Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Microsoft has issued a new program to track a graphics flaw 2

Status
Not open for further replies.

2ffat

Programmer
Oct 23, 1998
4,811
US
See for more info.

James P. Cottingham
-----------------------------------------
To determine how long it will take to write and debug a program, take your best estimate, multiply that by two, add one, and convert to the next higher units.
 
EXCERPTS:

"The JPEG processing flaw enables a program hidden in an image file to execute on a victim's system."


"The software giant has a [highlight]full list of affected applications [/highlight]in the advisory on its Web site. [highlight]Windows XP Service Pack 2[/highlight], which is still being distributed to many customers' computers, [highlight]is not vulnerable to the flaw[/highlight]."


"Windows users could fall prey to an attack just by visiting a Web site that has affected images."



Vince
_____________________________________________________________
[*** If everyone is thinking alike, then somebody isn't thinking. ***]

 
Why? Because they can. Here is reality mirroring fiction. In the novel "Snow Crash", this is exactly the plot. A bitmap image (and jpg are bitmaps), when viewed, runs a viral type of program.

Strange indeed.

Gerry
 
Far be if from me of all people do defend the company's software engineering practices, but I don't think this is a Mi[¢]ro$oft "feature" gone awry. The article compares this problem to a buffer overflow problem found last month in the PNG libraries, so I assume we're seeing another buffer overflow flaw.


Want the best answers? Ask the best questions!

TANSTAAFL!!
 
VMyths.com has a good article making just that point at:

"The Crystal Wind is the storm, and the storm is data, and the data is life. You have been slaves, denied the storm, denied the freedom of your data. That is now ended; the whirlwind is upon you . . . . . . Whether you like it or not."

"Trent the Uncatchable" in The Long Run by Daniel Keys Moran
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top