Exploit posted for Microsoft JPEG flaw
628475
Computer code that exploits a flaw in the way many Microsoft applications process JPEG images has been published on the Internet and could indicate coming attacks on vulnerable PCs, experts said.
63078
Security researchers have discovered another vulnerability in Windows XP Service Pack 2, but it doesn&#39;t appear to be an immediate threat.
112557
Hackers are using porn images posted on Usenet newsgroups to take advantage of the flaw in Microsoft programs regarding JPEGs. An overflow occurs in the GDI+ JPEG decoder from malicious code in the JPEG.
94093
An intruder could manipulate a flaw in how the browsers handle image files to see where the user has been surfing.
3420
USENET PROVIDER Easynews says that it has turned up postings of porn pictures that are laced with a program that exploits the Windows JPEG glitch.
599698
A London security analyst working with the open source group GNUCitizen has discovered a potentially serious exploit that could affect users of the Firefox browser and Apple's QuickTime movie and music player - especially iTunes customers - on Windows XP-based machines. BetaNews tested and verified the severity of the exploit.
567828
ClamAV 0.80rc3 successfuly detects JPEG files with modified comment section that allows attackers to remotely execute arbitrary code on unpatched Windows machines.   You can find the latest release of ClamAV here:  https://sourceforge.net/project/showfiles.php?group_id=86638&package_id=90197
414849
The giant has released a patch so that Windows doesn&#39;t let in hackers when it handles JPEG graphics formats. The flaw means that attackers can create an image file that will automatically run dodgy code, dump
711347
Code that exploits a "critical" Windows flaw has been posted on the Net, opening the door for a worm to be created.
134795
NEW YORK - In a harbinger of security threats to come, hackers have exploited a newly announced flaw in Microsoft Corp. programs and begun circulating malicious code hidden in images that use the popular JPEG format.
211581
The seriousness of an already critical flaw in the way a Microsoft component processes JPEG files got ratcheted up a notch this week as exploit code began circulating.
300614
On Tuesday, Microsoft warned its customers that several of its products are vulnerable to a flaw in the way they handle JPEG graphics images.
202057
A Trojan horse that exploits a recent critical flaw in Microsoft Windows&#39; handling of JPEG images has been posted to several newsgroups, but it has no way to spread, security experts said Tuesday.
68684
Image files found on image-hosting sites look harmless, but conceal PHP exploit code.
660529
Just a week after Microsoft released a patch to plug a security flaw in the way at least 13 of its programs handle the JPEG imaging format, code appeared on the Internet on Wednesday showing how to exploit those holes.
268886
A hacker has released attack code that could be used to exploit a critical bug in some versions of the Windows operating system.Microsoft patched the flaw, which affects older versions of Windows, on Oct. 9. When the Image Viewer tries to open a maliciously encoded TIFF file, it can be tricked into running unauthorized software on the PC.A sample of the exploit was posted Monday to the Milw0rm Web site. The code has not yet been used in online attacks, according to Symantec, which issued an alert Monday.Symantec recommends that Windows users install the MS07-055 update as quickly as possible.Microsoft took the unusual step of issuing its own security update for Kodak&#39;s software, because the image viewer (formerly known as the Wang Image Viewer) had shipped in Windows 2000 systems by default.Still, many Windows users are not affected by the problem. Windows XP and Windows Server 2003 users should not have the software installed on their PCs, unless they downloaded it directly or upgraded from Windows 2000. Windows Vista users are not affected by the bug.Also, users would have to open the TIFF file using the Kodak Image Viewer for the attack to work. Because most PCs are set to automatically open TIFFs using some other piece of software, it is unlikely that an attack would succeed.&quot;Its not a huge deal, though, we don&#39;t think,&quot; said Marc Maiffret, chief technology officer with eEye Digital Security, via instant message. &quot;You probably have some other program that defaults to open TIFFs like QuickTime or Photoshop.&quot;The sample attack code affects the Korean language version of Windows, but it could be easily modified to affect other versions of the software, Maiffret said.
611562
Microsoft has issued a software tool that scans users&#39; computers to help them find software that may be affected by a recently discovered vulnerability in the way many Windows programs process JPEG files.