Microsoft issues patch for &#39;critical&#39; JPEG-handling flaw
499001
SEPTEMBER 14, 2004 (REUTERS) - Microsoft Corp. today released a patch for its latest &quot;critical&quot; security flaw affecting how Windows, Office and developer tools software process images in the JPEG image format.
284458
Microsoft (Nasdaq: MSFT) has released a patch for a potentially serious configuration flaw in the firewall that ships with the company's Windows XP Service Pack 2.
324860
Microsoft has released yet another hotfix&#39;to fix a newly discovered problem in its XP Service Pack2 (XP SP2) release.
609685
Microsoft today released an out-of-cycle security bulletin and patch for a critical hole in Internet Explorer that is already being widely exploited by attackers.
361991
Microsoft, which recommended immediate updates, said the newly discovered vulnerability could allow remote code execution of code thanks to a buffer-overrun vulnerability in the processing of JPEG image formats.
476991
Microsoft Corp.  released on Tuesday a patch for its latest "critical" rated security flaw affecting its Windows, Office and developer tools software programs.
734229
Microsoft has released a "critical" patch to fix a security flaw affecting how Windows, Office and developer tools software programs process images in the JPEG image format.
427995
Microsoft is offering a patch for a critical security flaw related to the processing of JPEG images by its operating systems and other applications.
104408
A software patch to protect your system is available from Microsoft.
739239
(InfoWorld) - Microsoft Corp. has rolled out its monthly security updates for December, patching critical flaws in Internet Explorer, Windows Media Format, and the Visual Studio 2005 development software. The seven security patches address 11 bugs, including two in the Windows Media Player software. However, no fixes were provided for two Microsoft Word flaws that have been used in a small number of attacks during the past week. Microsoft had said it would release only six patches on Tuesday, but the company added the Windows Media Format update at the last minute, after reports of attacks based on this vulnerability began surfacing. The Windows Media Format is used by Microsoft's Windows Media Player software. In late November, security vendors warned that a buffer overflow error could occur when the Windows Media Player processed ".asx" (Advanced Stream Redirector) media files, meaning that users would first need to be tricked into opening a malicious media file for the attack to work. In its update Tuesday, Microsoft also patched a similar bug in the way the media player processes ".asf" (Advanced Systems Format) files. The Internet Explorer patch fixes four bugs. It is also rated critical, and is noteworthy because some of these bugs will probably begin to be exploited by hackers by week's end, said Gunter Ollmann, director of IBM Corp.'s Internet Security System's X-Force threat analysis service. Enterprise administrators should also pay close attention to an SNMP (Simple Network Monitoring Protocol) patch issued Tuesday, Ollmann said. Microsoft has rated this patch as "important," rather than critical because SNMP is normally blocked at the firewall and turned off by default on Windows systems. However, it is widely deployed as part of the network monitoring infrastructure in the enterprise, and is often used on critical servers, Ollmann said. Ollmann believes this SNMP patch is the "most important" update for enterprise customers. "Since the service is widely deployed in the enterprise and since it's commonly deployed on servers, we think this would be an important attack vector for enterprises," he said. The remaining updates include a "critical" fix for Visual Studio 2005, and "important" updates for Windows and Outlook Express, Microsoft said. Microsoft defines "critical" flaws as bugs that could allow the propagation of an Internet worm without any action on the part of the victim. The company's next set of security updates are due Jan. 9.
768290
The first example of a working program designed to exploit a bug in Microsoft&#39;s GDI+ libraryâwhich allows malicious code to be run simply by viewing a JPEG imageâhas been found in the wild.
693507
Microsoft has patched a flaw in the Windows XP Service Pack 2 firewall. The flaw could make files viewable from outside a local network if file and printer sharing are enabled.
766257
SEATTLE -- Microsoft Corp. on Tuesday released a patch to fix a critical security flaw that could allow an attacker to infiltrate someone else&#39;s computer, if the user was persuaded to open a specialized file.
506682
After Microsoft announced a flaw (nicknamed the JPEG of Death) in Windows&#39; handling of JPEG images, a Trojan horse that exploits this flaw, has been found looming around pornographic sites.
689953
A recently detected exploit code foreshadows a likely worm-style attack on Windows machines plagued with the JPEG vulnerability made public last week, security experts said Thursday.
362606
Microsoft issued a patch for a vulnerability in its server software that could allow an attacker to spoof trusted Internet content.
211581
The seriousness of an already critical flaw in the way a Microsoft component processes JPEG files got ratcheted up a notch this week as exploit code began circulating.