01/03/2006: WMF Vulnerability Protection in Sophos

Due to an error in how Microsoft Windows handles files with the Windows Metafile image format, computers running Windows are vulnerable to an exploit attack by malicious code. This code, when executed, will allow a remote attacker to gain control of the affected machine. Information on this vulnerability is available http://www.sophos.com/support/knowledgebase/article/4248.html.

Users of Sophos can protect themselves from this vulnerability by modifying their Sophos settings to scan files with the following extension types:

• wmf
• jpg
• jpeg

Please note that adding addtional file types to the on-access scanning list may affect the performance of your computer. Instructions on adding these file extensions to the on-access scanning list are available from Sophos http://www.sophos.com/support/knowledgebase/article/357.html.

If you have any questions please contact the BOL Help Desk at (310)267-4357, option 1, or at consult@ucla.edu.