WMF file concerns

Dino Edwards dino.edwards at mydirectmail.net
Wed Oct 25 11:26:08 CEST 2017

There have been WMF vulnerabilities in the past. Here's an example:


I know it's pretty old and but even if the systems are patched, it's probably best not to allow them. There could be some 0-day malware taking advantage of WMF vulnerabilities. 

-----Original Message-----
From: amavis-users [mailto:amavis-users-bounces+dino.edwards=mydirectmail.net at amavis.org] On Behalf Of Alex
Sent: Tuesday, October 24, 2017 2:30 PM
To: amavis-users at amavis.org
Subject: WMF file concerns

Hi, would someone confirm for me the risks of allowing Word files that include WMF files?

X-Amavis-Alert: BANNED, message contains .wmf,word/media/image1.wmf

I'm seeing it's quite common for Word files to include this image1.wmf file, and wondered what the risk would be for allowing them.

More information about the amavis-users mailing list