Windows惊现高危漏洞 新型图片病毒将攻击所有用户

<FONT color=#ff0040>瑞星红色（一级）安全警报（本年度第三次发布）</FONT>
<P>     [快讯]9月24日，瑞星公司发布红色（一级）安全警报。该警报显示，微软Windows系统出现重大漏洞，瑞星互联网攻防实验室已经在互联网上监测到针对该漏洞的攻击代码，可以认为，一种高危的新型病毒——图片病毒——极有可能在近期出现。瑞星安全专家表示，所有Windows用户都有可能被这种新型病毒攻击，这类病毒可以用任何方式攻击用户电脑系统，包括格式化硬盘、删除文件等等。</P>
! ^' K0 p  t! x+ Z3 g, v7 N<P>     9月14日，微软安全中心发布了9月漏洞安全公告。其中MS04-028所提及的GDI+漏洞，危害等级被定为“严重”。瑞星安全专家认为，该漏洞涉及GDI+组件，在用户浏览特定JPG图片的时候，会导致缓冲区溢出，进而执行病毒攻击代码。</P>
1 I+ F& X; ~1 @" e% A" P<P>     因此，该漏洞可能发生在所有的Windows操作系统上，针对所有基于IE浏览器内核的软件、Office系列软件、微软.NET开发工具，以及微软其它的图形相关软件等等，这将是有史以来威胁用户数量最广的高危漏洞。</P>
<P>     瑞星安全专家认为，病毒制造者有可能针对该漏洞，大量制造出一种新型病毒——图片病毒，所有带有JPG图片的邮件、网页都有可能成为这类新型病毒的传播渠道。这类病毒有可能通过以下形式发作：1、群发邮件，附带有病毒的JPG图片文件；2、 采用恶意网页形式，浏览网页中的JPG文件、甚至网页上自带的图片即可被病毒感染；3、通过即时通信软件(如QQ、MSN等)的自带头像等图片或者发送图片文件进行传播。</P>
<P>     据了解，腾讯公司已经率先针对该漏洞发布了安全插件，请QQ2004用户迅速登陆（<a href="http://im.qq.com/qq/mo.shtml?/download/qq2004.shtml" target="_blank" ><FONT color=#39394c>http://im.qq.com/qq/mo.shtml?/download/qq2004.shtml</FONT></A>）安装补丁程序。</P>
<P>     瑞星公司已将该漏洞及相关情况在第一时间上报至北京市公安局网监部门，鉴于该类病毒可以通过各种网页进行传播，网监部门已经启动针对该漏洞的应急事件处置预案，并向各大网站通报了该漏洞的情况，要求各大网站立即采取有效措施查找系统相关漏洞，排除信息网络安全隐患，严防国庆期间针对该漏洞可能出现的各种病毒或黑客攻击。警方提示广大互联网用户也要及时修补操作系统，加强防范意识。</P>
<P>     瑞星安全专家警告用户，请迅速登陆微软网站查看该漏洞的修补方案（<a href="http://www.microsoft.com/china/security/Bulletins/200409_jpeg.mspx" target="_blank" ><FONT color=#39394c>http://www.microsoft.com/china/security/Bulletins/200409_jpeg.mspx</FONT></A>），并且随时关注安全厂商的病毒警报。遇到紧急情况，用户可以随时拨打瑞星服务热线010-82678800寻求帮助。
8 S9 D7 d) |/ o- z0 ?</P>

