WMF file concerns

[Dino Edwards]

There have been WMF vulnerabilities in the past. Here's an example:

https://technet.microsoft.com/library/security/ms11-038

I know it's pretty old and but even if the systems are patched, it's probably best not to allow them. There could be some 0-day malware taking advantage of WMF vulnerabilities. 




-----Original Message-----
From: amavis-users [mailto:amavis-users-bounces+dino.edwards=mydirectmail.net at amavis.org] On Behalf Of Alex
Sent: Tuesday, October 24, 2017 2:30 PM
To: amavis-users at amavis.org
Subject: WMF file concerns

Hi, would someone confirm for me the risks of allowing Word files that include WMF files?

X-Amavis-Alert: BANNED, message contains .wmf,word/media/image1.wmf

I'm seeing it's quite common for Word files to include this image1.wmf file, and wondered what the risk would be for allowing them.