed the problem on a third party that handles the user forums for the chipmaker.
This company had failed to apply a software patch to the service, according to the spokesman, exposing users to the potentially harmful .wmf file. He declined to identify the third party.
The spokesman emphasised that users with fully patched systems had at no time been at risk of infection.
Security vendor F-Secure reported the AMD worm on its blog on Monday and warned users not to visit the website.
Latest stories from Security
Related articles
Related jobs
Poll
What is the most important IT priority for your company this year?
Hands on with the highly anticipated Android 4.0 Ice Cream Sandwich hybrid tablet
Connect with V3.co.uk
This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes
Why good data management at all levels is essential in the modern business (video, 6mins)
Project Manager (BI) 6 Months Contract – to...
Desktop Support Manager 3 month contract - to start...
/ Programme Manager / 45k / Significant benefits / London...
Automation Test Manager Selenium London 75k Automation...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?