And an advisory from Symatec.com
here which is also where i got the above.
Microsoft GDI+ Library JPEG Segment Length Integer Underflow Vulnerability
Risk
High
Date Discovered
09-14-2004
Description
Microsoft (Graphics Device Interface) GDI+ JPEG handler is reported prone to an integer underflow vulnerability when handling JPEG format images. This issue presents itself due to a lack of sufficient sanity checks performed on certain JPEG data before this data employed as a bounds value for a memory copy operation.
A specially crafted JPEG image may trigger this vulnerability and result in the execution of arbitrary attacker-supplied code. Code execution would occur in the context of the user who is running the vulnerable software.
**Update: This issue is similar in nature to BID 1503, discovered by Solar Designer.
Symantec AntiVirus Products
A heuristic detection has been released to detect possible exploits of this vulnerability. Symantec Antivirus products will detect files which contain code to exploit this vulnerability as Bloodhound.Exploit.13.
Symantec ManHunt 3.0
As of September 25, 2004, users of Symantec Manhunt 3.0 can update to Security Update 28 to detect attempts to exploit this vulnerability. Click here for more information.
Symantec Network Security 7100
As of September 25, 2004, users of Symantec Network Security 7100 can update to Security Update 2 to detect attempts to exploit this vulnerability. Click here for more information. This update is available via LiveUpdate.
Platforms Affected
Microsoft Excel 2002 SP3
Microsoft Excel 2003
Microsoft FrontPage 2002 SP3
Microsoft FrontPage 2003
Microsoft InfoPath 2003
Microsoft MSN Messenger Service 9.0
Microsoft OneNote 2003
Microsoft Outlook 2002 SP3
Microsoft Outlook 2003
Microsoft PowerPoint 2002 SP3
Microsoft PowerPoint 2003
Microsoft Publisher 2002 SP3
Microsoft Publisher 2003
Microsoft Visual Basic .NET Standard 2002
Microsoft Visual Basic .NET Standard 2003
Microsoft Visual C# .NET Standard 2002
Microsoft Visual C# .NET Standard 2003
Microsoft Visual C++ .NET Standard 2002
Microsoft Visual C++ .NET Standard 2003
Microsoft Visual J# .NET Standard 2003
Microsoft Word 2002 SP3
Microsoft Word 2003
Components Affected
Avaya DefinityOne Media Servers
Avaya IP600 Media Servers
Avaya S3400 Modular Messaging
Avaya S8100 Media Servers
Microsoft .NET Framework 1.0 SP2
Microsoft .NET Framework 1.1
Microsoft .NET Framework SDK 1.0 SP2
Microsoft .NET Framework SDK 1.0 SP1
Microsoft .NET Framework SDK 1.0
Microsoft Digital Image Pro 7.0
Microsoft Digital Image Pro 9.0
Microsoft Digital Image Suite 9.0
Microsoft Greetings 2002
Microsoft Internet Explorer 6.0 SP1
Microsoft Office 2003
Microsoft Office XP SP3
Microsoft Picture It! 7.0
Microsoft Picture It! 9.0
Microsoft Picture It! 2002
Microsoft Picture It! Library
Microsoft Platform SDK Redistributable: GDI+
Microsoft Producer for Microsoft Office PowerPoint
Microsoft Project 2002 SP1
Microsoft Project 2002
Microsoft Project 2003
Microsoft Visio 2002 Professional SP2
Microsoft Visio 2002 Standard SP2
Microsoft Visio 2003 Professional
Microsoft Visio 2003 Standard
Microsoft Visual Studio .NET 2002
Microsoft Visual Studio .NET 2003
Microsoft Windows Server 2003 Datacenter Edition
Microsoft Windows Server 2003 Datacenter Edition 64-bit
Microsoft Windows Server 2003 Enterprise Edition
Microsoft Windows Server 2003 Enterprise Edition 64-bit
Microsoft Windows Server 2003 Standard Edition
Microsoft Windows Server 2003 Web Edition
Microsoft Windows XP 64-bit Edition SP1
Microsoft Windows XP 64-bit Edition
Microsoft Windows XP 64-bit Edition Version 2003
Microsoft Windows XP Home SP1
Microsoft Windows XP Home
Microsoft Windows XP Professional SP1
Microsoft Windows XP Professional
Recommendations
Do not accept or execute files from untrusted or unknown sources.
A remote attacker will need to present a JPEG file to a victim user in order to exploit this vulnerability. Avoid accepting or opening files that originate from a user of questionable integrity.
Do not follow links provided by unknown or untrusted sources.
A remote attacker may exploit this vulnerability through a remote Web site. Avoid following links that originate from a user of questionable integrity.
Run all software as a non-privileged user with minimal access rights.
Run all applications with the minimum amount of privileges required to function adequately. This action can limit the impact of a successful attack.
Do not open email messages from unknown or untrusted individuals.
A remote attacker may exploit this vulnerability through email. Avoid accepting or opening unsolicited emails that originate from a user of questionable integrity.
Microsoft has released a security bulletin MS04-028 and fixes to address this issue in affected products. Additionally, the vendor reports that this issue is addressed in Microsoft Office 2003 Service Pack 1 for Office 2003, Microsoft Visio 2003 Service Pack 1 for Visio 2003 and Microsoft Project 2003 Service Pack 1 for Project 2003.
The vendor also reports that customers that have installed MSN 9, and have chosen to install Picture It! Express version 9 and Picture It! Library, should install the Picture It! version 9 update.
Customers are advised to access the referenced advisory for further information pertaining to obtaining and applying appropriate updates.
It should be noted that not all of the fixes to address this vulnerability are available at the time of writing. These fixes will be added later once they are available.
Join CF
You are here: 
