Critical JPEG Flaw Threatens MS Windows
Filed in: Microsoft, Security — September 16th, 2004
Microsoft published on Tuesday a patch for a major security flaw in its software’s handling of the JPEG graphics format and urged customers to use a new tool to locate the many applications that are vulnerable.
The critical flaw has to do with how Microsoft’s operating systems and other software process the widely used JPEG image format and could let attackers create an image file that would run a malicious program on a victim’s computer as soon as the file is viewed. Because the software giant’s Internet Explorer browser is vulnerable, Windows users could fall prey to an attack just by visiting a Web site that has affected images.
The severity of the flaw had some security experts worried that a virus that exploits the issue may be on the way.
[ Read more @ News.com ]
What software are infected?
Generally, MS Windows (Windows XP SP2 is not affectd), MS Office, Internet Explorer, Visual Studio .NET, .NET Framework, and MS graphic products. Microsoft Security Bulletin published a complete list of affected softwares.
How to patch?
Due to the wide affection of the flaw, you may need to run several updates depending on the softwares installed. Microsoft Security Bulletin listed 4 steps of updates.
Thought:
Besides updating your Windows and Microsoft softwares, remember to get a light, easy, secure, safe and free web browser. 
Comments Feed
TrackBack URL
