full-disclosure - Re: MS04-028 Jpeg EXPLOIT

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: fulldis at it97.dyndns.org (i.t )
Subject: Re: MS04-028 Jpeg EXPLOIT - msn

> On Saturday 25 September 2004 16:59, raza wrote:
> > I just compiled this and it works well..
> >
 ...
> yes and it works very well.
> > I can see this ones gaana be fun...
> We'll have a worm within days.

for nearly all of my clients using win xp I've deinstalled win messenger.
one urgently wanted it back for communicating in real-time; and, of course, 
it's much more fun seeing a live picture of the counterpart(s) in the chat 
window...

even having installed sp2 and the newest patches plus AV I can imagine a virus 
spreading within those pictures throughout the whole msn and so on...
any other defense?
or ist this too much paranoia?

i.t