nForums.net -> JPEG buffer overrun

nForums.net

Arcade Help Search Members Calendar

Welcome Guest ( Log In | Register )

nForums.net » Information & Services » Public News

[ Outline ] · Standard · Linear+

JPEG buffer overrun, vulnerability

Track this topic | Email this topic | Print this topic

PimpScourge

Sep 15 2004, 09:28 PM

Post #1

Broken As Designed

Group: Admin
Posts: 529
Joined: 17-March 04
Member No.: 2

QUOTE

http://www.microsoft.com/technet/security/bulletin/MS04-028.mspx

This update resolves a newly-discovered, privately reported vulnerability. A buffer overrun vulnerability exists in the processing of JPEG image formats that could allow remote code execution on an affected system. The vulnerability is documented in this bulletin in its own section.

If a user is logged on with administrator privileges, an attacker who successfully exploited this vulnerability could take complete control of an affected system, including installing programs; viewing, changing, or deleting data; or creating new accounts with full privileges. Users whose accounts are configured to have fewer privileges on the system would be at less risk than users who operate with administrative privileges.

apply patch if needed. :S