Re: Alert: Microsoft Security Bulletin MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987)

From: Louis Solomon [SteelBytes] (louis_at_STEELBYTES.COM)
Date: 09/15/04

  • Next message: Joe Conner: "SUS broken upon installing KB867460 (.NET Framework 1.1 SP1)"
    Date:         Wed, 15 Sep 2004 11:21:36 +1000
    To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM
    
    

    > And also please make a new redist of gdiplus.dll available for download
    > (presumably through the platformsdk section of msdn.microsoft.com) ASAP

    ok, so that is now available via the MS04-028 bulletin ... it just wasn't
    there when I started looking (just MS's custom 404)

    but I still believe in the read of my rant :-)

    Louis Solomon
    www.steelbytes.com

    -----
    NTBugtraq Editor's Note:

    Want to reply to the person who sent this message? This list is configured such that just hitting reply is going to result in the message coming to the list, not to the individual who sent the message. This was done to help reduce the number of Out of Office messages posters received. So if you want to send a reply just to the poster, you'll have to copy their email address out of the message and place it in your TO: field.
    -----


  • Next message: Joe Conner: "SUS broken upon installing KB867460 (.NET Framework 1.1 SP1)"

    Relevant Pages

    • Re: Microsoft Security Bulletin Release for February 2, 2004
      ... Internet Explorer 6 Service Pack 1: Download the update. ... | Would it not be better if the MS Bulletin listed the OS's that is effects? ... |> authoritative in all matters concerning Microsoft Security Bulletins! ...
      (microsoft.public.security)
    • Re: KB922760-second offer to download
      ... Best bet to determine why it's being reoffered is to go over the file list on the MS Sec Bulletin MS06-067 page, ... You can compare the file list with the installation log ... ... Looked in Add/Remove, there was KB922760, along with the other criticals I installed on 15Nov from their respective download sites, one at a time, off-line, AV etc all turned off/disabled - no problems experienced. ... I can uninstall from Add/Remove - no warnings re an uninstall effecting other updates. ...
      (microsoft.public.windowsupdate)
    • Ms03-043 Security Patch
      ... Subject: Possibly damaging bulletin ... was claimed to be a Microsoft Security Bulletin MS03-043. ... I just downloaded this patch from. ... is trying to get me to download a potentially damaging file. ...
      (microsoft.public.windowsxp.security_admin)
    • Stuff about links and more links
      ... main XP SP2 home page. ... most email software is just too stupid to understand ... completed download, most seemed to have no problems. ... Russ - NTBugtraq Editor ...
      (NT-Bugtraq)
    • Re: Microsoft Security Bulletin MS02-069
      ... That article leads you to the article for the bulletin. ... has to be downloaded from Windows Update Catalog. ... > and could not find the patch for that bulletin Q810030. ... > but it really seems like there is no way to download NT patches that are ...
      (microsoft.public.security)