[41899] in bugtraq
Re: RE: WMF Exploit
daemon@ATHENA.MIT.EDU (grasshopa@securityfocus.com,at@sec)
Tue Jan 3 14:18:16 2006
Date: 1 Jan 2006 23:29:13 -0000
Message-ID: <20060101232913.27119.qmail@securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: grasshopa@securityfocus.com, at@securityfocus.com,
gmail@securityfocus.com, com@securityfocus.com
To: bugtraq@securityfocus.com
I've tested the exploit on XP home and I've found that it does not even need a single click on my machine. Once the folder containing the file is open (this was in list view) the exploit will run.
Scary sh*t!
