.jpg file exploit?

[Vairkjosa]

Has anyone heard of a .jpg file exploit that would "steal" a persons site if executed from that site.:dunno:
I have just heard that this is something new.

[georgeek]

It is not new, the vulnerability which allowed code execution in Microsoft's GDI+ JPEG decoder was noticed and fixed in late 2004. Known as MS04-028 you can read about it here (http://www.microsoft.com/technet/security/bulletin/MS04-028.mspx) and there is no need to worry if your run IE with automatic updates because your code will have been patched.

- George

[kitchin]

Other software besides IE was affected also. I don't know if it ever led to problems in the real world.

[Vairkjosa]

Thanks georgeek! I have learned something new today.:yeah:
Very nice article, long, but very nice.