Pope WMF I

Encyclical

"Imago Quae Mordet". In late December 2005 it emerged that merely viewing a WMF image could make Windows run code, thanks to a SetAbortProc feature born in more innocent times. It was already being exploited, and Microsoft released one of its first out-of-band patches on 5 January 2006, while Ilfak Guilfanov had already handed out an unofficial fix. Lesson: ancient formats carry ancient powers, and a zero-day does not wait for Tuesday.

Saint page: Saint WMF SetAbortProc

Cardinals

Windows Plug and Play overflow (MS05-039, Zotob) · Cisco IOS IPv6 exploitation (Michael Lynn, 'Ciscogate')