23 Sep 2004
JPEG security problem - are you patched? Sophos advises customers to protect their computer systems
 |
| Microsoft issued security patches and advice
about the problem on 14 September 2004 |
Following the publishing on the internet of "proof of concept"
code that exploits a security vulnerability associated with JPEG
image files, Sophos recommends customers ensure their computers are
patched and protected.
The security hole could be exploited by hackers or a future
internet worm. Already "proof-of-concept" code has been published
on the internet exploiting the vulnerability.
Microsoft first published a technical bulletin about the problem on
14 September 2004, including links to security patches.
"This vulnerability is serious - everyone should ensure their
systems are properly protected before someone tries to exploit the
vulnerability with malicious intent," said Graham Cluley, senior
technology consultant for Sophos.
Sophos recommends that every IT manager responsible for security
should consider subscribing to vulnerability mailing lists such as
that operated by Microsoft at www.microsoft.com/technet/security/bulletin/notify.mspx.
"Home users should consider checking out the services Microsoft
offers at windowsupdate.microsoft.com, which can scan
your home PC for security vulnerabilities and suggest which
critical patches need to be installed," continued Cluley.
Sophos continues to recommend computer users practise safe computing as well as running
up-to-date anti-virus software.
About Sophos
More than 100 million users in 150 countries rely on Sophos as the best protection against complex threats and data loss. Sophos is committed to providing security and data protection solutions that are simple to manage, deploy and use and that deliver the industry's lowest total cost of ownership. Sophos offers award-winning encryption, endpoint security, web, email, and network access control solutions backed by SophosLabs - a global network of threat intelligence centers. With more than two decades of experience, Sophos is regarded as a leader in security and data protection by top analyst firms and has received many industry awards.
Sophos is headquartered in Boston, US and Oxford, UK. More information is available at www.sophos.com.