The W
Views: 97793608
Main | FAQ | Search: Y! / G | Color chart | Log in for more!
29.7.07 2010
The 7 - Internet & Computers - Microsoft released critical security patches this Tuesday
This thread has 1 referral leading to it
Register and log in to post!
(482 newer) Next thread | Previous thread
User
Post (7 total)
Guru Zim
SQL Dejection
Administrator
Level: 138

Posts: 2726/5994
EXP: 31525777
For next: 137283

Since: 9.12.01
From: Bay City, OR

Since last post: 3 days
Last activity: 20 hours
AIM:  
#1 Posted on 18.9.04 1829.05
Reposted on: 18.9.11 1829.29
If you are running a machine with IE on it, you are most likely affected. This is a buffer exploit on JPG pictures, so you could get hit just by visiting a website where a user could post a picture.

That could be any message board you visit.

If you haven't already patched, I recommend visiting Windows Update and Office Update today.
Promote this thread!
DJ FrostyFreeze
Knackwurst
Level: 108

Posts: 1669/3374
EXP: 13279707
For next: 240836

Since: 2.1.02
From: Hawthorne, CA

Since last post: 91 days
Last activity: 1 day
#2 Posted on 19.9.04 1628.07
Reposted on: 19.9.11 1629.01
I downloaded SP2 for XP last night, but I chickened out at the last second & I havent installed it yet. I've heard from some people that it's a good thing, but I've heard from other people that it is the root of all evil.

Anyone care to share their experiences, or maybe try to talk me into/out of installing it?
Roy.
Pepperoni
Level: 63

Posts: 381/1040
EXP: 2069386
For next: 27777

Since: 25.2.04
From: Keystone State

Since last post: 2272 days
Last activity: 741 days
#3 Posted on 19.9.04 1822.47
Reposted on: 19.9.11 1823.15
I didn't do much for my computer (I already have firewall program), but my naive side told me that I needed it for my computer. Of course, then IE stopped working for me on numerous websites. Maybe this patch will fix it? I'm convinced that there's a connection between SP2 and IE no longer working on my computer.
Guru Zim
SQL Dejection
Administrator
Level: 138

Posts: 2738/5994
EXP: 31525777
For next: 137283

Since: 9.12.01
From: Bay City, OR

Since last post: 3 days
Last activity: 20 hours
AIM:  
#4 Posted on 19.9.04 2005.17
Reposted on: 19.9.11 2006.46
Remember, SP2 is a different patch than the JPG patch. XP SP2 does not fix that vulnerability.
Merc
Potato korv
Level: 54

Posts: 225/680
EXP: 1201433
For next: 32444

Since: 3.1.02
From: Brisbane, Australia

Since last post: 1203 days
Last activity: 1181 days
#5 Posted on 20.9.04 0556.37
Reposted on: 20.9.11 0559.01
    Originally posted by DJ FrostyFreeze

    Anyone care to share their experiences, or maybe try to talk me into/out of installing it?


I installed SP2 a couple of weeks ago. The worst thing I can say about it so far is it bugs me to switch to Automatic Updates. It really seems to have had very little, if any, negative impact on my system. I browse mostly with Mozilla, but haven't had any IE worries.
Alessandro
Lap cheong
Level: 81

Posts: 676/1714
EXP: 4808293
For next: 184577

Since: 2.1.02
From: Worcester MA

Since last post: 46 days
Last activity: 24 days
#6 Posted on 20.9.04 0849.39
Reposted on: 20.9.11 0849.42
Buuuuut, this only affects people who use IE as their default browser ... right?

Guru Zim
SQL Dejection
Administrator
Level: 138

Posts: 2740/5994
EXP: 31525777
For next: 137283

Since: 9.12.01
From: Bay City, OR

Since last post: 3 days
Last activity: 20 hours
AIM:  
#7 Posted on 20.9.04 1457.05
Reposted on: 20.9.11 1457.05
    Originally posted by Alessandro
    Buuuuut, this only affects people who use IE as their default browser ... right?




Actually, no. There are a ton of affected apps.

Here's the notification from last week: (interestingly, it does not list XP SP2 as affected, yet I've read elsewhere that it was.)


Critical Security Bulletins
===========================

MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow
Code Execution (833987)

- Affected Software:

- Windows XP and Windows XP Service Pack 1
- Windows XP 64-Bit Edition Service Pack 1
- Windows XP 64-Bit Edition Version 2003
- Windows Server 2003
- Windows Server 2003 64-Bit Edition

- Office 2003
- Office XP Service Pack 3
- Visio 2003 (All versions)
- Visio 2002 Service Pack 2 (All versions)
- Project 2003 (All versions)
- Project 2002 Service Pack 1 (All versions)

- Review bulletin MS04-O28 for information about
these affected operating systems and applications:

- Windows NT Workstation 4.0 Service Pack 6a
- Windows NT Server 4.0 Service Pack 6a
- Windows NT Server 4.0 Terminal Server Edition
Service Pack 6
- Windows 2000 Service Pack 2
- Windows 2000 Service Pack 3
- Windows 2000 Service Pack 4

- The Microsoft .NET Framework, version 1.0
- The Microsoft .NET Framework, version 1.1
- Internet Explorer 6 Service Pack 1

- Picture It! 2002 (All versions)
- Greetings 2002
- Picture It! version 7.0 (All versions)
- Digital Image Pro version 7.0
- Picture It! version 9 (All versions)
Including Picture It! Library)
- Digital Image Pro version 9
- Digital Image Suite version 9
- Producer for Microsoft Office PowerPoint
(All versions)

- Visual Studio 2003 .NET
- Visual Basic .NET Standard 2003
- Visual C# .NET Standard 2003
- Visual C++ .NET Standard 2003
- Visual J# .NET Standard 2003
- Visual Studio 2002 .NET
- Visual Basic .NET Standard 2002
- Visual C# .NET Standard 2002
- Visual C++ .NET Standard 2002
- The Microsoft .NET Framework, version 1.0 SDK
- Platform SDK Redistributable: GDI+

- Review the FAQ section of bulletin MS04-O28 for
information about these operating systems:

- Microsoft Windows 98
- Microsoft Windows 98 Second Edition (SE)
- Microsoft Windows Millennium Edition (ME)

- Impact: Remote Code Execution
- Version Number: 1.0


(edited by Guru Zim on 20.9.04 1258)
ALL ORIGINAL POSTS IN THIS THREAD ARE NOW AVAILABLE
Thread ahead: Wireless problems and tech support
Next thread: JPEG exploit code released
Previous thread: Windows Code Name: Longhorn
(482 newer) Next thread | Previous thread
The 7 - Internet & Computers - Microsoft released critical security patches this TuesdayRegister and log in to post!

The W™ message board - 7 year recycle

ZimBoard
©2001-2014 Brothers Zim
This old hunk of junk rendered your page in 0.218 seconds.