JPEG Vulnerability

Microsoft Security Bulletin

[msgraph]

Patch it up

[microsoft.com...]

Affects:

Windows XP

Windows XP Service Pack 1 (SP1)

Windows Server 2003

Internet Explorer 6 SP1

Office XP SP3

Note Office XP SP3 includes Word 2002, Excel 2002, Outlook 2002, PowerPoint 2002, FrontPage 2002, and Publisher 2002.
Office 2003

Note Office 2003 includes Word 2003, Excel 2003, Outlook 2003, PowerPoint 2003, FrontPage 2003, Publisher 2003, InfoPath 2003, and OneNote 2003.

Digital Image Pro 7.0

Digital Image Pro 9

Digital Image Suite 9

Greetings 2002

Picture It! 2002 (all versions)

Picture It! 7.0 (all versions)

Picture It! 9 (all versions, including Picture It! Library)

Producer for PowerPoint (all versions)

Project 2002 SP1 (all versions)

Project 2003 (all versions)

Visio 2002 SP2 (all versions)

Visio 2003 (all versions)

Visual Studio .NET 2002

Note Visual Studio .NET 2002 includes Visual Basic .NET Standard 2002, Visual C# .NET Standard 2002, and Visual C++ .NET Standard 2002.
Visual Studio .NET 2003

Note Visual Studio .NET 2003 includes Visual Basic .NET Standard 2003, Visual C# .NET Standard 2003, Visual C++ .NET Standard 2003, and Visual J# .NET Standard 2003.

.NET Framework 1.0 SP2

.NET Framework 1.0 SDK SP2

.NET Framework 1.1

Platform SDK Redistributable: GDI+

[news.bbc.co.uk...]

[john_k]

You can right click on a jpg picture, like set as background, where is the securit risk there.

If your browser is IE, or any browser that utilizes Windows native GDI functions to render the JPG, and you didn't have the patched GDI, then you have already lost. The act of the browser attempting to render the JPG will trigger the exploit code.

[zeus]

People with alot or some pictures in a database or on a website, should they start to save there pictures in another format.

I notisted also that I can not "set as background" (jpg) after uploadeing the XP update or is just my computer.