Saturday, August 30, 2014
Search
  
Submit your own News for
inclusion in our Site.
Click here...
Breaking News
Intel Hopes To Improve Its Mobile Business With Ex-Qualcomm exec
Kingston HyperX Demos DDR4 Memory at PAX Prime
Corsair and ASUS Fastest DDR4 Memory Kit
Intel Unleashes its First 8-Core Desktop Processor For Gaming
Samsung Partners with Nike On Running App
Samsung Applied for Samsung Quantum Dot TV Trademark
New iPhones Expected at Sept. 9 Event
Google Tests Drones For Delivery Of Goods
Active Discussions
help questions structure DVDR
Made video, won't play back easily
Questions durability monitor LCD
Questions fungus CD/DVD Media, Some expert engineer in optical media can help me?
CD, DVD and Blu-ray burning for Android in development
IBM supercharges Power servers with graphics chips
Werner Vogels: four cloud computing trends for 2014
Video editing software.
 Home > News > General Computing > JPEG ha...
Last 7 Days News : SU MO TU WE TH FR SA All News

Wednesday, September 15, 2004
JPEG handling flaw threatens PCs, Microsoft warns


A security flaw in the way many Microsoft applications process JPEG images could allow an attacker to gain control over a computer running the software, Microsoft warned Tuesday.

Any program that processes JPEG images could be vulnerable, Microsoft said in Security Bulletin MS04-028. To take advantage of the flaw, an attacker would have to persuade a user to open a specially crafted image file. The image could be hosted on a Web site, included in an e-mail, Office document or hosted on a local network, Microsoft said.

A wide range of Microsoft software, including various versions of its Windows and Office products, is vulnerable. Additionally, applications created with Microsoft's Visual Studio developer tool or the.Net Framework and third-party applications that distribute their own copy of the vulnerable JPEG parsing engine may also be vulnerable, Microsoft said.

Along with the Security Bulletin, Microsoft made available software updates to correct the flaw in its products. The software maker also offers a tool to scan a PC for certain installed products that are known to contain the vulnerable JPEG image processing engine.

Microsoft rates the flaw "important' for many of its products, but "critical" for Outlook versions 2002 and 2003, Internet Explorer 6 with Service Pack 1, Windows XP and Windows XP with Service Pack 1, Windows Server 2003, and the .Net Framework 1.0 with Service Pack 2 and .Net Framework 1.1, according to the Security Bulletin.

In Microsoft's rating system for security issues, vulnerabilities that could allow a malicious Internet worm to spread without any action required on the part of the user are rated critical. Issues that will not lead to the spread of a worm without any action taken by the user, but could still expose user data or threaten system resources, are rated important.

The JPEG flaw was reported privately to Microsoft and it was not disclosed prior to the Tuesday release of the warning and patches, the software maker said. There have been no reports of the issue being exploited, Microsoft said.

In addition to the JPEG issue, Microsoft on Tuesday as part of its monthly security patch release cycle warned of a flaw in the WordPerfect 5.x Converter that it supplies as part of Office 2000, Office XP, Office 2003 and recent editions of its Works Suite.

The WordPerfect converter flaw, which Microsoft rates "important," could allow an attacker to gain full control over a victim's PC, Microsoft said. A software patch is available for the vulnerable products to fix the problem.

More information on the JPEG flaw is available at:
http://www.microsoft.com/technet/security/bulletin/ms04-028.mspx

More information on the WordPerfect converter issues is at:
http://www.microsoft.com/technet/security/bulletin/ms04-027.mspx

From Computerworld Australia



Previous
Next
Victor JVC Everio Tiny Digital Camcorder        All News        Asustek to launch half-height Combo drives
DivXNetworks partners with Plextor     General Computing News      2004 E-CrimeWatch Survey Summary Findings

Source Link Get RSS feed Easy Print E-Mail this Message

Related News
China Probes Microsoft Over Web Browser And Media Player
FCC Filing Hints At a Microsoft Rival To Chromecast
Microsoft to Announce Windows 9 on September Event: report
Samsung, Microsoft Want To End Android Patent Dispute Soon
Sony, Huawei, Microsoft To Announce New Smartphones at 2014 IFA
Microsoft Releases 19-euro Music Phone
Microsoft Sues Samsung Over Royalty Payments
Microsoft Releases New Limited Edition Wireless Mobile Mouse 3500 With Master Chief from Halo
Microsoft Details Windows Phone 8.1 Update, Brings Cortana To New Markets
Microsoft Releases The Sharks Cove, A Raspberry Pi Alternative
China Starts Anti-monopoly Investigation On Microsoft
Microsoft's Profit Hurt By Nokia Acquisition, Plans Unified OS

Most Popular News
 
Home | News | All News | Reviews | Articles | Guides | Download | Expert Area | Forum | Site Info
Site best viewed at 1024x768+ - CDRINFO.COM 1998-2014 - All rights reserved -
Privacy policy - Contact Us .