- Windows Metafile
Windows Metafile Filename extension
.wmf, .emf, .wmz, .emz
Internet media type
Developed by Microsoft Type of format Image file formats
Windows Metafile (WMF) is a graphics file format on Microsoft Windows systems, originally designed in the 1990s. Windows Metafiles are intended to be portable between applications and may contain both vector graphics and bitmap components.
Essentially, a WMF file stores a list of function calls that have to be issued to the Windows Graphics Device Interface (GDI) layer to display an image on screen. Since some GDI functions accept pointers to callback functions for error handling, a WMF file may erroneously include executable code.
In 1993, the 32-bit version of Win32/GDI introduced the Enhanced Metafile (EMF), a newer version with additional commands. EMF is also used as a graphics language for printer drivers.
With the release of Windows XP, the Enhanced Metafile Format Plus Extensions (EMF+) format was introduced. EMF+ provides a way to serialize calls to the GDI+ API in the same way that WMF/EMF stores calls to GDI.
There are also compressed versions of Windows Metafiles known as Compressed Windows Metafile (WMZ) and Compressed Windows Enhanced Metafile (EMZ).
Specifications and patents
The original 16 bit WMF file format was fully specified in volume 4 of the 1992 Windows 3.1 SDK documentation (at least if combined with the descriptions of the individual functions and structures in the other volumes), but that specification (like most computer manuals) was vague about a few details. These manuals were published as printed books available in bookstores with no click through EULA or other unusual restrictions (just a general warning that if purchased as part of a software bundle, the software would be subject to one).
Over time the existence of that historic specification was largely forgotten and some alternative implementations resorted to reverse engineering to figure out the file format from existing WMF files, which was difficult and error prone. In September 2006, Microsoft again published the WMF file format specification in the context of the Microsoft Open Specification Promise, promising to not assert patent rights to file format implementors.
Windows Metafile vulnerability
In December 2005, a vulnerability was reported to Microsoft by Symantec. By using a metafile to invoke a historic form of some printer management functions, Windows GDI could be tricked into executing data from the WMF file as code. It was assessed and classified as critical. This vulnerability was resolved in a security update on January 5, 2006 on Microsoft TechNet (MS06-001) and generally released January 10, 2006. Details can be found in Microsoft Knowledge Base Article "Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution" (912919). It was also referred to as the WMF (Windows Meta File) vulnerability.
Security expert Steve Gibson did a thorough analysis of the WMF vulnerability and reached the conclusion that it had been included intentionally by Microsoft as a "backdoor" for whatever reason. Hence, the idea that hackers used a bug is erroneous. What hackers did was just discover existing but - thus far - undisclosed functionality. The discovery was presented in issue 22 of Security Now. This claim has been challenged by Microsoft employee and Windows expert Mark Russinovich.
The WMF format was designed to be executed by the Windows GDI layer in order to restore the image, but as the WMF binary files contain the definition of the GDI graphic primitives that constitute this image, it is possible to design alternative libraries that render WMF binary files, or convert them into other graphic formats. For example, the Batik library is able to render WMF files and convert them to their Scalable Vector Graphics (SVG) equivalent. The Vector Graphics package of the FreeHEP Java library allows the saving of Java2D drawings as EMF files. EMZ is an EMF file compressed with gzip.
- ^ "It's not a bug, it's a feature". F-Secure. http://www.f-secure.com/weblog/archives/archive-012006.html#00000761. Retrieved 2009-10-08.
- ^ "You receive a "This file is an unsupported graphic format" error message when you try to insert a picture into a PowerPoint for Mac presentation". Microsoft. http://support.microsoft.com/kb/895083. Retrieved 2008-06-01.
- ^ Microsoft Windows 3.1 Programmers Reference, Volume 4 Resources, Microsoft Press 1992, ISBN 1-55615-494-1, chapter 3 pp. 21-45
- ^ Caolan McNamara. "Window Metafile (wmf) Reference". http://wvware.sourceforge.net/caolan/support.html. Retrieved 2008-06-01. "These opcodes are unimplemented, for the reason that i dont know what they are, no known documentation"
- ^ "MS-WMF: Windows Metafile Format Specification". http://msdn.microsoft.com/en-us/library/cc215212.aspx. Retrieved 2008-06-01.
- ^ "Microsoft Open Specification Promise". http://www.microsoft.com/interop/osp/. Retrieved 2008-06-01.
- ^ Steve Gibson. "Security Now, Issue #22, The Windows Metafile Backdoor?". http://www.grc.com/securitynow.htm#22. Retrieved 2010-06-11. "'"
- ^ "Inside the WMF Backdoor"
- Windows Metafile Format Specification from Microsoft
- MSDN: Windows GDI- Metafiles
- File Format Summary at fileformat.info
- Windows Metafile FAQ
Graphics file formats Raster
- ICO / CUR
- JPEG 2000
- JPEG XR
- PSD / PSB
- Logluv TIFF)
Raw Vector Compound Related
Wikimedia Foundation. 2010.
Look at other dictionaries:
Windows Metafile — Расширение .wmf, .wmz MIME image/x wmf Разработан Microsoft Тип формата векторная графика Развит в EMF … Википедия
Windows Metafile — (WMF) est un format d image numérique sur les systèmes Windows, conçu au début des années 1990 et de moins en moins utilisé depuis l avènement d Internet et de l utilisation massive d autres formats comparables comme GIF, JPEG, et PNG. C est un… … Wikipédia en Français
Windows metafile — графический формат ОС Windows, служащий для передачи векторных изображений через буфер обмена (сlipboard). Синонимы английские: WMF См. также: Форматы компьютерной графики Файлы Векторная графика Финансовый словарь Финам … Финансовый словарь
Windows Metafile — Vorlage:Infobox Dateiformat/Wartung/MagischeZahl fehltVorlage:Infobox Dateiformat/Wartung/Standard fehltVorlage:Infobox Dateiformat/Wartung/Website fehlt Windows Metafile Dateiendung: .wmf, .wmz MIME Type … Deutsch Wikipedia
Windows Metafile vulnerability — The Windows Metafile vulnerability is a security vulnerability in Microsoft Windows NT based operating systems which has been used in a variety of exploits since late December 2005. The vulnerability was first discussed in the computer security… … Wikipedia
Windows Metafile Format — graphic file format that can be used for both vector and bitmap images, WMF (Computers) … English contemporary dictionary
Microsoft Windows Metafile — … Википедия
Windows Meta File — Windows Metafile (WMF) ist ein proprietäres Meta Files Grafikformat der Firma Microsoft. Es wurde entwickelt für den Austausch von Grafiken über verschiedene Programme hinweg und findet unter anderem Verwendung in der Windows Zwischenablage.… … Deutsch Wikipedia
Metafile — is a generic term for a file format that can store multiple types of data. This commonly includes graphics file formats. These graphics files can contain raster, vector, and type data. A common use for these files is to provide support for an… … Wikipedia
Windows Enhanced Metafile — Vorlage:Infobox Dateiformat/Wartung/MagischeZahl fehltVorlage:Infobox Dateiformat/Wartung/Standard fehltVorlage:Infobox Dateiformat/Wartung/Website fehlt Windows Enhanced Metafile Dateiendung: .emf, .emz MIME Type … Deutsch Wikipedia