Another update to exploit?
I didn’t see this reported anywhere, but since yesterday when there was an update to the metasploit module for the WMF vulnerability I think there’s been yet another update. I read yesterday that it had been updated and could evade all known IDS signatures. I downloaded the update to continue my Win98 testing. Then today found that there was another update. I haven’t compared the old/new versions but can’t help but wonder if this means more scrambling of antivirus writers for new signatures to keep up.
Spyware Confidential is linking to an update at Larry Seltzer’s blog updating the situation on antivirus scanning for the exploit.
It’s good to see the list current, I was afraid the 12/31 list was giving a bit of overconfidence.
After I read, I tested the new module variation against clamav and must say it performed very well, 100%.