Security Threat Watch Update
Compliments of today's Security Threat Watch newsletter: There have been a number of interesting vulnerabilities this week. Microsoft released a patch for a vulnerability in JPEG graphic parsing in various GDI libraries. Part of the problem with this bug is...
September 20, 2004
![Network Computing logo Network Computing logo](https://eu-images.contentstack.com/v3/assets/bltde8121fc52c5c8f3/blt3f3d0318f746b1c2/65a530e4187606040a1d8b8c/placeholder.png?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
Compliments of today's Security Threat Watch newsletter:
There have been a number of interesting vulnerabilities this week.Microsoft released a patch for a vulnerability in JPEG graphic parsingin various GDI libraries. Part of the problem with this bug is thatvarious applications are supposed to ship their own versions of the GDIlibraries, which means you literally have to search your file system forvulnerable files to update. Then there is the issue of whether thethird-party application will even function correctly with the newer GDIlibrary.
Multiple vulnerabilities have been found in the Mozilla applicationsuite (Mozilla, Firefox and Thunderbird). Some of these bugs have beenreported before, but we thought we'd re-report the collected advisory.
Lastly, Corsaire released a large number of advisories relating to theimproper parsing of MIME documents by various products. The exact impactis product-specific, but improper MIME parsing can be exploited directly(buffer overflows, etc.) or indirectly (bypassing virus scanninggateways, creating malicious attachments, etc.). The slew of advisoriesare collected in this issue under a single entry with the title"Multiple vendors: various MIME interpretation problems."
Shameless plug: This is just the introduction to a complete listing of vulnerabilities and patches organized by platform. You can get the whole kit and caboodle by signing up for this free, weekly newsletter, created by a great bunch of security wonks at Neohapsis.
You May Also Like
Maximizing cloud potential: Building and operating an effective Cloud Center of Excellence (CCoE)
September 10, 2024Radical Automation of ITSM
September 19, 2024Unleash the power of the browser to secure any device in minutes
September 24, 2024