Computing Topics --> Security Topics --> All Security Topics Pages --> Newly Discovered Windows Vulnerability with JPEG Images -->

Newly Discovered Windows Vulnerability with JPEG Images

A number of Internet sources are reporting that trojan horse code has been detected this week in a variety of settings. These include images transmitted over the USEnet network news service, pornographic web sites, and via Instant Messenger. These images are exploiting a Windows vulnerability recently announced by Microsoft.

• http://www.microsoft.com/security/bulletins/200409_jpeg.mspx
• http://www.us-cert.gov/cas/techalerts/TA04-260A.html

A fix for Windows versions prior to Windows XP-SP2 has been distributed via Windows Update for the past few weeks. Those who automatically download update patches should have the patch by now.

In addition, computers with Microsoft Office (including Windows XP-SP2) must patch Office against this vulnerability by visiting http://office.microsoft.com/en-us/downloads/default.aspx

The McAfee DAT file released last week does appear to detect many of these trojans. In order to be effective, VirusScan must be confirmed to scan all files and have Heuristic scanning enabled. In the OIT VirusScan8 distribution, both of these features are enabled.

The OIT VirusScan8 distribution can be obtained by members of the University community at http://helpdesk.umd.edu/virus/