Exploit for Microsoft JPEG Flaw Is Published
97618
Code that claims to partially exploit a weakness in Microsoft software&#39;s handling of image files has been published on the Internet.
268886
A hacker has released attack code that could be used to exploit a critical bug in some versions of the Windows operating system.Microsoft patched the flaw, which affects older versions of Windows, on Oct. 9. When the Image Viewer tries to open a maliciously encoded TIFF file, it can be tricked into running unauthorized software on the PC.A sample of the exploit was posted Monday to the Milw0rm Web site. The code has not yet been used in online attacks, according to Symantec, which issued an alert Monday.Symantec recommends that Windows users install the MS07-055 update as quickly as possible.Microsoft took the unusual step of issuing its own security update for Kodak&#39;s software, because the image viewer (formerly known as the Wang Image Viewer) had shipped in Windows 2000 systems by default.Still, many Windows users are not affected by the problem. Windows XP and Windows Server 2003 users should not have the software installed on their PCs, unless they downloaded it directly or upgraded from Windows 2000. Windows Vista users are not affected by the bug.Also, users would have to open the TIFF file using the Kodak Image Viewer for the attack to work. Because most PCs are set to automatically open TIFFs using some other piece of software, it is unlikely that an attack would succeed.&quot;Its not a huge deal, though, we don&#39;t think,&quot; said Marc Maiffret, chief technology officer with eEye Digital Security, via instant message. &quot;You probably have some other program that defaults to open TIFFs like QuickTime or Photoshop.&quot;The sample attack code affects the Korean language version of Windows, but it could be easily modified to affect other versions of the software, Maiffret said.
722122
Security experts are reporting several new Windows and Internet Explorer vulnerabilities at year-end, including a flaw in the way Windows handles image files, and another involving IE and SP2 help files.
300614
On Tuesday, Microsoft warned its customers that several of its products are vulnerable to a flaw in the way they handle JPEG graphics images.
506682
After Microsoft announced a flaw (nicknamed the JPEG of Death) in Windows&#39; handling of JPEG images, a Trojan horse that exploits this flaw, has been found looming around pornographic sites.
3420
USENET PROVIDER Easynews says that it has turned up postings of porn pictures that are laced with a program that exploits the Windows JPEG glitch.
30517
The first malicious codes to exploit security flaws in Microsoft Windows&#39; handling of jpeg image files has appeared on internet newsgroups.
331370
A tool that makes it easy to craft malicious JPEG images then let them loose against vulnerable Windows PCs has appeared, security experts said Friday, leading many to believe
338092
Microsoft is working to patch a security flaw in its word-processing software that is being used in targeted cyberattacks.
323110
Code that exploits a weakness in the way many Microsoft applications process JPEG images has been published on the internet. Microsoft only discovered the security flaw, which could allow software viewing
68684
Image files found on image-hosting sites look harmless, but conceal PHP exploit code.
302277
Both Windows and Mac versions of the multimedia program have a buffer overflow flaw that puts users at risk.
309640
Malicious hackers are seeding Internet news groups that traffic in pornography with JPEG images that take advantage of a recently disclosed security hole in Microsoft&#39;s software, according to warnings from antivirus software companies and Internet
224283
Trojan horse that exploits flaw in how Windows handles JPEG images may be low risk, but it's a bad omen.
611562
Microsoft has issued a software tool that scans users&#39; computers to help them find software that may be affected by a recently discovered vulnerability in the way many Windows programs process JPEG files.
532930
Microsoft has issued a critical security bulletin regarding a buffer overrun vulnerability that exists when Windows processes JPEG image files. The flaw could allow code to be remotely executed and give an attacker full control over an affected system. Microsoft has posted a September 2004 Security Update to correct the issue.
211581
The seriousness of an already critical flaw in the way a Microsoft component processes JPEG files got ratcheted up a notch this week as exploit code began circulating.