Critical Microsoft security issue!! Update available.

[Wildstyle]

"Microsoft published on Tuesday a patch for a major security flaw in its software's handling of the JPEG graphics format and urged customers to use a new tool to locate the many applications that are vulnerable.

The critical flaw has to do with how Microsoft's operating systems and other software process the widely used JPEG image format and could let attackers create an image file that would run a malicious program on a victim's computer as soon as the file is viewed. Because the software giant's Internet Explorer browser is vulnerable, Windows users could fall prey to an attack just by visiting a Web site that has affected images. " - ZDnetIndia

The GDI+ security update for September 2004 addresses newly discovered issues in JPEG processing technology. This issue affects software that supports this image format, including some versions of Microsoft Windows, Microsoft Office, and Microsoft developer tools. If you have any of the listed software installed on your computer, you should install the related update.

Depending on the software you are using, you may need to install multiple updates from multiple locations.

Windows XP Service Pack 2 (SP2) is not affected by this issue. Windows XP SP2 users only need to update Office (if installed).

Step 1 (For Users of Windows XP, Windows XP SP1, or Windows Server 2003): Update Windows

The Windows Update Web site provides updates for affected versions of Windows, the .NET Framework, and Internet Explorer, a component of Windows.

Read the full story at: http://www.microsoft.com/security/bu...0409_jpeg.mspx

More info on this

If U have Office 2003 SP1 then U don't need these, just download the updated Outlook 2003 junk mail filter, KB 870765 & U R good to go.

Best way is to use the Office Update website, just like Windows Update

[zenblue]

i have office xp sp3 and winxp sp2...i have updated both and updated office using office update website..my computer is now up to date...i have only Word, Excel and Powerpoint installed out of all the other options of officexp...but when i run GDI tool, it still says some softwares on my computer are venerable to this issue...i have photoshop 6 and irfanview too on my computer..is it bcoz of these 2 that im getting this message or GDI detection tool isnt detecting it correctly??...PLS suggest what can be the reason for the message im still getting when i use GDI detection tool even though i have updated office.

Don't worry it doesn't needs it, Windows XP SP2 + Office 2003 SP1, is not affacted