Privacy Digest

Separated at birth: WMF and ANI bugs compared: "The Windows animated cursor bug patched yesterday by Microsoft Corp. bears more than a passing resemblance to the nasty Windows Metafile flaw that surfaced late in 2005.

[...]

The more things change, the more they stay the same.

In the world of Windows vulnerabilities, that maxim was proved during the recent sweep of the animated cursor (ANI) file bug, which has more than a passing similarity to a major malware outbreak based on the late-2005 Windows Metafile (WMF) flaw.

With some researchers calling ANI the most dangerous Windows vulnerability since WMF -- and security vendors such as Websense Inc. tracking nearly 500 Web sites distributing an ANI exploit -- it seemed only natural to bring out the virtual tape and see how the two measure up.

(Via Computerworld Security News.)