Vulnerability in PNG Processing Could Allow Remote Code Execution
Vulnerabilities exist because of the way the affected software handles PNG files.
ITPro Today
February 8, 2005
1 Min Read
ReportedFebruary 8, 2005 by Microsoft
VERSIONS AFFECTED
DESCRIPTION
Vulnerabilities existbecause of the way the affected software handles PNG files. A remoteintruder could use malicious Web content that contains corrupt ormalformed PNG files to execute codeon the affected system. Asuccessful exploit could allow the intruder to take complete controlof the system.
VENDOR RESPONSE
Microsoft has releasedSecurity Bulletin MS05-009, "Vulnerabilityin PNG Processing Could Allow Remote Code Execution (890261),"and a patch to correct the problem.
CREDIT
Carlos Sarrauteof Core Security Technologies
About the Author
Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
You May Also Like