Hackers Target Microsoft JPEG Flaw

Hackers have exploited a flaw in programs from Microsoft Corp., Redmond, Wash., and circulated malicious code hidden in images that use the JPEG format, The Associated Press reported. To get the code, a visitor must download the image and view it using Microsoft Windows Explorer software. The computer contacts a server to obtain code that would let an attacker take over the machine remotely. The flaw is in a technology that is used to render JPEG images and affects Windows XP, Windows Server 2003 and later versions of Office. Earlier versions may be affected if running specialized applications, like Digital Image Pro and Visio 2002. Computers with updated versions of anti-virus software should be protected. Microsoft also has a software patch to fix the flaw and said users who have the Service Pack 2 security update for Windows XP are not affected.

See the Microsoft Security Bulletin MS04-028 for more information and critical program updates.