MS04-028 - .NET Framework

Does anyone know if an ASP.NET web application that uses GDI+ can be
exploited by the vulnerability described in MS04-028? And, if so, how?

thanks

Hopper
Wed Sep 15 13:02:00 CDT 2004

I would certainly think so, in the same fashion of the GDI+ exploit.

"user" <a@localhost> wrote in message
news:%23zN8esymEHA.3988@tk2msftngp13.phx.gbl...
> Does anyone know if an ASP.NET web application that uses GDI+ can be
> exploited by the vulnerability described in MS04-028? And, if so, how?
>
> thanks
>
>

Karl
Wed Sep 15 22:18:54 CDT 2004

Check out the list of four or five possible scenarios in the
"Vulnerability - FAQ" section of the MS04-028 technical security bulletin at
www.microsoft.com/technet/security

The program in question generally has to open or display the JPEG image in
question.


"user" <a@localhost> wrote in message
news:%23zN8esymEHA.3988@tk2msftngp13.phx.gbl...
> Does anyone know if an ASP.NET web application that uses GDI+ can be
> exploited by the vulnerability described in MS04-028? And, if so, how?
>
> thanks
>
>