MS Releases Fix For Graphics Flaw

TwistedMetal · Sep 15, 2004, 02:43 AM

Microsoft officials have announced two patches as part of its monthly releases for September -- one rated critical, one important.

The patches come days after internetnews.com reported that Microsoft gives premium customers advance notice about its security bulletins before it publicly releases the information.

The critical flaw that Microsoft announced today addresses a remote code execution vulnerability when users open a JPEG (define) image on an infected machine. When the PC processes the image, the malware (define) causes a buffer overrun that overwrites program code and replaces it with its own, potentially giving the intruder administrative control of the computer.

Security officials note the only way for the vulnerability to execute is for users to open the image file. This naturally extends to users who visit a site with the doctored image; clicking on the link to such a site automatically downloads and processes the image.

Windows XP, XP Service Pack 1 and Windows Server 2003 are the only operating systems vulnerable to the attack by default, though Windows 98/98 SE/ME/NT 4.0/2000 can host the vulnerability that will subsequently affect specific software programs. A short list of affected software includes: IE 6, Service Pack 1, .NET Framework versions 1.0 and 1.1, Office 2002/2003, Visual Studio .NET 2002/2003, Picture It! and Digital Image Pro, the Microsoft Platform SDK.

A complete list of affected software and update downloads is available here .

Full Article: MS Releases Fix For Graphics Flaw
Source: Internet News

Matth · Sep 15, 2004, 05:23 PM

http://www.microsoft.com/downloads/d...displaylang=en

For Win9x-2000 users who have GDI+ to support any programs which require it - some free programs do, as well as the Microsoft stuff.

Would have been nice if they'd pointed their existing links for GDI+ to it, as they've left a few dead ones!

Sep 15, 2004, 02:43 AM	#1
TwistedMetal MC John-117 Join Date: Jul 2003 Location: Phoenix, Arizona Posts: 728 Rep Power: 0	MS Releases Fix For Graphics Flaw Microsoft officials have announced two patches as part of its monthly releases for September -- one rated critical, one important. The patches come days after internetnews.com reported that Microsoft gives premium customers advance notice about its security bulletins before it publicly releases the information. The critical flaw that Microsoft announced today addresses a remote code execution vulnerability when users open a JPEG (define) image on an infected machine. When the PC processes the image, the malware (define) causes a buffer overrun that overwrites program code and replaces it with its own, potentially giving the intruder administrative control of the computer. Security officials note the only way for the vulnerability to execute is for users to open the image file. This naturally extends to users who visit a site with the doctored image; clicking on the link to such a site automatically downloads and processes the image. Windows XP, XP Service Pack 1 and Windows Server 2003 are the only operating systems vulnerable to the attack by default, though Windows 98/98 SE/ME/NT 4.0/2000 can host the vulnerability that will subsequently affect specific software programs. A short list of affected software includes: IE 6, Service Pack 1, .NET Framework versions 1.0 and 1.1, Office 2002/2003, Visual Studio .NET 2002/2003, Picture It! and Digital Image Pro, the Microsoft Platform SDK. A complete list of affected software and update downloads is available here . Full Article: MS Releases Fix For Graphics Flaw Source: Internet News __________________ [color=red][/color]

Sep 15, 2004, 05:23 PM	#2
Matth Flash Banner Hater Join Date: Jun 2002 Location: UK Posts: 3,410 Rep Power: 91 System Specs	http://www.microsoft.com/downloads/d...displaylang=en For Win9x-2000 users who have GDI+ to support any programs which require it - some free programs do, as well as the Microsoft stuff. Would have been nice if they'd pointed their existing links for GDI+ to it, as they've left a few dead ones!