Home Forum Downloads My Favorites Register FAQ

Go Back   EQInterface Forums > Site news/help Forums > Eqinterface/Eqgui News
User Name
Password

Reply
 
Thread Tools Display Modes
Old 09-23-2004, 04:50 PM   #1
Dolby
Lord Dolby of Veeshan
 
Dolby's Avatar
 
Join Date: Jul 2002
Server: Veeshan
Posts: 2,397
Default Code to exploit Windows graphics flaw now public

<img src="http://www.eqinterface.com/images/sections/virus.gif" align="right">I just wanted to give people a heads up that you should always continue to update windows. You'll want to head to the windows update center as soon as possible. The jpg file format is used on just about every webpage on the internet today.

Edit: If your have installed Service Pack 2 (SP2) you should already protected against this kind of attack.

Quote from cnet:
Security professionals expect the release of the program to herald a new round of attacks by viruses and Trojan horses incorporating the code to circumvent security on Windows computers that have not been updated. The flaw, in the way Microsoft's software processes JPEG graphics, could allow a program to take control of a victim's computer when the user opens a JPEG file.

Read more

Last edited by Kudane : 09-24-2004 at 12:38 AM.
Dolby is offline   Reply With Quote
Old 09-23-2004, 05:59 PM   #2
Deathbane27
A Snow Griffin
 
Deathbane27's Avatar
 
Join Date: Aug 2002
Posts: 51
Interface Author - Click to view interfaces
Default

Good crap. What lazy, pathetic excuse for a programmer let THAT happen?
__________________
If it ain't broke, it needs more features!
Deathbane27 is offline   Reply With Quote
Old 09-24-2004, 12:22 AM   #3
Kudane
Co-Founder
 
Kudane's Avatar
 
Join Date: Jul 2002
Server: Xegony
Posts: 2,145
Interface Author - Click to view interfaces
Default

Microsoft has released a tool to help check your machine and update your system if you need to.

You can find it here it includes a scanner and repair service.

/bow
__________________


.: Have a question? Read this :.
[ F.A.Q ]
Kudane is offline   Reply With Quote
Old 09-24-2004, 01:05 AM   #4
Qinadwen
An Executioner
 
Qinadwen's Avatar
 
Join Date: Mar 2003
Server: Venril Sathir
Posts: 364
Interface Author - Click to view interfaces
Default

Scary ... technically it isnt safe to surf the web anymore
__________________
Regards


Baron Qinadwen Loreseeker, Koada'Dal Conjurer of the 56th plane.

Thomas Jefferson:
"Government big enough to supply everything you need is big enough to take everything you have ... The course of history shows that as a government grows, liberty decreases."
Qinadwen is offline   Reply With Quote
Old 09-24-2004, 11:46 AM   #5
highlanderhcs
A Hill Giant
 
Join Date: Sep 2002
Server: Veeshan
Posts: 32
Interface Author - Click to view interfaces
Default Sp2

Only thing bad with SP2 is I've installed it on my systems and had to uninstall it becuase I could no longer print to my canon multipass printer or a big hassle with "internal" network connections. Has these issues been fixed anyone know?
highlanderhcs is offline   Reply With Quote
Old 09-24-2004, 12:25 PM   #6
Dolby
Lord Dolby of Veeshan
 
Dolby's Avatar
 
Join Date: Jul 2002
Server: Veeshan
Posts: 2,397
Default

Quote:
Originally Posted by highlanderhcs
Only thing bad with SP2 is I've installed it on my systems and had to uninstall it becuase I could no longer print to my canon multipass printer or a big hassle with "internal" network connections. Has these issues been fixed anyone know?


yes just visit the windows update manager and look for the GDI security patch.
Dolby is offline   Reply With Quote
Old 09-24-2004, 11:37 PM   #7
veeshan_darroch
A Treant
 
Join Date: Aug 2003
Server: Veeshan
Posts: 24
Interface Author - Click to view interfaces
Default

On a similar note, if you use firefox/thunderbird, you'll want to update the browser/email proggy.

They had a similar bug regarding png files.

Unfortunalty, it's unknown if netscape browsers has this same problem.

--Dar
veeshan_darroch is offline   Reply With Quote
Old 09-25-2004, 12:44 AM   #8
Aramil Dannodel
A Shissar Disciple
 
Aramil Dannodel's Avatar
 
Join Date: Mar 2004
Server: Combine
Posts: 142
Interface Author - Click to view interfaces
Send a message via AIM to Aramil Dannodel Send a message via MSN to Aramil Dannodel
Post Re: Code to exploit Windows graphics flaw now public

And here's advice to everyone, once you do finish updating to protect yourselves from this nasty little feature. Obviously, they had a couple of "funny" programmers in there...I've always said Microsoft had to be filled with whitecoats.

