[plug] Microsoft opens doorways for jpeg viruses

[Chris Caston]

On Fri, 2004-10-01 at 08:11, Marc Wiriadisastra wrote:
> Chris Caston wrote:
> > On Thu, 2004-09-30 at 20:59, Carl Gherardi wrote:
> > 
> >>On 30/09/2004, at 3:14 PM, Marc Wiriadisastra wrote:
> >>
> >>
> >>>Hey all,
> >>>
> >>>Just saw this article in news.com and it looks like you and I will  
> >>>have more work on our plate thanks to the people at redmond.
> >>>
> >>>
> >>>http://www.news.com.au/common/story_page/
> >>>0,4057,10916227%255E15306,00.html
> >>>
> >>
> >>In defense of Microsoft(eek!), Mozilla has had almost exactly the same  
> >>problem up until recently. The response from Microsoft was slower than  
> >>Mozilla but pretty quick for them.
> >>
> >>Carl
> >>
> > 
> > 
> > I haven't had any customers catch anything yet and most of the ones I
> > have tried the detection tool on weren't vulnerable at least in the OS.
> > If the attacker can convince the victim the open a file with a jpeg in
> > MS Office it may be a different story as Office updates are not
> > currently automatic.
> >  
> I think they were mainly targeting pornographic news groups since in my 
> opinion it would be easier to get people to look at images there.
> 

Of course most of my customers give me a blank stare when I mention
usenet. I will it will likely be an attractive target for ploy for dodgy
porn sites wishing to install dialers and the like.

> _______________________________________________
> PLUG discussion list: plug at plug.linux.org.au
> http://mail.plug.linux.org.au/cgi-bin/mailman/listinfo/plug
> Committee e-mail: committee at plug.linux.org.au
>