Microsoft GDI+ Library JPEG Segment Length Integer Underflow Vulnerability

Threat level definition

Microsoft GDI+ Library JPEG Segment Length Integer Underflow Vulnerability

References:

Buffer overrun vulnerability when processing JPEG images in Crystal products (Business Objects)
JPEG (GDI+) VGX exploit (CORE Security)
Knowledge Base Article - 831931 (Microsoft)
Knowledge Base Article - 831932 (Microsoft)
Knowledge Base Article - 832332 (Microsoft)
Knowledge Base Article - 885876 (Microsoft)
Knowledge Base Article - 885884 (Microsoft)
Knowledge Base Article - 885920 (Microsoft)
Knowledge Base Article - 886988 (Microsoft)
Microsoft Security Bulletin MS04-028 (Microsoft)
Netscape Communicator JPEG-Comment Heap Overwrite Vulnerability (SecurityFocus)
RE: old netscape vuln - affecting XP/explorer? (Ian Webb )
Symantec Completes Update of Microsoft's Graphic Device Interface Component (Symantec)
Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow ("Nick D." )

Privacy Statement
Copyright 2008, SecurityFocus