ITSD Computing and Communications Services News
October, 2004
 

Protect Your Windows System from Serious Microsoft JPEG Processing Flaw

A major security flaw in the way Windows systems and applications handle the .JPEG graphics format makes your system susceptible to security compromise if you simply view a .JPEG file when you are on the web or reading email. The Lab’s Computer Protection Program recently wrote a short notice in TABL advising Lab users to patch their Windows XP systems from this processing flaw. Several users requested more detailed instructions. Here are the steps to ensure that your system is not vulnerable to this very serious problem:

  1. Bring up the Internet Explorer browser.
  2. Download the program that blocks Service Pack 2 by clicking on “Block Windows XP Service Pack 2 from Bring up a command prompt.
  3. Using the cd command, go to the directory to which you downloaded this program.
  4. Enter: blockxpsp2.cmd <hostname> /B <hostname> means the name of your system—be sure to not actually type the angle brackets. So, for example, if the name of your system is “mysystem,” you should enter: blockxpsp2.cmd mysystem /B
  5. Now go here and select “Express Install.”
  6. Wait until all the updates are installed and then reboot your system.
  7. Go to here and insert your original Office installation disk into the CD-ROM when you are prompted to do so.
  8. Wait until all the updates are installed and then reboot your system.

If you have questions, contact the Help Desk at x4357 or send email.