DPChallenge: A Digital Photography Contest You are not logged in. (log in or register
 

DPChallenge Forums >> Administrator Announcements >> Microsoft Windows and IE JPEG Security Hole
Pages:  
Showing posts 1 - 25 of 30, (reverse)
AuthorThread
09/16/2004 11:37:45 PM · #1
Microsoft has announced a vulnerability in the software used by several of their progrems to display JPEG images. This is a buffer overrun vulnerability that could allow an attacker to take complete control of your system be enticing you to view a specially crafted JPEG file. According to Microsoft, the affected programs include, but are not limited to:

* Windows XP
* Windows XP Service Pack 1 (SP1)
* Windows Server 2003
* Internet Explorer 6 SP1
* (A full list of programs is available through the links below)

We strongly encourage all users of this site who run any Microsoft software to review the pages linked below and install any Microsoft-recommended patches as soon as possible. Depending on the software you have installed, you may need to install more than one patch.

The patches and a full list of affected programs is available from Microsoft at //www.microsoft.com/security/bulletins/200409_jpeg.mspx

A more technical description is available at: //www.microsoft.com/technet/security/bulletin/MS04-028.mspx

Thanks to Jelloeye for calling this issue to our attention.

Message edited by author 2004-09-16 23:39:04.
09/17/2004 12:07:23 AM · #2
Cool. Patch downloaded :)
09/17/2004 12:08:47 AM · #3
I don't use Internet Explorer, but so far I have refused to install SP2 on my Windows XP. Am I wrong?
09/17/2004 12:21:28 AM · #4
read the link where i list all the programs affected, its not just IE or XP.

YOu can install this update and NOT SP2. I just finished doing it, just dont select the Xp SP2 if you dont want that

James
09/17/2004 12:23:05 AM · #5
Ahhh, fudge, looks like I've gotta update the home 'pooters this weekend...
09/17/2004 12:23:16 AM · #6
Originally posted by StevePax:

I don't use Internet Explorer, but so far I have refused to install SP2 on my Windows XP. Am I wrong?


Yes, you are. The problem affects Windows XP and XP SP1.

-Terry
09/17/2004 09:28:01 AM · #7
Why wouldn't you want to install SP2 anyway? Just curious what reasons there would be for not doing it.
09/17/2004 09:38:01 AM · #8
Originally posted by tfaust:

Why wouldn't you want to install SP2 anyway? Just curious what reasons there would be for not doing it.

It's supposed to 'break' lots of 3rd party apps, like Photoshop, Tina..

We've been told not to install it in our office. Probably wouldn't stop me installing it at home though. :)
09/17/2004 09:47:55 AM · #9
Working within the field of IT and having looked into this SP2 and application issue. I've found that the issue is greatly overstated. There have been a few problems with some applications that do not use "stanard" methods of ODBC, (database access). But they are limited to a very small minority.

XP2 gives you extra security and easier control of that security.

It has a built in Firewall which is switched on by default and a few applications then find their once 'open' connection to the internet is blocked. Of course this can be corrected by the user of the computer, to allow that connection if its a valid connection. Once that is done the problem is solved.
09/17/2004 09:48:57 AM · #10
Sorry I meant to say SP2 not XP2.
09/17/2004 10:26:35 AM · #11
I'm using Windows 2000 Professional ... that didn't seem to be on the list. I don't think I use any of those other image editors either. I try to not use IE, but I do use AOL 9, which is a version of that (I also use Mozilla). Do I need to install any of these updates?
09/17/2004 10:29:29 AM · #12
Paul, the link above can run a program to detect GDI+ based apps on your system. If there are any, the patch would be worth installing.
09/17/2004 10:31:10 AM · #13
Originally posted by PaulMdx:

Paul, the link above can run a program to detect GDI+ based apps on your system. If there are any, the patch would be worth installing.

Thanks! I was hoping to avoid even installing that software detector : )
09/17/2004 10:35:19 AM · #14
Originally posted by GeneralE:

I'm using Windows 2000 Professional ... that didn't seem to be on the list. I don't think I use any of those other image editors either. I try to not use IE, but I do use AOL 9, which is a version of that (I also use Mozilla). Do I need to install any of these updates?


