• On The Insider: Robert Downey Jr Injured on the Set

January 30, 2006 5:19 PM PST

AMD forums laid low by Windows exploit

  • Font size
  • Print
A discussion forum Web site for fans of Advanced Micro Devices' chips was closed Monday after the discovery there of an exploit for Microsoft's Windows Meta File flaw.

Mikko Hypponen, chief research officer at F-Secure, posted an item on the company's blog Monday outlining a WMF exploit on the home page for AMD-sponsored discussion forums. The exploit has since been removed, AMD said.

AMD forums harbor WMF exploit

WMF exploits can trick users into viewing images or visiting Web sites that carry malicious software called Trojan horses. Once installed on a vulnerable PC, the software can allow an attacker to execute code on the system.

The forums were taken offline as soon as AMD learned of the exploit, said Drew Prairie, a spokesman for the Sunnyvale, Calif.-based chipmaker. The forums are maintained by another company that apparently failed to update its software in order to protect against the exploit, he said. Prairie was unaware of the name of the company, which is dealt with by AMD's staff in Europe.

The forums were back online late Monday afternoon. A poster started a thread on Saturday warning other forum users about the exploit. The discussions on the site usually center around building AMD-based PCs or bashing Intel, but visitors over the weekend got an unexpected lesson in Windows and Internet Explorer security techniques.

Microsoft was forced to issue an out-of-cycle patch in early January in response to the nasty WMF flaw, after originally planning to include the fix along with its usual monthly batch of patches. Windows users who downloaded that patch when it was distributed were protected if they visited the AMD discussion forum on Monday, Prairie said.

See more CNET content tagged:
WMF vulnerability, AMD, exploit, Microsoft Windows Metafile, forum

Add a Comment (Log in or register) 8 comments
A better title...
by aemarques January 31, 2006 3:57 AM PST
... would be: "AMD forums laid low by failure to patch a Windows server"...
Reply to this comment
An even better title
by Macsaresafer January 31, 2006 5:19 AM PST
AMD unable to keep up with high volume of Windows security
issues.
View reply
Hackers have no life's
by bobby_brady January 31, 2006 8:13 AM PST
Are these guys really that desperate for attention?
Reply to this comment
AMD Forums laid low
by Pluqueric February 1, 2006 6:43 AM PST
I hope someone will be thoughtful enough to explain this situation to someone like me who does not quite understand. The only way I'm going to learn to ask questions.

Please explain exactly what happened: was it something done deliberately by Microsoft? If gone undetected, would it have created severe problems for AMD users?

I have tried to read as much as I can on this subject, but I am still in the dark. Please help.
Reply to this comment
Feature or bug
by Phillep February 1, 2006 10:28 AM PST
The feature was intended, the full range of things it could be used for was not.

It's a problem for AMD users who have unpatched Microsoft in their computers.
advertisement
Click Here

Latest tech news headlines

RSS Feeds

Add headlines from CNET News to your homepage or feedreader.

More feeds available in our RSS feed index.

Markets

Market news, charts, SEC filings, and more

Related quotes

Microsoft (-3.82%) -0.76 19.11
Advanced Micro Devices (-5.45%) -0.12 2.08
Dow Jones Industrials (-2.51%) -215.45 8,376.24
S&P 500 (-2.93%) -25.52 845.22
NASDAQ (-3.14%) -46.82 1,445.56
CNET TECH (-3.18%) -34.27 1,045.01
  Symbol Lookup
advertisement

Inside CNET News

Scroll Left Scroll Right