Unofficial Windows Patch Recommended

GHoosdum

ZDNet is reporting that security experts recommend that firms use an unofficial patch to fix a serious vulnerability in Windows Metafile.

Both antivirus vendor F-Secure and volunteer security group the Internet Storm Center urged businesses to use the unofficial patch, as Microsoft has so far failed to offer an authorised patch to address the problem.

Microsoft, though, has advised businesses not to use third-party updates, even though its own patch won't be available until next Tuesday.

As reported last week, the WMF vulnerability can be exploited by Trojan horse malware to compromise a PC — by installing spyware on it or by turning it into part of a botnet.

Source: ZDNet

shwaip

official patch here:

http://www.microsoft.com/technet/security/Bulletin/MS06-001.mspx