Printable Version of Topic

Click here to view this topic in its original format

PMView Pro Forums _ PMView - Windows Technical Support _ New JPEG virus

Posted by: bobg Sep 24 2004, 04:24 PM

Hello Peter,

I see in the press that there is a vulnerability in various Microsoft software when processing jpeg images. Is PMView vulnerable?
see http://news.bbc.co.uk/2/hi/technology/3684552.stm
If you know what is going on here you might give us some info--the press doesn't know much.

Bob Griswold

Posted by: Peter Sep 25 2004, 02:17 PM

PMView is not affected in any way.

Generally PMView don't use an third party libraries and is 100% based on our own work. One of the few exeptions is the JPEG (JFIF) support which is in large part coded by me, but still ultimately based on work of the independent JPEG group (IJG). To our knowledge, the IJG work is not vulnerabe in any way.

Thanks,

Posted by: David H-S Sep 27 2004, 04:49 PM

How will PMView behave if it encounters one of these "malformed" JPEGs? ... ie. a JPG designed to cause an overflow in Win sw?

It would be handy to know what symptoms to watch for so that one knows if an email or web site is serving up such troubles.

Thanks.
David H-S

Posted by: Peter Sep 30 2004, 09:53 AM

PMView will emit an appropriate warning message indicating that there is a flaw in the way the image is stored.