• info
• discussion
• exploit
• solution
• references

Microsoft Paint JPEG Image Processing Integer Overflow Vulnerability

Solution:
The vendor has released updates and an advisory. Please see the references for details.


Microsoft Windows XP Media Center Edition SP2

• Microsoft Security Update for Windows XP (KB978706)
  http://www.microsoft.com/downloads/details.aspx?familyid=b2e70df6-7728 -4fc3-8df7-8ddb9ba5202f

Microsoft Windows Server 2003 Datacenter x64 Edition SP2

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB978706)
  http://www.microsoft.com/downloads/details.aspx?familyid=9143e435-f0d6 -464b-9273-4d1f38f8ff3a

Microsoft Windows XP Tablet PC Edition SP2

• Microsoft Security Update for Windows XP (KB978706)
  http://www.microsoft.com/downloads/details.aspx?familyid=b2e70df6-7728 -4fc3-8df7-8ddb9ba5202f

Microsoft Windows XP Media Center Edition SP3

• Microsoft Security Update for Windows XP (KB978706)
  http://www.microsoft.com/downloads/details.aspx?familyid=b2e70df6-7728 -4fc3-8df7-8ddb9ba5202f

Microsoft Windows Server 2003 Web Edition SP2

• Microsoft Security Update for Windows Server 2003 (KB978706)
  http://www.microsoft.com/downloads/details.aspx?familyid=c1efbe73-fc87 -4e6a-8b36-81f125a27aec

Microsoft Windows XP Professional x64 Edition SP2

• Microsoft Security Update for Windows XP x64 Edition (KB978706)
  http://www.microsoft.com/downloads/details.aspx?familyid=f8c4acc8-c2f4 -41f7-9b32-e7bd791e0155

Microsoft Windows Server 2003 x64 SP2

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB978706)
  http://www.microsoft.com/downloads/details.aspx?familyid=9143e435-f0d6 -464b-9273-4d1f38f8ff3a

Microsoft Windows XP Tablet PC Edition SP3

• Microsoft Security Update for Windows XP (KB978706)
  http://www.microsoft.com/downloads/details.aspx?familyid=b2e70df6-7728 -4fc3-8df7-8ddb9ba5202f

Microsoft Windows 2000 Advanced Server SP4

• Microsoft Security Update for Windows 2000 (KB978706)
  http://www.microsoft.com/downloads/details.aspx?familyid=e5861705-8f49 -45cb-8a92-cf052ccf4134

Microsoft Windows Server 2003 SP2

• Microsoft Security Update for Windows Server 2003 (KB978706)
  http://www.microsoft.com/downloads/details.aspx?familyid=c1efbe73-fc87 -4e6a-8b36-81f125a27aec

Microsoft Windows Server 2003 Standard Edition SP2

• Microsoft Security Update for Windows Server 2003 (KB978706)
  http://www.microsoft.com/downloads/details.aspx?familyid=c1efbe73-fc87 -4e6a-8b36-81f125a27aec

Microsoft Windows XP Home SP2

• Microsoft Security Update for Windows XP (KB978706)
  http://www.microsoft.com/downloads/details.aspx?familyid=b2e70df6-7728 -4fc3-8df7-8ddb9ba5202f

Microsoft Windows 2000 Datacenter Server SP4

• Microsoft Security Update for Windows 2000 (KB978706)
  http://www.microsoft.com/downloads/details.aspx?familyid=e5861705-8f49 -45cb-8a92-cf052ccf4134

Microsoft Windows Server 2003 Itanium SP2

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB978706)
  http://www.microsoft.com/downloads/details.aspx?familyid=ee603435-26af -4ab9-9f22-92734346dc0a

Microsoft Windows XP Home SP3

• Microsoft Security Update for Windows XP (KB978706)
  http://www.microsoft.com/downloads/details.aspx?familyid=b2e70df6-7728 -4fc3-8df7-8ddb9ba5202f

Microsoft Windows XP Professional SP3

• Microsoft Security Update for Windows XP (KB978706)
  http://www.microsoft.com/downloads/details.aspx?familyid=b2e70df6-7728 -4fc3-8df7-8ddb9ba5202f

Microsoft Windows XP Professional SP2

• Microsoft Security Update for Windows XP (KB978706)
  http://www.microsoft.com/downloads/details.aspx?familyid=b2e70df6-7728 -4fc3-8df7-8ddb9ba5202f

Microsoft Windows 2000 Server SP4

• Microsoft Security Update for Windows 2000 (KB978706)
  http://www.microsoft.com/downloads/details.aspx?familyid=e5861705-8f49 -45cb-8a92-cf052ccf4134

Microsoft Windows Server 2003 Enterprise x64 Edition SP2

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB978706)
  http://www.microsoft.com/downloads/details.aspx?familyid=9143e435-f0d6 -464b-9273-4d1f38f8ff3a

Microsoft Windows 2000 Professional SP4

• Microsoft Security Update for Windows 2000 (KB978706)
  http://www.microsoft.com/downloads/details.aspx?familyid=e5861705-8f49 -45cb-8a92-cf052ccf4134