Dangerous Exploit Targets JPEG Flaw
104408
A software patch to protect your system is available from Microsoft.
268886
A hacker has released attack code that could be used to exploit a critical bug in some versions of the Windows operating system.Microsoft patched the flaw, which affects older versions of Windows, on Oct. 9. When the Image Viewer tries to open a maliciously encoded TIFF file, it can be tricked into running unauthorized software on the PC.A sample of the exploit was posted Monday to the Milw0rm Web site. The code has not yet been used in online attacks, according to Symantec, which issued an alert Monday.Symantec recommends that Windows users install the MS07-055 update as quickly as possible.Microsoft took the unusual step of issuing its own security update for Kodak&#39;s software, because the image viewer (formerly known as the Wang Image Viewer) had shipped in Windows 2000 systems by default.Still, many Windows users are not affected by the problem. Windows XP and Windows Server 2003 users should not have the software installed on their PCs, unless they downloaded it directly or upgraded from Windows 2000. Windows Vista users are not affected by the bug.Also, users would have to open the TIFF file using the Kodak Image Viewer for the attack to work. Because most PCs are set to automatically open TIFFs using some other piece of software, it is unlikely that an attack would succeed.&quot;Its not a huge deal, though, we don&#39;t think,&quot; said Marc Maiffret, chief technology officer with eEye Digital Security, via instant message. &quot;You probably have some other program that defaults to open TIFFs like QuickTime or Photoshop.&quot;The sample attack code affects the Korean language version of Windows, but it could be easily modified to affect other versions of the software, Maiffret said.
81976
Recently discovered vulnerability allows hackers to use Web graphics to launch attacks.
112557
Hackers are using porn images posted on Usenet newsgroups to take advantage of the flaw in Microsoft programs regarding JPEGs. An overflow occurs in the GDI+ JPEG decoder from malicious code in the JPEG.
224283
Trojan horse that exploits flaw in how Windows handles JPEG images may be low risk, but it's a bad omen.
7630
Since Wednesday, a rising tide of attacks which could precede the arrival of a new worm have been attempting to exploit the Windows GDI (graphic device interface) for JPEG files, according to the Internet Storm Center, Bethesda, MD.
23136
The hacker who discovered a recently patched QuickTime flaw affecting the Firefox browser says he has found an equally serious flaw in Adobe Systems Inc.&#39;s PDF file format.
532930
Microsoft has issued a critical security bulletin regarding a buffer overrun vulnerability that exists when Windows processes JPEG image files. The flaw could allow code to be remotely executed and give an attacker full control over an affected system. Microsoft has posted a September 2004 Security Update to correct the issue.
212483
A critical security flaw has been discovered in WinAmp that exploits the stack-based buffer overflow vulnerability allowing attacks from hackers.
127768
Third-party fix plugs a recently discovered browser flaw that's increasingly being exploited in cyberattacks.
688722
Sample code that exploits a yet-to-be-fixed Windows flaw is circulating. Microsoft plans to deal with it on the next Patch Tuesday.
283708
Builder.com.au has a new article today about the recent image issue - the PHP code embedded inside the GIF - that's come up on several sites.   The exploit code slipped through the site's defenses with the aid of a legitimate image at the beginning of the file, according to a blog post on the Sans Institutes's Internet Storm Center. [...] Malicious attackers planted PHP coded exploit script within an image file. PHP is often used as a programming language to create dynamic Web sites.   The article reports that, while this exploit hasn't happened much, the occurrences of it's use are growing with victims in a wide range of classifications - from small personal sites out to a certain major image hosting site. This same issue was discussed here on the PHPClasses.org website as well.
356486
Security flaw involving JPEG files affects at least a dozen Microsoft software applications and operating systems.
301264
Hackers wasted little time in exploiting a flaw in the way Microsoft software handles graphics files. Internet watchers say they&#39;ve spotted infected images that could implant a back door into a Windows computer if they are viewed.
493275
The vulnerability allowed uniform resource identifiers, or URIs, in image tags to be executed even if JavaScript was disabled in the program preferences.
289568
Because Internet Explorer is one of the programs vulnerable to a newly discovered Windows image flaw, it is possible that someone could fall victim to a virus written to exploit it just by visiting a Web site that uses JPEG images.
516314
Windows&#39; JPEG vulnerability could be exploited by using Internet Explorer, a security firm claimed Wednesday, making the threat a potentially &quot;devastating&quot; one.