[es] - Svaka čast Microsoft-u...

BytEfLUSh
Neven Pintarić
Nano-mage Engineer, Slave SysAdmin
Sombor

Član broj: 21153
Poruke: 5499
*.nat-pool.so.sbb.co.yu

+14 Profil

Svaka čast Microsoft-u...

^{16.09.2004. u 00:04 - pre 238 meseci}

Uspeli su uraditi ono što je do sada smatrano nemogućim - možete se zaraziti virusom/trojancem samim otvaranjem JPEG fajla (slike)!

http://www.microsoft.com/security/bulletins/200409_jpeg.mspx

Putuj planeto, super smo se družili
nama je lepo, taman kako smo zaslužili!

Odgovor na temu

byTer

Član broj: 10936
Poruke: 1221
*.info-net.co.yu

ICQ: 47761626

Profil

Re: Svaka čast Microsoft-u...

^{16.09.2004. u 11:27 - pre 238 meseci}

Evo ja se već pechem... :))

Odgovor na temu

Reljam
Relja Markovic
San Francisco

Član broj: 531
Poruke: 1793
*.client.comcast.net

+18 Profil

Re: Svaka čast Microsoft-u...

^{16.09.2004. u 17:06 - pre 238 meseci}

Zaraza preko otvaranja ne-executable fajlova je jedan od elementarnih 'attack vectora'. Bilo sta sto cita podatke sa mreze ili diska moze da ima rupu preko koje ce neko da ubaci kod koji moze da se izvrsi. Ako pogledas crve koji se sire preko mreze, oni koriste istu vrstu napada kao i ovo sa JPGom - negde neki bafer biva prepisan.

A cisto da ne mislis da je ovo specijalnost vezana za MS: potpuno ista stvar sa PNGom samo na Linuxu: http://www3.ca.com/securityadvisor/vulninfo/Vuln.aspx?ID=6184 . Ovaj link je od pre dve godine, a http://secunia.com/advisories/12219/ ovaj je od pre mesec dana.

Odgovor na temu

filo
VETS
Beograd

Član broj: 8038
Poruke: 1240
*.dial.b92.net

Profil

Re: Svaka čast Microsoft-u...

^{16.09.2004. u 20:02 - pre 238 meseci}

na linuxu! aaaa
to nije tacno
ma ti hoces nas da prevaris
ti si ustvari postavio te stranice!

Odgovor na temu

reiser

Član broj: 7895
Poruke: 2314

+102 Profil

Re: Svaka čast Microsoft-u...

^{22.09.2004. u 20:31 - pre 238 meseci}

http://www.computerworld.com/s...es/story/0,10801,96088,00.html

Citat:

SEPTEMBER 22, 2004 (IDG NEWS SERVICE) - Computer code that takes advantage of a flaw in the way many Microsoft Corp. applications process JPEG images has been published on the Internet and could be a precursor to actual attacks on vulnerable PCs, experts said.

The code was published late last week, only days after Microsoft revealed the "critical" vulnerability and made patches available to fix the problem (see story). A wide range of Microsoft software that processes JPEG images, including versions of its Windows and Office products, is vulnerable.

So far, only "proof-of-concept" code that can cause a vulnerable Web browser to crash or a PC to freeze has been published. A fully developed exploit would allow an attacker to take control of a victim's computer by remotely opening a command prompt or downloading and running malicious software, one expert said yesterday.

Odgovor na temu