Home World Forum
Stars! AutoHost web forums

Jump to Stars! AutoHost


 
 
Home » General Chat » Circular File » Regarding a new CERT advisory
Regarding a new CERT advisory Fri, 17 September 2004 09:58 Go to next message
Crusader is currently offline Crusader

 
Officer Cadet 2nd Year

Messages: 233
Registered: January 2003
Location: Dixie Land
Quote:

From the latest CERT advisory:

Microsoft's Graphic Device Interface Plus (GDI+) contains a vulnerability in the processing of JPEG images. This vulnerability may allow attackers to remotely execute arbitrary code on the affected system. Exploitation may occur as the result of viewing a malicious web site, reading an HTML-rendered email message, or opening a crafted JPEG image in any vulnerable application. The privileges gained by a remote attacker depend on the software component being attacked.


I don't usually get off track from Stars! this way, nor do I try to be an alarmist, however, I know that I like to transfer information regarding ship/starbase configurations, etc. using JPEG files when playing, and some of you others do also.

This is to warn all of you that I will not be so happy about receiving JPEG files as I used to be, and until I have an opportunity to check my system out for being vulnerable I will most likely ignore any email containing JPEG's.

If it were not for work, I would be off of Micro$oft and on Linux and Open Office exclusively. Thumbsup 2

It's not that Linux and Open Office are totally immune to security issues, but if I'm going to have to fight them, I would rather be fighting them with a product that doesn't cost me an arm and a leg to implement and support. Mad

Your friendly neighborhood Crusader
Angel



Nothing for now.

Report message to a moderator

Re: Regarding a new CERT advisory Fri, 17 September 2004 10:14 Go to previous message
Orca

 
Chief Warrant Officer 1

Messages: 148
Registered: June 2003
Location: Orbiting tower at the L5 ...
Windows XP SP 2 isn't vulnerable to this attack, nor is Windows 2000. However, the more recent Office products are vulnerable...

Details of the exploit, affected software, and updates to patch it here: http://www.microsoft.com/technet/security/bulletin/MS04-028. mspx



Jesus saves.
Allah forgives.
Cthulhu thinks you'd make a nice sandwich.

Report message to a moderator

Previous Topic: Hurricane Frances
Next Topic: New Smiley?
Goto Forum:
  


Current Time: Sun May 05 17:50:36 EDT 2024