Hackers take advantage of Microsoft&#39;s JPEG flaw
134795
NEW YORK - In a harbinger of security threats to come, hackers have exploited a newly announced flaw in Microsoft Corp. programs and begun circulating malicious code hidden in images that use the popular JPEG format.
357185
Just one day after&#160;Microsoft issued a massive set of security patches for its software, hackers have begun posting code showing how to exploit one of the flaws.The proof-of-concept code, posted Wednesday to the Milw0rm Web site, exploits a bug in the Microsoft Works file converter software that is part of Office 2003 and can be used to run unauthorized software on a victim&#39;s computer.The flaw also affects Works 8 and Works Suite 2005. To fall prey to the attack, a victim would first have to open a malicious Works attachment.Hackers have uncovered many of these file-format bugs in recent years, and they are generally not used in widespread attacks. In fact, security vendor Symantec predicts that we&#39;ll see fewer of these attacks in the months ahead as online criminals increasingly rely on browser bugs to do their dirty work.&quot;The bad guys, they&#39;re looking for different ways to trick people,&quot; said Wayne Periman, director of development with Symantec Security Response. &quot;The popular method of choice is to exploit plugins in browsers right now.&quot;Still, Periman expects criminals to try out this latest attack code. &quot;It&#39;s so simple,&quot; he said. &quot;All you have to do is get someone to open the document.&quot;As of Wednesday, Symantec had not seen any signs of attackers taking advantage of any of the flaws that Microsoft fixed this week.The software vendor released 11 sets of patches this week, fixing 17 flaws in its products, but this is the first exploit code to pop up following Tuesday&#39;s updates. A second program exploiting one of these vulnerabilities -- this one in an ActiveX control used by the Visual FoxPro database -- was posted to Milw0rm in September, months before Microsoft patched the issue.
104025
Less than a day after Microsoft detailed the latest Windows vulnerability, hackers were hunting for exploit codes. By Gregg Keizer, TechWeb News.
628475
Computer code that exploits a flaw in the way many Microsoft applications process JPEG images has been published on the Internet and could indicate coming attacks on vulnerable PCs, experts said.
414849
The giant has released a patch so that Windows doesn&#39;t let in hackers when it handles JPEG graphics formats. The flaw means that attackers can create an image file that will automatically run dodgy code, dump
146749
One of the first flaws found in Windows XP SP2 -- which leaves a PC vulnerable through a drag-and-drop hole in Internet Explorer -- could be used by hackers for even greater mischief.
262607
Group of security professionals produces a patch for a flaw in Windows Shell that is being used in cyberattacks.
516314
Windows&#39; JPEG vulnerability could be exploited by using Internet Explorer, a security firm claimed Wednesday, making the threat a potentially &quot;devastating&quot; one.
49531
Microsoftâs monthly security bulletin has uncovered a âcriticalâ buffer overrun vulnerability that exists in the processing of JPEG image formats.
414948
A critical flaw in Microsoft Corp.&#39;s (MSFT.O: Quote, Profile, Research) Internet Explorer Web browser could allow a hacker to take control of a computer, the world&#39;s largest software maker said on Wednesday.
381960
More details are now available on the hacking of the Microsoft UK Web site, with experts saying that the attackers got in through a SQL injection exploiting a vulnerability in the Web server software.
211581
The seriousness of an already critical flaw in the way a Microsoft component processes JPEG files got ratcheted up a notch this week as exploit code began circulating.
324468
A vulnerability in Windows XP and other products means JPEG viruses may not remain just a hoary myth.
356486
Security flaw involving JPEG files affects at least a dozen Microsoft software applications and operating systems.
178847
A bug in Microsoft&#39;s Internet Security and Acceleration (ISA) Server 2000 and Proxy Server 2.0 can let hackers spoof Web content, such as a trusted site, with their own fake content, the Redmond
217773
Users of Microsoft Windows who have not downloaded the SP2 update are at risk of exposure to hackers when they open jpeg picture files, the BBC said Thursday.
430066
During the course of this weekend, hackers found an ingenious way to attack Microsoftâs ubiquitous Internet Explorer: compromise an ad networkâs servers.