Tuesday, September 21, 2004

New Windows security hole: JPEG files

This is from the latest issue of the Internet Tourbus:

"Microsoft released a series of patches earlier this week that [hopefully] closes a rather nasty security hole in how Microsoft products process JPEG images. Over a dozen Microsoft products are affected, including:

- Windows XP and XP SP1 [but not SP2]

- Internet Explorer 6 SP1

- Microsoft Office XP [Outlook, Word, Excel, PowerPoint, FrontPage, and/or Publisher]

- Microsoft Office 2003 [Outlook, Word, Excel, PowerPoint, FrontPage, Publisher, InfoPath, and/or OneNote]

Long story short, if you have a new-ish computer running any of a host of Microsoft's newer software applications, your computer is probably vulnerable to attack through this JPEG processing vulnerability...even if you have a firewall and an up-to-date antivirus program."

No comments: