Slashdot Mirror
Flaw in Microsoft JPEG Parsing
KDan writes "As reported by numerous sources, a new vulnerability has been disclosed (and patched) by Microsoft. This one concerns the parsing of JPEGs in XP Microsoft applications. A buffer overflow can be used to execute arbitrary code. So all those times you told your parents/friends that looking at images was safe - well, not anymore."
...you obviously never saw goatse...
Give me a job. Please?
Are not affected, unless they have Office installed.
because any lawyer that has a chance of winning already works for microsoft
and i was always telling everyone from the start, download your porn in png format.
Marge, get me your address book, 4 beers, and my conversation hat.
I've been telling people for years "no, you can't get a virus from things like a JPEG picture. You're fine."
Now this. Considering how many bugs are reported in all version of MS software, it is entirely possible that there are PERSONAL bugs. "This one is for Charles. Let's fuck with him."
Sigh...
-Charles
Learning HOW to think is more important than learning WHAT to think.
The parent post has been flagged for violation of the "Anti Buzzword Use Act". Specific violation: use of the phrase "attack vector". Sanction: exile from use of any computer, writing utensil or paint brush for 10 years.
They should forget about Internet Explorer and try thier hand on a different line of sofware...
The problem with socialism is that they always run out of other people's money. - Margaret Thatcher
Don't worry folks you can still get your pr0n with out getting a social dease...
www.asciipr0n.com
Who said looking at Pr0n was safe?
pfft...maybe now they'll fully support AOL's .art files. Serves them right.
*ducks*
If you think
The parent post has been flagged for violation of the "Anti Buzzword Use Act". Specific violation: use of the phrase "attack vector".
You're right, I should have said "Airpwn could leverage the synergies of this vulnerability and streamline the deployment...with or without interactive buy-in by stakeholders"
Seriously, if you're going to be cute about buzzwords, at least wait until someone uses a real buzzword..."attack vector" is a real term and hasn't reached convergence in the buzzword mindshare yet.
You don't allocate a buffer of fixed length unless you're lazy. You find out how long the input is, allocate a buffer big enough to fit then move the input to the buffer. When you're done you deallocate the buffer. Simple, safe and easy. I guess Micro$oft coders never learned how to practice safe hex.
Good, inexpensive web hosting
Microsoft made it possible.
When you assumed you couldn't get attacked by loading a web page?
Microsoft made it possible, too.
When you sweared you couldn't get infected just by receiving e-mail?
Microsoft made it possible, again.
And now, by the very same people who gave you all that...
The JPEG parser vulnerability!!!
God, this company has really brought innovation to the industry!
I Told You So.
BTW if you see this leave me a post, I haven't heard from you in 12 years and I don't know where you are.
Ohh man I hope the first virus/worm/trojan based on this has is named after an STD.
I was surfing porn and got herpies.
That would be soooo funny.
Paying taxes to buy civilization is like paying a hooker to buy love.
Is there anykind of a browser plug-in I could use to deciper steganographically enhanced JPEG images that might just come over plain old unsuspicious unencrypted http?
GIFs were evil, PNG support lacked transparency, now JPEGs can cause buffer overflows - I'd say that IE has an image problem... Excuse me while I just run away now.
"Provided by the management for your protection."
So the next Anna Kournikova virus will actually be a picture of Anna Kournikova
On Microsoft products, porn screws YOU!
"No program is perfect,"
They said with a shrug.
"The client is happy!
What's one little bug?"
But he was determined.
The others went home.
He dug out the flowchart,
Deserted, alone.
Night passed into morning.
The room was cluttered
With memory dumps, microfiche...
"I'm close!" he muttered.
Chain smoking, cold coffee,
Logic, deduction...
"I've got it!" he cried.
"Just change one instruction!"
Then change two. Then three.
As year followed year,
Strangers would comment,
"Is that guy still here?"
He died at the console
Of hunger and thirst.
Next day he was buried
Face down, nine edge first.
His wife, through her tears,
Accepted his fate,
Saying, "He's not really gone -
He's just working late."
He doesn't want to know. He's looking for a Todd Walters.
:-)
Nice try for a troll, but you might want to spell your own name correctly next time....
Does this also affect JPEG attachments in Outlook?
Lets see....
Ok, check your email now.
Beauty is in the eye of the beerholder.
This happens to you when you don't pay the appropriate licensing fees!
LRC, the best-read libertarian site on the web
Performance rating - ms windows Listen to music insecure + Look at pictures insecure + Read a document insecure = Keep windows on insecure If there is no use of windows anymore then, Remedy is: No windows - only doors and walls please. Close windows.
Watch out for next week's critical flaw in MS Hello World.
Next vulnerable file format is ASCII text file
see: http://newegg.com/
Average laymen program transputers?
I'm just a Java programmer, but --- well, reading an "image" is just piping an input stream into a decoder object that would return a graphic object.
Nowhere in this process could I imagine anything that would necessitate executing any data that might be an instruction.
Read byte x, that is the red value for a specific pixel.. (I understand Jpeg is more complicated than this).. How could that "x" be a "format c:" DOS command?
-*-
hitting bottom never felt so good
On a completely and totally unrelated topic, does anybody know where I can buy lots of banner ad space in bulk?