Monday, October 4, 2004

Phishing takes advantage of JPEG bug

Symantec's Threat Analyst Team has discovered an exploit in the wild that <A HREF="http://www.eweek.com/article2/0,1759,1664909,00.asp">utilizes the recently announced JPEG vulnerability</A> in Microsoft's GDI+ library to install a new and sophisticated phishing system. eWEEK.com spoke with Oliver Friedrichs, senior manager of Symantec Security Response, who said the infected image is not able to attack a system from within Internet Explorer or Outlook, but only from within Windows Explorer, the file system browsing utility.

News Timeline



From Our Sponsor