News - Virus writers focus on image bug

[manmal]

News on page http://news.bbc.co.uk/1/hi/technology/3684552.stm
This will be interesting I think you should tell surffers to apply patches before a virus is written .

Thank you |roses|

[BigJohn]

Well, looks like I'd better get off my lazy butt and start patching before disaster hits |blinky|

[urb]

Ran the update and it seems to be checking over for MS Office stuff that uses jpegs and gifs, which I assume is most of their software...

All clean here.

[Bill]

I was wondering wether this new jpeg based exploit would be a hassle for the porn biz.

I haven't heard of an active bug yet, just proof of concept exploits passed around in the very top levels of the security/virus writers cabals.

[megatgpdotnet]

Ahahaahaaa.... that says a lot about M$.....

Its not JPEG exploit its M$ image handling exploit.

:) Luckily I use Linux ;)










http://www.greenguysboard.com/board/showthread.php?s=&threadid=11478

[Opti]

Originally posted by manmal
News on page http://news.bbc.co.uk/1/hi/technology/3684552.stm
This will be interesting I think you should tell surffers to apply patches before a virus is written .

Thank you |roses|


for anyone wanting to check or patch their system, instructions are here:

http://www.microsoft.com/security/bulletins/200409_jpeg.mspx

[Certifiedbitch]

thanks for the info eveyone. now i need to do the same...start running the update etc.

[Bill]

Okay, a fairly mild trojan based on this has been released in the wild now.

Cnet called it "JPEG virus"

Eweek called it "JPEG exploit"

PCweek called it "JPEG hole".

Surfers are going to think of it as the JPEG bug, despite the fact that it's actually an image handling exploit.

[Bill]

Here's a revealing headline:

Corrupted porn pics expose Microsoft hole

Techworld.com (subscription), United Kingdom - 5 hours ago
By Paul Roberts, IDG News Service.

Hackers are targeting porn news groups with jpeg images that exploit the recently discovered hole in Microsoft software. ...

[urb]

Here's some recent news about the bug...
http://news.bbc.co.uk/1/hi/technology/3701640.stm

Vulnerable programs are:-

Windows XP
Windows XP Service Pack 1
Windows Server 2003
Internet Explorer 6 SP1
Office XP SP3
Office 2003
Digital Image Pro 7.0
Digital Image Pro 9
Digital Image Suite 9
Greetings 2002
Picture It! 2002
Picture It! 7.0
Picture It! 9
Producer for PowerPoint
Project 2002 SP1
Project 2003
Visio 2002 SP2
Visio 2003
Visual Studio .NET 2002
Visual Studio .NET 2003