New Jpeg virus

[MegaTrixel]

Looks like the virus hacks are exploiting a weakness Microsoft has with jpegs. This problem can occur when using Microsoft products to view jpegs (i.e. Internet Explorer).

Microsoft is offering a patch. Also, I think virus control companies are updating their signature files to detect an infected jpeg.

Read about it here:
http://story.news.yahoo.com/news?tmpl=story&cid=1093&e=1&u=/pcworld/20040923/tc_pcworld/117902

[s00pcan]

Internet explorer has a huge new security flaw? I'm not surprized.

[tommykjensen]

Have a look here too:

http://photography-on-the.net/forum/showthread.php?t=42731&highlight=

[MegaTrixel]

Oops. Didn't see this already as a forum topic or I wouldn't have posted this one.

Oh well... hope everyone downloads the patch.

[pradeep1]

You need to patch both Windows and Office.

Go Here:

http://www.microsoft.com/security/bulletins/200409_jpeg.mspx

Also consider using Mozilla's Firefox browser, which is not susceptible to the GDI exploit.

http://www.mozilla.org/

[dbump]

Also consider using Mozilla's Firefox browser, which is not susceptible to the GDI exploit.

Firefox is great--higly recommended. Tabbed browsing and mouse gestures have spoiled me. Going back to IE now is like moving from a wheel mouse back to an original mouse.

Btw, a proof-of-concept exploit for the "JPEG of Death" vulnerability has been published. If history is any guide, we should see a major outbreak of this exploit in less than a week.
http://isc.sans.org/diary.php?date=2004-09-17

[Ballen Photo]

[quote="pradeep1"]You need to patch both Windows and Office.

Go Here:

http://www.microsoft.com/security/bulletins/200409_jpeg.mspx


Thanks Pradeep, I followed your link and updated yesterday. :D
-Bruce