05 October 2004

The GDI Mess

Even if microsoft's scanner at windowsupdate tells you that you're safe you should run GDI Scan. Read this forum post too (thanks to Jon Udell).
Here's the results from my first run:

Scanning Drive C:...
C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSO.DLL
Version: 11.0.5606.0
C:\Program Files\Common Files\Microsoft Shared\VGX\vgx.dll
Version: 6.0.2900.2180
C:\Program Files\Desktop Sidebar\gdiplus.dll
Version: 5.1.3097.0 <-- Vulnerable version
C:\Program Files\Microsoft Office\OFFICE11\GDIPLUS.DLL
Version: 6.0.3260.0 <-- Vulnerable version
C:\Program Files\Symantec\Web Tools\GDIPlus.dll
Version: 5.1.3097.0 <-- Vulnerable version
C:\WINDOWS\system32\dllcache\sxs.dll
Version: 5.1.2600.2180
C:\WINDOWS\system32\dllcache\vgx.dll
Version: 6.0.2900.2180
C:\WINDOWS\system32\sxs.dll
Version: 5.1.2600.2180
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13\GdiPlus.dll
Version: 5.1.3097.0 <-- Possibly vulnerable (Windows Side-By-Side DLL)
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\GdiPlus.dll
Version: 5.1.3102.2180
Scan Complete.