Technology news and Jobs
Information Technology News
September Patch Tuesday: a critical day for media files at Microsoft
Information Technology News
September Patch Tuesday: a critical day for media files at Microsoft | September Patch Tuesday: a critical day for media files at Microsoft |
|
| by Stephen Withers | |
| Wednesday, 10 September 2008 | |
|
Page 1 of 3
Patch Tuesday has come around all too quickly, and Microsoft has released four critical updates. Once again, the handling of media files has proved fertile ground for vulnerability hunters.Featured Whitepaper
5 Best Practices for Smartphone Support
Since this includes Internet Explorer and Office, all an attacker would need to do is add the image to a web page (think of all the popular sites that display user-generated content) or insert it into a Word document that is then spammed out to potential victims. When the image is displayed, code within the exploit file would be executed with the same rights as the current user. The updates address several vulnerabilities in GDI+, and relate to Windows XP, Vista, Server 2003, Server 2008, Internet Explorer 6, and Windows 2000 with any of .NET Framework 1.0, 1.1 or 2.0. Also affected are Office XP, 2003 and 2007, plus Visio 2002, PowerPoint Viewer 2003, Works 8 and Digital Image Suite 2006. If that wasn't enough, there are additional patches for SQL Server 2000 and 2005; Visual Studio 2003, 2003, 2005 and 2008; Report Viewer 2005 and 2008; Visual FoxPro 8.0 and 9.0; the Microsoft Platform SDK Redistributable: GDI+; and Forefront Client Security 1.0. Windows Media Player is also at risk - please read on. |
| < Next story in category | Previous story in the category > |
|---|










