Re: Microsoft GDI+ Detection Tool is useless

From: Alex Nichol (alexn.mvpdts_at_ntlworld.delete.com)
Date: 10/03/04 

Date: Sun, 03 Oct 2004 14:03:43 +0100

Semjon wrote:

>I don't get it - MS said that it provided a fix for the JPEG exploit. But all
>I can see is this:
>
>http://www.microsoft.com/downloads/details.aspx?familyid=71CD9E74-7142-4780-83E5-CE54401DA1D1&displaylang=en
>
>It's the Microsoft GDI+ Detection Tool. So I downloaded it, installed it
>and...it did absolutely nothing! Isn't it supposed to scan the harddisk for
>all gdi libraries, test them for vulnerability and then display the results?
>'Cause in my case it didn't - it just displayed a warning about possible
>vulnerabilities being present and then redirected me to:
>
>http://www.microsoft.com/security/bulletins/200409_jpeg_tool.mspx
>
>So what? Great help! This page just redirects me to the office update site
>plus offers some gdi detection tools for w2k and win2003.

It is there specifically to detect if you have something that is
vulnerable, and if it finds something point you to where you can get the
appropriate fix. In your case that version of Office; it might have
been a different one; or a Windows one (SP2 is not vulnerable) 

-- 
Alex Nichol MS MVP (Windows Technologies)
Bournemouth, U.K.  Alexn@mvps.D8E8L.org (remove the D8 bit)