Re: Virus in Jpgs
From: Bigbruva (Richardh_at_dontusethis.ws)
Date: 01/28/05
- Next message: Knot Forutoknow: "MS AntiSpyware Popup Scrolls off screen too fast to read"
- Previous message: kurt wismer: "Re: Lexus Landcruiser 100s Are Vulnerable to CellPhone Viruses"
- In reply to: David H. Lipman: "Re: Virus in Jpgs"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 28 Jan 2005 07:27:55 -0800
David is correct that this is a low risk especially once you apply either
Windows XP SP2 update, or the MS04-028 update.
However, just for the record, there has been one reported case of a JPEG
that contained a Trojan which started up a command prompt and opened a port
on the system that viewed the file. This was done without converting the
file to an exe, it used a buffer overrun in the JPEG viewer
engine(GDIPlus.DLL).
If you are interested in the details check out the following Security
Bulletin http://www.microsoft.com/technet/security/bulletin/ms04-028.mspx
Once again this was NOT a virus (it did not self replicate, you had to
download the JPEG) and it was only a single case (in the wild) however it is
a genuine risk so you should make sure your IT Manager ensures your systems
are updated with the latest patches and your AV applications have the latest
signatures loaded.
Good Luck
BB
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:OpcPKmTBFHA.3592@TK2MSFTNGP09.phx.gbl...
> Tell him to load Anti Virus software and specifically scan for JPEG and
> JP? extensions.
>
> True JPEGS are in themselves not able to infect. They need a helper
> application. Anyone
> can name any file anything and a EXE file could be renamed as a JPEG.
>
> Put simply the are a very low risk.
>
> --
> Dave
>
>
>
>
> "Matthias Marx" <marx@matthiasmarx.com> wrote in message
> news:%233zDu3QBFHA.2640@TK2MSFTNGP14.phx.gbl...
> | Hello,
> |
> | in a Website there should be a mechanism, to upload jpgs. The IT
> Manager,
> | has the problem, that a user could load a jpg within a virus.
> | Is that posible, could a jpg have a virus?
> | If the jpg is rendered, is the virus still alive?
> |
> |
> |
> | Thank you?
> |
> | Matthias
> |
> |
> |
>
>
- Next message: Knot Forutoknow: "MS AntiSpyware Popup Scrolls off screen too fast to read"
- Previous message: kurt wismer: "Re: Lexus Landcruiser 100s Are Vulnerable to CellPhone Viruses"
- In reply to: David H. Lipman: "Re: Virus in Jpgs"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
