First sign of malicious code exploiting Windows Jpeg security flaw
30517
The first malicious codes to exploit security flaws in Microsoft Windows&#39; handling of jpeg image files has appeared on internet newsgroups.
268886
A hacker has released attack code that could be used to exploit a critical bug in some versions of the Windows operating system.Microsoft patched the flaw, which affects older versions of Windows, on Oct. 9. When the Image Viewer tries to open a maliciously encoded TIFF file, it can be tricked into running unauthorized software on the PC.A sample of the exploit was posted Monday to the Milw0rm Web site. The code has not yet been used in online attacks, according to Symantec, which issued an alert Monday.Symantec recommends that Windows users install the MS07-055 update as quickly as possible.Microsoft took the unusual step of issuing its own security update for Kodak&#39;s software, because the image viewer (formerly known as the Wang Image Viewer) had shipped in Windows 2000 systems by default.Still, many Windows users are not affected by the problem. Windows XP and Windows Server 2003 users should not have the software installed on their PCs, unless they downloaded it directly or upgraded from Windows 2000. Windows Vista users are not affected by the bug.Also, users would have to open the TIFF file using the Kodak Image Viewer for the attack to work. Because most PCs are set to automatically open TIFFs using some other piece of software, it is unlikely that an attack would succeed.&quot;Its not a huge deal, though, we don&#39;t think,&quot; said Marc Maiffret, chief technology officer with eEye Digital Security, via instant message. &quot;You probably have some other program that defaults to open TIFFs like QuickTime or Photoshop.&quot;The sample attack code affects the Korean language version of Windows, but it could be easily modified to affect other versions of the software, Maiffret said.
408370
Microsoft Corp. announced Tuesday it has found a new security flaw with its Windows XP operating system and warned that an attacker could infiltrate other computers by persuading their owners to open a specialized graphics file.
155011
Infected graphical images that can implant a backdoor into a Windows computer if they are viewed have been spotted on Usenet. EasyNews, a provider of Usenet newsgroups, said it has identified two JPEG images
689953
A recently detected exploit code foreshadows a likely worm-style attack on Windows machines plagued with the JPEG vulnerability made public last week, security experts said Thursday.
415389
InfoWorld - In what may be the first step toward a major security problem, security researchers have released attack code that will crash Windows machines that are susceptible to a recently patched bug in the operating system.
112557
Hackers are using porn images posted on Usenet newsgroups to take advantage of the flaw in Microsoft programs regarding JPEGs. An overflow occurs in the GDI+ JPEG decoder from malicious code in the JPEG.
202057
A Trojan horse that exploits a recent critical flaw in Microsoft Windows&#39; handling of JPEG images has been posted to several newsgroups, but it has no way to spread, security experts said Tuesday.
532930
Microsoft has issued a critical security bulletin regarding a buffer overrun vulnerability that exists when Windows processes JPEG image files. The flaw could allow code to be remotely executed and give an attacker full control over an affected system. Microsoft has posted a September 2004 Security Update to correct the issue.
360592
Exploit code affecting an unpatched flaw in an image uploader used by both Facebook and MySpace is circulating publicly.
663754
Microsoft has confirmed the existence of a vulnerability affecting the Windows Shell. The issue exists in the WebViewFolderIcon ActiveX control, and exploitation could result in an attacker gaining the same rights as a local user.
567828
ClamAV 0.80rc3 successfuly detects JPEG files with modified comment section that allows attackers to remotely execute arbitrary code on unpatched Windows machines.   You can find the latest release of ClamAV here:  https://sourceforge.net/project/showfiles.php?group_id=86638&package_id=90197
121787
A toolkit designed to exploit a recently-disclosed Microsoft JPEG vulnerability has been released onto the net.
744672
Windows security holes patched; tool to rid PCs of malicious software now available.
551854
InfoWorld - A hacker has released attack code that could be used to exploit a critical bug in some versions of the Windows operating system.
134795
NEW YORK - In a harbinger of security threats to come, hackers have exploited a newly announced flaw in Microsoft Corp. programs and begun circulating malicious code hidden in images that use the popular JPEG format.
475886
One of the standard security tactics enterprises apply won&#39;t work when defending PCs against threats posed by the image processing flaw found last week in Windows and numerous applications, security experts said Tuesday.