JPEG vulnerability

FUI:
http://www.microsoft.com/technet/sec.../MS04-028.mspx

Microsoft Security Bulletin MS04-028
Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987)

Issued: September 14, 2004
Version: 1.0

Summary
Who should read this document: Customers who use any of the affected
operating systems, affected software programs, or affected components.

Impact of Vulnerability: Remote Code Execution

Maximum Severity Rating: Critical

Recommendation: Customers should apply the update immediately.

Security Update Replacement: None

Caveats: If you have installed any of the affected programs or affected
components listed in this bulletin, you should install the required security
update for each of the affected programs or affected components. This may
require the installation of multiple security updates. See the FAQ section
of this bulletin for more information.

CZ wrote:

Microsoft Security Bulletin MS04-028
Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987)

Issued: September 14, 2004
Version: 1.0

Summary
Who should read this document: Customers who use any of the affected
operating systems, affected software programs, or affected components.

Note that it does not apply if you have Windows XP with SP2. But it may
apply to Office installed on that - for which there are SP installations
for Office


--
Alex Nichol MS MVP (Windows Technologies)
Bournemouth, U.K. (remove the D8 bit)

Note that it does not apply if you have Windows XP with SP2. But it may
apply to Office installed on that - for which there are SP installations for
Office

Alex:

More detail on applicability per MS:

Non-Affected [MS] Software
. Microsoft Windows NT Server 4.0 Service Pack 6a
. Microsoft Windows NT Server 4.0 Terminal Server Edition Service Pack 6
. Microsoft Windows 2000 Service Pack 3, Microsoft Windows 2000 Service
Pack 4
. Microsoft Windows XP Service Pack 2
. Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and
Microsoft Windows Millennium Edition (Me)
. Microsoft Office 2003 Service Pack 1
. Microsoft Office 2000
. Microsoft Visio 2003 Service Pack 1
. Microsoft Visio 2000
. Microsoft Project 2003 Service Pack 1
. Microsoft Project 2000
. Microsoft Digital Image Suite 10, Microsoft Digital Image Pro 10, Picture
It! Premium 10


Affected [MS] Softwa
.. Microsoft Windows XP and Microsoft Windows XP Service Pack 1 - Download
the update
. Microsoft Windows XP 64-Bit Edition Service Pack 1 - Download the update
. Microsoft Windows XP 64-Bit Edition Version 2003 - Download the update
. Microsoft Windows ServerT 2003 - Download the update
. Microsoft Windows Server 2003 64-Bit Edition - Download the update

.. Microsoft Office XP Service Pack 3 - Download the update
Microsoft Office XP Service Pack 3 Softwa
.. Outlook® 2002
.. Word 2002
.. Excel 2002
.. PowerPoint® 2002
.. FrontPage® 2002
.. Publisher 2002

.. Microsoft Office 2003 - Download the update
Microsoft Office 2003 Softwa
.. Outlook® 2003
.. Word 2003
.. Excel 2003
.. PowerPoint® 2003
.. FrontPage® 2003
.. Publisher 2003
.. InfoPathT 2003
.. OneNoteT 2003

.. Microsoft Project 2002 Service Pack 1 (all versions) - Download the update
. Microsoft Project 2003 (all versions) - Download the update

. Microsoft Visio 2002 Service Pack 2 (all versions) - Download the update
. Microsoft Visio 2003 (all versions) - Download the update
. Microsoft Visual Studio .NET 2002 - Download the update

Microsoft Visual Studio .NET 2002 Softwa
.. Visual Basic .NET Standard 2002
.. Visual C# .NET Standard 2002
. Visual C++ .NET Standard 2002


.. Microsoft Visual Studio .NET 2003 - Download the update
Microsoft Visual Studio .NET 2003 Softwa
.. Visual Basic .NET Standard 2003
.. Visual C# .NET Standard 2003
.. Visual C++ .NET Standard 2003
.. Visual J# .NET Standard 2003

.. The Microsoft .NET Framework version 1.0 SDK Service Pack 2 - Download the
update
. Microsoft Picture It!® 2002 (all versions) - Download the update
. Microsoft Greetings 2002 - Download the update
. Microsoft Picture It! version 7.0 (all versions) - Download the update
. Microsoft Digital Image Pro version 7.0 - Download the update
. Microsoft Picture It! version 9 (all versions, including Picture It!
Library) - Download the update
. Microsoft Digital Image Pro version 9 - Download the update
. Microsoft Digital Image Suite version 9 - Download the update
. Microsoft Producer for Microsoft Office PowerPoint (all versions) -
Download the update
. Microsoft Platform SDK Redistributable: GDI+ - Download the update