Microsoft Windows Knowledge Base Article 978706 update is not installed (WinMs10kb978706Update)

Microsoft Windows Knowledge Base Article 978706 update is not installed (WinMs10kb978706Update)

Vuln ID:	55928
Risk Level:	High	WinMs10kb978706Update
Platforms:	Microsoft Windows 2000: SP4, Microsoft Windows XP: SP2, Microsoft Windows Server 2003: SP2, Microsoft Windows Server 2003: SP2 Itanium, Microsoft Windows Server 2003: SP2 x64, Microsoft Windows XP: SP2 x64 Professional, Microsoft Windows XP: SP3
Description:	Microsoft Windows Knowledge Base Article 978706 update is not installed on the system, which could allow an attacker to exploit the following vulnerability: Microsoft Paint could allow a remote attacker to execute arbitrary code on the system, caused by an integer overflow when decoding JPEG files. By persuading a victim to open a specially-crafted JPEG image file, a remote attacker could exploit this vulnerability to corrupt memory and execute arbitrary code on the system with the privileges of the victim.
Remedy:	Apply the appropriate patch for your system, as listed in Microsoft Security Bulletin MS10-005. See References.
False Positives:
False Negatives:
Required Permission:	Windows login
Additional Information:
References:	Microsoft Security Bulletin MS10-005 Vulnerability in Microsoft Paint Could Allow Remote Code Execution (978706) http://www.microsoft.com/technet/security/bulletin/ms10-005.mspx IBM Internet Security Systems X-Force Database Microsoft Paint JPEG integer overflow http://xforce.iss.net/xforce/xfdb/55927 ISS X-Force Microsoft Windows Knowledge Base Article 978706 update is not installed http://www.iss.net/security_center/static/55928.php CVE CVE-2010-0028 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0028

Know Your Risks

Common Vulnerabilties & Exposures