New Unpatched Windows Bug in LoadImage - GoFuckYourself.com

GeorgeK · 12-24-2004, 03:58 AM

There's a scary new Windows vulnerability discussed at:

http://www.techworld.com/security/ne...fm?NewsID=2865
http://news.com.com/Chinese+firm+fin...3-5502534.html

A simple image downloaded from a browser could exploit the flaw. This could be done via someone's signature, for example, even if you use Firefox or Mozilla.

To protect yourself, short of surfing with images off (or abandoning Windows), one can adjust the settings in Mozilla or Firefox to allow images only that originate from the same server as you visited.

1) Firefox: Tools --> Options --> Web Features --> check the box for "for the originating web site only" under "Load Images" (you can add exceptions too, for trusted sites)

2) Mozilla: Edit --> Preferences --> Privacy & Security --> Images --> choose "Accept Images that come from the originating server only"

This means you won't see many signatures or images posted within the forum, but you'll be a lot safer. On the upside, the pages will load faster.

Tat2Jr · 12-24-2004, 04:13 AM

I just knew Bill wouldn't forget me this Christmas!

Dirty-Dough · 12-24-2004, 04:25 AM

Whats live without images?
Live dangerous, keep it enabled..

GeorgeK · 12-24-2004, 04:27 AM

Upgrading to Windows XP Service Pack 2 would fix things, also (although, doesn't help immediately if running Windows 2000 or NT, as a lot of corporations still do).

bigdog · 12-24-2004, 06:15 AM

this stuff is starting to get out of hand

12-24-2004, 03:58 AM	#1
GeorgeK Confirmed User Join Date: Dec 2003 Location: Toronto, Canada Posts: 423	New Unpatched Windows Bug in LoadImage There's a scary new Windows vulnerability discussed at: http://www.techworld.com/security/ne...fm?NewsID=2865 http://news.com.com/Chinese+firm+fin...3-5502534.html A simple image downloaded from a browser could exploit the flaw. This could be done via someone's signature, for example, even if you use Firefox or Mozilla. To protect yourself, short of surfing with images off (or abandoning Windows), one can adjust the settings in Mozilla or Firefox to allow images only that originate from the same server as you visited. 1) Firefox: Tools --> Options --> Web Features --> check the box for "for the originating web site only" under "Load Images" (you can add exceptions too, for trusted sites) 2) Mozilla: Edit --> Preferences --> Privacy & Security --> Images --> choose "Accept Images that come from the originating server only" This means you won't see many signatures or images posted within the forum, but you'll be a lot safer. On the upside, the pages will load faster. __________________ I buy good domain names. Send lists to George (at) LOFFS.com

12-24-2004, 04:13 AM	#2
Tat2Jr Confirmed User Join Date: Feb 2001 Location: Sunny California Posts: 4,882	I just knew Bill wouldn't forget me this Christmas! __________________ NICHE MONEY >> Ass Worship • Panties • Solo Teen • Pantyhose Serving up exclusive fetish sites since 1997!

12-24-2004, 04:27 AM	#4
GeorgeK Confirmed User Join Date: Dec 2003 Location: Toronto, Canada Posts: 423	Upgrading to Windows XP Service Pack 2 would fix things, also (although, doesn't help immediately if running Windows 2000 or NT, as a lot of corporations still do). __________________ I buy good domain names. Send lists to George (at) LOFFS.com

12-24-2004, 04:25 AM	#3
Dirty-Dough Confirmed User Join Date: Dec 2004 Posts: 496	Whats live without images? Live dangerous, keep it enabled..

12-24-2004, 06:15 AM	#5
bigdog Confirmed User Join Date: Jul 2001 Posts: 6,964	this stuff is starting to get out of hand