1) Download a program called Opera (latest version is found here)
2) Hover your cursor over the Internet Explorer icon.
3) Right-click it, select Delete, and confirm until it's gone.
4) Repeat this process on your Desktop, in your start menu, and wherever else needed until the only way you can manually load it is by digging deep into your Program Files or Windows folder.
5) Install Opera.
6) The first time you start it, a confirmation box will ask you if you'd like to set it as your default browser.
7) Click yes, and giggle manically (I *know* I did. Heh)
Haha, obviously, you don't have to do it...but for the majority, once you try out Opera as a browser, you'll never want to look at Internet Explorer ever, ever, EVER again. You know that feature IE just put in to block pop-up adds? Opera's had that for over three years. Oh, and Opera allows you to open seperate windows to browse more than one web page simultaneously (obviously) but the best part...they all remain *within* the Opera window itself, instead giving tabs for each individual page. I highly recommend it as a browser...I don't think many would be disappointed in trying it out. /nod

As such...please, if you haven't already, download Service Pack 2 or follow-up on Kudane's link for the GDI to check your system for the proper patching to prevent this little coding problem from having you tear your hair out.

Ameril Dan`nodel
Warder, 57th season
[ Lanys T`Vyl server ]

Bitch at Amiez!! -- in the words of Spleen.
Aramil Dannodel is offline   Reply With Quote
Old 09-25-2004, 09:50 AM   #9
Laffs
A Treant
 
Join Date: Jul 2004
Posts: 25
Exclamation

Its never been safe to surf the web, its just more lately that people have started to realise that! And SP2 took out my network and decided it didnt like my aspi layer as well and SP2 thought it would be fun to do a raid on the rest of my system as well causing bad fraction with quite a few of my programs, I would recomend that you use a program like Norton Ghost to make an image of your system before installing SP2 guys,, forget about about using system restore thats only good for putting trojans back on you system that you thought you got rid of months ago lol, Wooopee good old microsoft gave me more interesting bugs to play with
Laffs is offline   Reply With Quote
Old 09-25-2004, 04:39 PM   #10
Zantaklawz
Manaetic Prototype IX
 
Zantaklawz's Avatar
 
Join Date: Aug 2002
Server: Bristlebane, The Nameless, Xegony, Veeshan, Firiona Vie, Vallon Zek, and Venril Sathir
Posts: 764
Send a message via AIM to Zantaklawz Send a message via Yahoo to Zantaklawz
Talking

I had the same experience that Aramil Dannodel went through, but with Mozilla's Firefox!
__________________
Zantaklawz

Proud to be an at EQ Roleplayers! Join us and spread the word!

Come and sit for a while and listen to the Tales of Zantaklawz! Tell one! Tell all!
Zantaklawz is offline   Reply With Quote
Old 09-26-2004, 11:16 AM   #11
random7
A Fire Beetle
 
Join Date: Feb 2004
Posts: 2
Default

i have used Mozilla for 2 years now and swear by it. i never get any popups... ever. i am bummed that they had an issue with the png files, but thats 1 compared to the hundreds of security violations that MS builds into its programs.
on a side note, the mozilla on my Linux box gets popups a lot, weird...
random7 is offline   Reply With Quote
Old 09-29-2004, 03:51 AM   #12
maasuskii
A Snow Cougar
 
Join Date: Sep 2003
Server: Firiona Vie(there are other servers????)
Posts: 38
Interface Author - Click to view interfaces
Thumbs down XPservicepack2

Well,hehehehe beware the EVIL SP2 FOR XP,for some reason it seems most probable that it was what kept me from entering EQ Since Saturday morning .
Cannot say ALL will have this Problem ..but ONE (ME!) is enough ,so be careful.hehehehe I myself ,would rather have a virus,I have cleaned those out afore with less difficulty and annoyance than I have had with XP SP2 in the last 4 days .
maasuskii is offline   Reply With Quote
Old 09-30-2004, 04:17 PM   #13
Svafnir
A Gray Wolf
 
Join Date: Jul 2004
Posts: 6
Default

i always install all of the MS security updates except the graphics driver (because it is not the one EQ uses.) Anyone know why they list the graphics driver as a security update, instead of say a driver update?
Svafnir is offline   Reply With Quote
Reply




Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off


All times are GMT -5. The time now is 05:48 AM.


vBulletin Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
© MMOUI