Updated: July 13, 2020 (October 18, 2004)

Oct. 2004 Update Summary

Michael analyzed and wrote about Microsoft's operating systems, including the Windows client OS, as well as compliance and governance. Michael... more

Seven critical and three important updates were issued in the Oct. 2004 security posting. The bulletin for the critical GDI+ vulnerability from Sept. 2004 was also updated. As in previous monthly security postings, some updates patch multiple vulnerabilities that affect the same files and some updates change previous Windows functionality to increase security, which means that some applications will not work after the updates are applied.

(“MBSA Detection” indicates whether the Microsoft Baseline Security Analyzer scanning tool can detect computers affected by a vulnerability.)

Bulletin
KB Article

Severity

Type and Impact of Vulnerability

MBSA Detection

Comments

MS04-028: Buffer Overrun in JPEG Processing (GDI+)

(838987)

Critical

Buffer overflow

Remote code execution

Separate enterprise update scanning tool is available

Updated to address issues with Office XP, Visio 2002, and Project 2000 on Windows XP with Service Pack 2

MS04-032:

Atlas Members have full access

Get access to this and thousands of other unbiased analyses, roadmaps, decision kits, infographics, reference guides, and more, all included with membership. Comprehensive access to the most in-depth and unbiased expertise for Microsoft enterprise decision-making is waiting.

Membership Options

Already have an account? Login Now