Cable Forum - [Merged] Microsoft Security Updates

Page 3 of 4

Show 100 post(s) from this thread on one page

Cable Forum (https://www.cableforum.uk/board/index.php)

- Security & Virus Discussion (https://www.cableforum.uk/board/forumdisplay.php?f=38)

- - [Merged] Microsoft Security Updates (https://www.cableforum.uk/board/showthread.php?t=14563)

Caspar

16-09-2004 11:54

Re: Microsoft Warns of Poisoned Picture Peril...

I suspect the virus JPEG would be porn related or some other high hitting context

Bifta

16-09-2004 11:55

Re: Now JPEGS can infect your Windoze PC

Quote:

Originally Posted by Chris T

BBC report here on the latest vulnerability in M$ products. Our corporate IT guys here are on the ball though, the patch ran as I logged in this morning,

http://news.bbc.co.uk/1/hi/technology/3661678.stm

I don't know what's funnier, that M$ has been caught out again, that the BBC used a photo of Avril Lavigne to illustrate the fact that JPEGS can put viruses on your PC or that the image alt caption for Avril was 'Pop singer' ... :rofl:

http://www.cableforum.co.uk/board/sh...ad.php?t=17521 not sure if it's the same.

Chris

16-09-2004 12:00

Re: Now JPEGS can infect your Windoze PC

Quote:

Originally Posted by Aragorn

Chris,

While commenting about vulnerable browsers, looking at your sig I hope you've taken notice of http://www.theregister.co.uk/2004/09...zilla_patches/ - a whole load of vulns in Firefox and mozilla :shocked: .
BTW, I'm not knocking Firefox - I use it myself for browsing anything outside the company firewall - safer and quicker than IE (sure I'll be flamed about that statement !)

Steve.

Now that would be off topic :nono: ;) :p:

Looking at that Reg article, there is clearly a radically different philosophy towards secutity and approach towards fixing bugs. In the longer term this is going to mean fewer problems with Mozilla-based software and more rapid fixes.

Chris

16-09-2004 12:01

Re: Now JPEGS can infect your Windoze PC

Quote:

Originally Posted by Bifta

http://www.cableforum.co.uk/board/sh...ad.php?t=17521 not sure if it's the same.

Wups you're right :dunce:

Merging...

Paul	16-09-2004 12:50

Re: Now JPEGS can infect your Windoze PC

Not sure why this is closed, a side effect of the merge I think. Re-opened. :D

Ramrod

16-09-2004 13:10

Re: Now JPEGS can infect your Windoze PC

Just patched both of our 'puters. If you have MS office you need to patch that as well........

Paul K

16-09-2004 13:48

Re: {merged] Microsoft Security Updates

Strange :erm: do I detect a seemless merge??? Apart from a post going missing :p:

Chris

16-09-2004 13:52

Re: {merged] Microsoft Security Updates

Quote:

Originally Posted by Paul

Strange :erm: do I detect a seemless merge??? Apart from a post going missing :p:

It might look that way to you, but from where I'm sitting there are bodies everywhere :p: :D

Maggy

16-09-2004 13:52

Re: {merged] Microsoft Security Updates

Funny it said I didn't need to patch M$ Office.Oh well. :shrug:

It did try very hard to persuade me to download SP2 though. :)

Ramrod

16-09-2004 15:00

Re: {merged] Microsoft Security Updates

Quote:

Originally Posted by Incognitas

Funny it said I didn't need to patch M$ Office.Oh well. :shrug:

Go to the office page and click on updates......see if it mentions the vulnerability, it did on my wifes laptop.

Paul K

16-09-2004 15:43

Re: {merged] Microsoft Security Updates

Quote:

Originally Posted by Incognitas

Funny it said I didn't need to patch M$ Office.Oh well. :shrug:

It did try very hard to persuade me to download SP2 though. :)

Windows Update will not tell you about Office updates, that's a different update engine alltogether :) Follow Ramrods instructions and you should be prompted for any updates you require.

homealone

16-09-2004 15:52

Re: {merged] Microsoft Security Updates

Quote:

Originally Posted by Paul

Windows Update will not tell you about Office updates, that's a different update engine alltogether :) Follow Ramrods instructions and you should be prompted for any updates you require.

its quite misleading - well for me, using Win98se, it was. Windows Update identified 2 'critical' updates available - one an IE6 patch & the other the patch for the jpg file vulnerability. During installation the jpg file thingy loads a new page which advises a 4 point check - one of which is a link to check if Office needs updating, I think that is what Incog meant. :)

MovedGoalPosts

24-09-2004 18:46

Re: [merged] Microsoft Security Updates

Just received an email from my antivirus provider Panda, that the virus writers out there now have a nice scripting kit ready to exploit the JPEG vulnerability mentioned earlier in this thread. Great now even innocent photos aren't safe. :mad:

No doubt someone will find a way to attach viruses to PDFs soon. :disturbd:

MetaWraith

24-09-2004 21:35

Re: [merged] Microsoft Security Updates

Nothing is safe as long as sloppy coding, no checking for buffer overruns etc is tolerated.

Infact in today's modern society it's even encouraged as part of the rush to get the product to market first,and spin off whole update industries.

Stuart

25-09-2004 12:19

Re: [merged] Microsoft Security Updates

The memory protections functions in Xp Service Pack 2 SHOULD reduce the effect of buffer overruns in the future, but, by default only protect the Operating System (and don't work fully unless you have hardware support ).

All times are GMT. The time now is 11:13.

Page 3 of 4

Show 100 post(s) from this thread on one page