BleepingComputer.com: MS04-028: Ducky.C Trojan - GDI+ exploit for JPEG

Page 1 of 1

You cannot start a new topic
You cannot reply to this topic

MS04-028: Ducky.C Trojan - GDI+ exploit for JPEG

#1 harrywaldron

Security Reporter

Group: Members
Posts: 509
Joined: 10-April 04
Gender:Male
Location:Roanoke, Virginia

Posted 01 November 2004 - 06:01 AM

Another new MS04-028 variant exploiting malformed JPEG files surfaced overnight. This trojan is not widespread and mainly shows that work continues on GDI+ exploitation.

MS04-028: Ducky.C Trojan - GDI+ exploit for JPEG files
http://www.symantec.com/avcenter/venc/data...an.ducky.c.html

Trojan.Ducky.C is a Trojan horse program that exploits the Microsoft GDI+ Library JPEG Segment Length Integer Underflow vulnerability (described in the Microsoft Security Bulletin MS04-028)

Microsoft Security Journal