Paul, Windows 2000, Office 2000 is not affected by this and there is no patch for those.
09/17/2004 10:42:44 AM · #15
Originally posted by Blackdog:

Paul, Windows 2000, Office 2000 is not affected by this and there is no patch for those.

Thanks. That's what it seemed like -- that only the (W2000) Server version was affected by this.
09/17/2004 11:06:03 AM · #16
Originally posted by PaulMdx:

Originally posted by tfaust:

Why wouldn't you want to install SP2 anyway? Just curious what reasons there would be for not doing it.

It's supposed to 'break' lots of 3rd party apps, like Photoshop, Tina..

We've been told not to install it in our office. Probably wouldn't stop me installing it at home though. :)


No problems with Photoshop or any other previously installed apps or games or drivers here :)
09/17/2004 11:08:36 AM · #17
Originally posted by Blackdog:

Paul, Windows 2000, Office 2000 is not affected by this and there is no patch for those.

If you read the article certain apps can still cause the prob, notably those that use the GDI+ (IE. built using Visual Studio 2002 onwards.)
09/17/2004 12:35:08 PM · #18
Originally posted by Konador:

Originally posted by PaulMdx:

Originally posted by tfaust:

Why wouldn't you want to install SP2 anyway? Just curious what reasons there would be for not doing it.

It's supposed to 'break' lots of 3rd party apps, like Photoshop, Tina..

We've been told not to install it in our office. Probably wouldn't stop me installing it at home though. :)


No problems with Photoshop or any other previously installed apps or games or drivers here :)


None here either, though I only installed it about 2 days ago.

Thanks for the input Paul and Blackdog... :-)
09/17/2004 08:40:19 PM · #19
My computer is set up to automatically downloan all updates for windows xp - would these be part of that automatic download, or is this something I would need to click on the links and download myself? Thanks if anyone knows:)
09/17/2004 08:52:17 PM · #20
What SP2 "breaks" in Photoshop is the Help system. It makes security alerts pop up when you open or search Help. I haven't installed SP2 yet, but here's a link with more info: //www.adobe.com/support/techdocs/330621.html
09/17/2004 10:41:01 PM · #21
Originally posted by BJ:

My computer is set up to automatically downloan all updates for windows xp - would these be part of that automatic download, or is this something I would need to click on the links and download myself? Thanks if anyone knows:)


BJ, I too have set up my computer to download and install all updates as Windows makes them available. And I just installed the SP2 last weekend and have had no problem with Photoshop yet. Although, I have not used the Help menu. (I don't find that Help menu particularly useful in CS, so I just usually find a book)

I hope we're covered, but maybe someone will say if we are not.
09/19/2004 09:43:12 AM · #22
SP2 makes you even more vulnerable doesn't it?

//www.eweek.com/article2/0,1759,1640069,00.asp

Message edited by author 2004-09-19 09:43:33.
09/19/2004 10:01:45 AM · #23
Originally posted by BJ:

My computer is set up to automatically downloan all updates for windows xp - would these be part of that automatic download, or is this something I would need to click on the links and download myself? Thanks if anyone knows:)


It should download the patch for XP but not for any of the other applications listed. I recommend visiting the page and installing the recommended patches if you have any of the listed software.

-Terry
09/19/2004 10:39:08 AM · #24

jonpink - eWEEK Talkback contributors seem to have some definite opinions about Linux difficulties compared to Windows. Now, everyone hates Bill Gates because he is so rich but we NON-NERDS have got to live with our OS the best we can. At this time I really have no other choice for my IBM PC except Windows XP.

SP2 can cause some difficulties with Photoshop CS.
Uninstall and reinstall seems to clear them.
09/20/2004 12:18:38 PM · #25
I use firefox
Pages:  
Current Server Time: 03/28/2024 01:23:41 PM

Please log in or register to post to the forums.


Home - Challenges - Community - League - Photos - Cameras - Lenses - Learn - Prints! - Help - Terms of Use - Privacy - Top ^
DPChallenge, and website content and design, Copyright © 2001-2024 Challenging Technologies, LLC.
All digital photo copyrights belong to the photographers and may not be used without permission.
Current Server Time: 03/28/2024 01:23:41 PM EDT.