First sign of malicious code exploiting Windows Jpeg security flaw
30517
The first malicious codes to exploit security flaws in Microsoft Windows&#39; handling of jpeg image files has appeared on internet newsgroups.
356486
Security flaw involving JPEG files affects at least a dozen Microsoft software applications and operating systems.
491726
A security flaw in the way many Microsoft Corp. applications process JPEG images could allow an attacker to gain control over a computer running the software, Microsoft warned Tuesday.
553871
One of the standard security tactics enterprises apply won&#39;t work when defending PCs against threats posed by the image processing flaw found last week in Windows and numerous applications, according to security experts.
378682
A critical weakness found in many Microsoft programs looks like it is about to be exploited by virus writers. The bug only came to light last week, but code is now circulating that could be used to attack vulnerable machines.
551854
InfoWorld - A hacker has released attack code that could be used to exploit a critical bug in some versions of the Windows operating system.
155011
Infected graphical images that can implant a backdoor into a Windows computer if they are viewed have been spotted on Usenet. EasyNews, a provider of Usenet newsgroups, said it has identified two JPEG images
5949
Handling of images could allow an attacker to take over your PC.
408824
Well, if you haven&#39;t patched your PC yet, now is the time. A sample program hit the Internet on Wednesday, showing by example how malicious coders could compromise Windows computers by using a flaw in the
221404
Millions of computer users are at risk of attack because flaws in the way Windows handles some images.
476912
Computer code that takes advantage of a flaw in the way many Microsoft Corp. applications process JPEG images has been published on the Internet and could be a precursor to actual attacks on vulnerable PCs, experts said.
97191
A Chinese security group has released sample code to exploit two new unpatched flaws in Microsoft Windows. The advisory comes in the week before Christmas, a time when many companies and home users are least prepared to deal with the problems.
740269
(InfoWorld) - Users are being advised to disable a certain type of file in Microsoft's Windows Media Player software following the discovery of a new security hole in the software. The flaw, which affects Windows Media Player versions 9 and 10, could allow a malicious hacker to run unauthorized software on a victim's PC or cause a denial of service attack, according to security company FrSIRT, which rated the problem critical in an advisory Thursday. The flaw is due to a buffer overflow error that can occur when Windows Media Player is used to run ".asx" media files, according to a warning from eEye Digital Security . Such files open automatically in a Web browser, meaning a hacker would need only to post an infected .asx file in a Web page and then try to lure users to visit the page, eEye Digital said. An infected file could also be sent via email, in which case users would need to be persuaded to open it. Microsoft said an initial investigation revealed that the "proof of concept" code could allow an attacker to execute code on a user's machine. It said it was unaware of any attempts to exploit the vulnerability, and it was unclear Friday morning if the proof of concept code it referred to was in the hands of hackers. Users can protect against the vulnerability in Internet Explorer by preventing it from opening .asx files automatically. Turning off Active Scripting would also greatly reduce, but not eliminate, the risk, Microsoft said. FrSIRT also recommended that users upgrade to Windows Media Player 11 , which it said is not affected. Microsoft was still determining Friday whether it needed to issue an "out of cycle" security fix for the problem or patch it with its next monthly software update. The flaw was originally reported on Nov. 22, when it was identified only as a denial-of-service issue. Some discussion boards described the problem as a "zero-day exploit," although it was unclear if that was the case. Zero-day exploits occur when exploit code is released on the same day that a flaw is uncovered, giving users no time to protect themselves. It's been another busy week for Microsoft's security teams. On TuesdayÂ the company warnedÂ of an unpatched vulnerability in Word that had been the subject of what it called "limited attacks." And on Thursday it said it was readying several patches for Visual Studio and Windows that it plans to release next week. The patches currently due for next weekÂ do not address the problemsÂ with Word and Windows Media Player.
430846
In a harbinger of security threats to come, hackers have exploited a newly announced flaw in Microsoft Corp. (MSFT) programs and begun circulating malicious code hidden in images that use the popular JPEG format...
143929
Microsoft Windows users need to watch out for several flaws in non-Microsoft media players.
268886
A hacker has released attack code that could be used to exploit a critical bug in some versions of the Windows operating system.Microsoft patched the flaw, which affects older versions of Windows, on Oct. 9. When the Image Viewer tries to open a maliciously encoded TIFF file, it can be tricked into running unauthorized software on the PC.A sample of the exploit was posted Monday to the Milw0rm Web site. The code has not yet been used in online attacks, according to Symantec, which issued an alert Monday.Symantec recommends that Windows users install the MS07-055 update as quickly as possible.Microsoft took the unusual step of issuing its own security update for Kodak&#39;s software, because the image viewer (formerly known as the Wang Image Viewer) had shipped in Windows 2000 systems by default.Still, many Windows users are not affected by the problem. Windows XP and Windows Server 2003 users should not have the software installed on their PCs, unless they downloaded it directly or upgraded from Windows 2000. Windows Vista users are not affected by the bug.Also, users would have to open the TIFF file using the Kodak Image Viewer for the attack to work. Because most PCs are set to automatically open TIFFs using some other piece of software, it is unlikely that an attack would succeed.&quot;Its not a huge deal, though, we don&#39;t think,&quot; said Marc Maiffret, chief technology officer with eEye Digital Security, via instant message. &quot;You probably have some other program that defaults to open TIFFs like QuickTime or Photoshop.&quot;The sample attack code affects the Korean language version of Windows, but it could be easily modified to affect other versions of the software, Maiffret said.
302277
Both Windows and Mac versions of the multimedia program have a buffer overflow flaw that puts users at risk.