MAJOR,MAJOR GDI+ BUFFER OVERFLOW IN WINDOWS

[mehownzu]

http://securityresponse.symantec.com/av ... 11173.html

Take this really, really seriously, because this is really, really big.

Symantec (and a few other sources) basically say that every single windows system that uses MSIE is vulnerable to this problem.

heres a writeup on what it does: http://www.easynews.com/virus.html

the image that displays (!) is basically a WHITE, BLANK IMAGE.
Therefore someone could place this on say google.com, or cnn.com, and mess EVERYONES days up.

The only workaround ive seen for this is to use an alternate browser. i know for a fact that netscape and mozilla arent affected, and opera doesnt seem affected.


edit: there are patches for all of the microsoft operating systems on the symantec write up page. click the link that corresponds to your OS and youll be patched

[Zeraphin]

Already patched. This is a bit old, as far as security alerts go. But unfortunately most people aren't as savvy as programmers like me are

Guys, if you use Windows, I strongly urge you to always do Windows Updates, at the very least once a month. Microsoft releases security updates every second Tuesday of the month. Some other random updates can be released at any time.

[mehownzu]

Already patched. This is a bit old, as far as security alerts go. But unfortunately most people aren't as savvy as programmers like me are

Guys, if you use Windows, I strongly urge you to always do Windows Updates, at the very least once a month. Microsoft releases security updates every second Tuesday of the month. Some other random updates can be released at any time.

me? we?

it actually took me until now to come across a writeup on it. im never on windows. and when i am i dont use msie. stuff like this rarely affects me at best even when i am on windows because of the packet shaping my network has (<3 m0n0wall)