Microsoft JPEG Flaw Exploited
34935
September 20, 2004 -- (WEB HOST INDUSTRY REVIEW) -- According to a report published Friday by Internet research firm Netcraft (netcraft.
461708
Microsoft published on Tuesday a patch for a major security flaw in its software&#39;s handling of the JPEG graphics format and urged customers to use a new tool to locate the many applications that are vulnerable.
302277
Both Windows and Mac versions of the multimedia program have a buffer overflow flaw that puts users at risk.
63078
Security researchers have discovered another vulnerability in Windows XP Service Pack 2, but it doesn&#39;t appear to be an immediate threat.
241353
The new flaw is unrelated to the help-file flaws discovered by a Chinese security company last week. Microsoft took the Chinese security group to task for disclosing the vulnerability without giving the company a chance to develop a fix.
176052
Microsoft has issued a patch to fix the security flaw, and urges its customers to use a new utility to locate the computer applications that are vulnerable.
121787
A toolkit designed to exploit a recently-disclosed Microsoft JPEG vulnerability has been released onto the net.
44372
A flaw in the way the Firefox and Opera browsers handle an image file could allow an attacker to see what Web sites a person has visited.
498738
A hacker has released attack code that could be used to exploit a critical bug in some versions of the Windows operating system.
414849
The giant has released a patch so that Windows doesn&#39;t let in hackers when it handles JPEG graphics formats. The flaw means that attackers can create an image file that will automatically run dodgy code, dump
357185
Just one day after&#160;Microsoft issued a massive set of security patches for its software, hackers have begun posting code showing how to exploit one of the flaws.The proof-of-concept code, posted Wednesday to the Milw0rm Web site, exploits a bug in the Microsoft Works file converter software that is part of Office 2003 and can be used to run unauthorized software on a victim&#39;s computer.The flaw also affects Works 8 and Works Suite 2005. To fall prey to the attack, a victim would first have to open a malicious Works attachment.Hackers have uncovered many of these file-format bugs in recent years, and they are generally not used in widespread attacks. In fact, security vendor Symantec predicts that we&#39;ll see fewer of these attacks in the months ahead as online criminals increasingly rely on browser bugs to do their dirty work.&quot;The bad guys, they&#39;re looking for different ways to trick people,&quot; said Wayne Periman, director of development with Symantec Security Response. &quot;The popular method of choice is to exploit plugins in browsers right now.&quot;Still, Periman expects criminals to try out this latest attack code. &quot;It&#39;s so simple,&quot; he said. &quot;All you have to do is get someone to open the document.&quot;As of Wednesday, Symantec had not seen any signs of attackers taking advantage of any of the flaws that Microsoft fixed this week.The software vendor released 11 sets of patches this week, fixing 17 flaws in its products, but this is the first exploit code to pop up following Tuesday&#39;s updates. A second program exploiting one of these vulnerabilities -- this one in an ActiveX control used by the Visual FoxPro database -- was posted to Milw0rm in September, months before Microsoft patched the issue.
628475
Computer code that exploits a flaw in the way many Microsoft applications process JPEG images has been published on the Internet and could indicate coming attacks on vulnerable PCs, experts said.
143929
Microsoft Windows users need to watch out for several flaws in non-Microsoft media players.
543022
Code that exploits a serious, yet-to-be-patched hole in Microsoft's Web browser has been posted on the Net.
5949
Handling of images could allow an attacker to take over your PC.
738318
Hackers can wield malicious Windows Media Player files to exploit any unpatched Internet Explorer (IE) vulnerability on a PC, even if IE isn't the browser of choice.
213499
Update to "critical" Internet Explorer patch repairs a serious security flaw introduced by the original version.