Microsoft’s monthly security update was highlighted this week by a JPEG-handling vulnerability that could allow pictures in the format to provide attackers access to targeted machines. Microsoft also announced an “important” code-execution vulnerability in a WordPerfect 5.x converter, but rated the JPEG weakness — a common buffer-overflow vulnerability — as “critical.” Microsoft is providing a patch for the latest security hole, which is likely to come under attack from computer worms or spyware and relies on the relatively trusted JPEG image format.
Loading ...
Microsoft Warns of JPEG Security Hole
Posted by: Jay Lyman September 15, 2004 10:50 AMMicrosoft’s monthly security update was highlighted this week by a JPEG-handling vulnerability that could allow pictures in the format to provide attackers access to targeted machines. Microsoft also announced an “important” code-execution vulnerability in a WordPerfect 5.x converter, but rated the JPEG weakness — a common buffer-overflow vulnerability — as “critical.” Microsoft is providing a patch for the latest security hole, which is likely to come under attack from computer worms or spyware and relies on the relatively trusted JPEG image format.