Code to exploit Windows graphics flaw now public
 

<img src="http://www.eqinterface.com/images/sections/virus.gif" align="right">I just wanted to give people a heads up that you should always continue to update windows. You'll want to head to the windows update center as soon as possible. The jpg file format is used on just about every webpage on the internet today.

Edit: If your have installed Service Pack 2 (SP2) you should already protected against this kind of attack.

Quote from cnet:
Security professionals expect the release of the program to herald a new round of attacks by viruses and Trojan horses incorporating the code to circumvent security on Windows computers that have not been updated. The flaw, in the way Microsoft's software processes JPEG graphics, could allow a program to take control of a victim's computer when the user opens a JPEG file.

Read more

Good crap. What lazy, pathetic excuse for a programmer let THAT happen?

Microsoft has released a tool to help check your machine and update your system if you need to.

You can find it here it includes a scanner and repair service.

/bow

Scary ... technically it isnt safe to surf the web anymore :eek:

Sp2
 

Only thing bad with SP2 is I've installed it on my systems and had to uninstall it becuase I could no longer print to my canon multipass printer or a big hassle with "internal" network connections. Has these issues been fixed anyone know?

yes just visit the windows update manager and look for the GDI security patch.

On a similar note, if you use firefox/thunderbird, you'll want to update the browser/email proggy.

They had a similar bug regarding png files.

Unfortunalty, it's unknown if netscape browsers has this same problem.

--Dar

Re: Code to exploit Windows graphics flaw now public
 

And here's advice to everyone, once you do finish updating to protect yourselves from this nasty little feature. Obviously, they had a couple of "funny" programmers in there...I've always said Microsoft had to be filled with whitecoats.

1) Download a program called Opera (latest version is found here)
2) Hover your cursor over the Internet Explorer icon.
3) Right-click it, select Delete, and confirm until it's gone.
4) Repeat this process on your Desktop, in your start menu, and wherever else needed until the only way you can manually load it is by digging deep into your Program Files or Windows folder.
5) Install Opera.
6) The first time you start it, a confirmation box will ask you if you'd like to set it as your default browser.
7) Click yes, and giggle manically (I *know* I did. Heh)
Haha, obviously, you don't have to do it...but for the majority, once you try out Opera as a browser, you'll never want to look at Internet Explorer ever, ever, EVER again. You know that feature IE just put in to block pop-up adds? Opera's had that for over three years. Oh, and Opera allows you to open seperate windows to browse more than one web page simultaneously (obviously) but the best part...they all remain *within* the Opera window itself, instead giving tabs for each individual page. I highly recommend it as a browser...I don't think many would be disappointed in trying it out. /nod

As such...please, if you haven't already, download Service Pack 2 or follow-up on Kudane's link for the GDI to check your system for the proper patching to prevent this little coding problem from having you tear your hair out.

Ameril Dan`nodel
Warder, 57th season
[ Lanys T`Vyl server ]

Bitch at Amiez!! -- in the words of Spleen.

Its never been safe to surf the web, its just more lately that people have started to realise that! And SP2 took out my network and decided it didnt like my aspi layer as well and SP2 thought it would be fun to do a raid on the rest of my system as well causing bad fraction with quite a few of my programs, I would recomend that you use a program like Norton Ghost to make an image of your system before installing SP2 guys,, forget about about using system restore thats only good for putting trojans back on you system that you thought you got rid of months ago lol, Wooopee good old microsoft gave me more interesting bugs to play with :nana:

I had the same experience that Aramil Dannodel went through, but with Mozilla's Firefox! :D

i have used Mozilla for 2 years now and swear by it. i never get any popups... ever. i am bummed that they had an issue with the png files, but thats 1 compared to the hundreds of security violations that MS builds into its programs.
on a side note, the mozilla on my Linux box gets popups a lot, weird...

XPservicepack2
 

Well,hehehehe beware the EVIL SP2 FOR XP,for some reason it seems most probable that it was what kept me from entering EQ Since Saturday morning .
Cannot say ALL will have this Problem ..but ONE (ME!) is enough ,so be careful.hehehehe I myself ,would rather have a virus,I have cleaned those out afore with less difficulty and annoyance than I have had with XP SP2 in the last 4 days .

i always install all of the MS security updates except the graphics driver (because it is not the one EQ uses.) Anyone know why they list the graphics driver as a security update, instead of say a driver update?