Personal Website of Yakov Shafranovich

« A new PAC for solving the IP issues         Wanna Work for Microsoft? Blog Your Resume »

Spreading the JPEG Virus

Recently a first JPEG viruses was reported that exploits the GDI vulnerability in Microsoft software. That means that anything processing JPEG files can possibly used a vector for infection. After having an interesting conversion with someone my brother (who works at an online dating service called “HurryDate”) today regarding a possibly infected image, I thought about some of the possible vectors:

o Online dating services like Match.com HurryDate (brotherly loyalty is important!)
o Photo blog services like Picassa and Flickr
o Google’s image search
o Porn sites

A lot of these services do not employ any kind of virus scanning since image files have never been used for viruses. This may need to change soon.

Tags: security, windows —

Permalink | Trackback URL | This post has