<DIV><P><B>受影响组件: </B></P><P><TABLE cellSpacing=0 cellPadding=0 border=0><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Windows XP and Microsoft Windows XP Service Pack 1 – <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=6F8D70C1-63BD-4213-82C1-20266FDFD735&amp;displaylang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Windows XP 64-Bit Edition Service Pack 1 – <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=1631C3F7-A40E-4B26-BD92-12141E6A7F58&amp;displaylang=en" target="_blank" ><FONT color=#39394c>ownload the update</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Windows XP 64-Bit Edition Version 2003 – <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=98BFF681-9703-4D23-8DF8-B7239D6C531C&amp;displaylang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Windows Server&#8482; 2003 – <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=B2FBD93C-3DC3-4A9E-BDD6-9F39726EE3E2&amp;displaylang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Windows Server 2003 64-Bit Edition – <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=98BFF681-9703-4D23-8DF8-B7239D6C531C&amp;displaylang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Office XP Service Pack 3 – <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=7D128614-6D34-49DF-8D63-6C17E9A2D312&amp;displaylang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P><P>Microsoft Office XP Service Pack 3 Software:</P><TABLE cellSpacing=0 cellPadding=0 border=0><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Outlook&reg; 2002 </P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Word 2002</P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Excel 2002</P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>PowerPoint&reg; 2002 </P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>FrontPage&reg; 2002</P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Publisher 2002</P></TD></TR></TABLE></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Office 2003 – <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=106BCF99-1BA9-4035-94C5-2A7FA90E5971&amp;displaylang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P><P>Microsoft Office 2003 Software:</P><TABLE cellSpacing=0 cellPadding=0 border=0><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Outlook&reg; 2003 </P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Word 2003</P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Excel 2003</P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>PowerPoint&reg; 2003 </P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>FrontPage&reg; 2003</P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Publisher 2003</P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>InfoPath&#8482; 2003 </P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>OneNote&#8482; 2003</P></TD></TR></TABLE></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Project 2002 Service Pack 1 (all versions) – <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=B3EBCCEA-B0E4-41C7-A6F4-413864D2CCF3&amp;displaylang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Project 2003 (all versions) – <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=9E37B6B0-A028-47EA-8FA1-3705877A2908&amp;displaylang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Visio 2002 Service Pack 2 (all versions) – <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=16C2DFFD-7B73-43C4-AB0D-2B5EFC80EB63&amp;displaylang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Visio 2003 (all versions) – <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=C07D40A5-6F87-4D50-9640-34FFD2F189E1&amp;displaylang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Visual Studio .NET 2002 – <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=44004D19-B22F-4AF2-A701-1FCB0467FBF9&amp;displaylang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P><P>Microsoft Visual Studio .NET 2002 Software:</P><TABLE cellSpacing=0 cellPadding=0 border=0><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Visual Basic .NET Standard 2002</P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Visual C# .NET Standard 2002</P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Visual C++ .NET Standard 2002</P></TD></TR></TABLE></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Visual Studio .NET 2003 – <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=A13B7A21-463C-4286-AD68-E692417E80E2&amp;displaylang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P><P>Microsoft Visual Studio .NET 2003 Software:</P><TABLE cellSpacing=0 cellPadding=0 border=0><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Visual Basic .NET Standard 2003</P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Visual C# .NET Standard 2003</P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Visual C++ .NET Standard 2003</P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Visual J# .NET Standard 2003</P></TD></TR></TABLE></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>The Microsoft .NET Framework version 1.0 SDK Service Pack 2 – <a href="http://www.microsoft.com/downloads/details.aspx?familyid=6978D761-4A92-4106-A9BC-83E78D4ABC5B&amp;displaylang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Picture It!&reg; 2002 (all versions) – <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=235EBC80-564B-4B52-A344-502E25AAD7FE&amp;displaylang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Greetings 2002 – <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=235EBC80-564B-4B52-A344-502E25AAD7FE&amp;displaylang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Picture It! version 7.0 (all versions) – <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=235EBC80-564B-4B52-A344-502E25AAD7FE&amp;displaylang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Digital Image Pro version 7.0 – <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=235EBC80-564B-4B52-A344-502E25AAD7FE&amp;displaylang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Picture It! version 9 (all versions, including Picture It! Library) – <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=235EBC80-564B-4B52-A344-502E25AAD7FE&amp;displaylang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Digital Image Pro version 9 – <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=235EBC80-564B-4B52-A344-502E25AAD7FE&amp;displaylang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Digital Image Suite version 9 – <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=235EBC80-564B-4B52-A344-502E25AAD7FE&amp;displaylang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Producer for Microsoft Office PowerPoint (all versions) – <a href="http://www.microsoft.com/downloads/details.aspx?FamilyID=1b3c76d5-fc75-4f99-94bc-784919468e73&amp;DisplayLang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Platform SDK Redistributable: GDI+ - <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=6A63AB9C-DF12-4D41-933C-BE590FEAA05A&amp;displaylang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P></TD></TR></TABLE>Office 用户注意 同时为 Office XP（适用于 Service Pack 2 和 Service Pack 3）和 Office 2003 提供管理更新；有关详细信息，请参见“安全更新信息”部分。 <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=9C51D3A6-7CB1-4F61-837E-5F938254FC47&amp;displaylang=en" target="_blank" ><FONT color=#39394c>Office 2003 Service Pack 1</FONT></A>、<a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=AFCA0578-E1FB-4540-B0CC-FF83DEF61CC6&amp;displaylang=en" target="_blank" ><FONT color=#39394c>Visio 2003 Service Pack 1</FONT></A> 和 <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=1B04C073-E58F-4F42-B76D-6B565A45CDC3&amp;displaylang=en" target="_blank" ><FONT color=#39394c>Project 2003 Service Pack 1</FONT></A> 包含受影响组件的更新版本，因此它们不受影响。 已经安装这些 Service Pack 的客户不需要为这些产品安装可用的安全更新。</P><P>MSN 9 用户注意 MSN 9 分发 Picture It! Express 版本 9 和 Picture It! 库。 在安装 MSN 9 时，您可以选择安装这些程序。 如果已安装 MSN 9， 只有安装了 Picture It! Express 版本 9 或 Picture It! Library 时， 才需要安装 Picture It! 版本 9 更新。

<B>受影响组件：</B></P><P><TABLE cellSpacing=0 cellPadding=0 border=0><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Internet Explorer 6 Service Pack 1 - <a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=B0095851-674D-4357-868C-DD75D88405EC&amp;displaylang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>The Microsoft .NET Framework version 1.0 Service Pack 2 – <a href="http://www.microsoft.com/downloads/details.aspx?familyid=6978D761-4A92-4106-A9BC-83E78D4ABC5B&amp;displaylang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>The Microsoft .NET Framework version 1.1 – <a href="http://www.microsoft.com/downloads/details.aspx?familyid=A8F5654F-088E-40B2-BBDB-A83353618B38&amp;displaylang=en" target="_blank" ><FONT color=#39394c>下载更新</FONT></A></P></TD></TR></TABLE></P><P><B>不受影响的软件：</B></P><P><TABLE cellSpacing=0 cellPadding=0 border=0><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Windows NT Server 4.0 Service Pack 6a</P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Windows NT Server 4.0 Terminal Server Edition Service Pack 6</P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Windows 2000 Service Pack 3, Microsoft Windows 2000 Service Pack 4</P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Windows XP Service Pack 2</P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (Me)</P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P><a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=9C51D3A6-7CB1-4F61-837E-5F938254FC47&amp;displaylang=en" target="_blank" ><FONT color=#39394c>Microsoft Office 2003 Service Pack 1</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Office 2000</P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P><a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=AFCA0578-E1FB-4540-B0CC-FF83DEF61CC6&amp;displaylang=en" target="_blank" ><FONT color=#39394c>Microsoft Visio 2003 Service Pack 1</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Visio 2000</P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P><a href="http://www.microsoft.com/downloads/details.aspx?FamilyId=1B04C073-E58F-4F42-B76D-6B565A45CDC3&amp;displaylang=en" target="_blank" ><FONT color=#39394c>Microsoft Project 2003 Service Pack 1</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Project 2000</P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Microsoft Digital Image Suite 10, Microsoft Digital Image Pro 10, Picture It! Premium 10</P></TD></TR></TABLE></P><P><B>不受影响的组件：</B></P><P><TABLE cellSpacing=0 cellPadding=0 border=0><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Internet Explorer 5.01 Service Pack 3 on Windows 2000 Service Pack 3</P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Internet Explorer 5.01 Service Pack 4 on Windows 2000 Service Pack 4</P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P>Internet Explorer 5.5 Service Pack 2 on Microsoft Windows Millennium Edition</P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P><a href="http://www.microsoft.com/downloads/details.aspx?familyid=6978D761-4A92-4106-A9BC-83E78D4ABC5B&amp;displaylang=en" target="_blank" ><FONT color=#39394c>The Microsoft .NET Framework version 1.0 Service Pack 3</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P><a href="http://www.microsoft.com/downloads/details.aspx?familyid=A8F5654F-088E-40B2-BBDB-A83353618B38&amp;displaylang=en" target="_blank" ><FONT color=#39394c>The Microsoft .NET Framework version 1.1 Service Pack 1</FONT></A></P></TD></TR><TR><TD class=listBullet vAlign=top>&#8226;</TD><TD class=listItem><P><a href="http://www.microsoft.com/downloads/details.aspx?familyid=AE7EDEF7-2CB7-4864-8623-A1038563DF23&amp;displaylang=en" target="_blank" ><FONT color=#39394c>The Microsoft .NET Framework version 1.1 Service Pack 1 for Windows Server 2003</FONT></A></P></TD></TR></TABLE></P><P><B>微软的安全公告:
</B><B><a href="http://www.microsoft.com/china/technet/security/bulletin/MS04-028.mspx" target="_blank" ><FONT color=#39394c>http://www.microsoft.com/china/technet/security/bulletin/MS04-028.mspx</FONT></A></B></P></DIV>
9 L/ i! n  P! T* t$ U

多谢好文章。。。
3 k* {  f# j; V; G5 {* S+金10

晕~又有漏洞~~~唉~那些黑客大虾真是损人啊

看来很严重的样子啊!!我也去打个补丁!!