mailing list archives
SV: Sans GDI scan says still vulnerable after patching
From: "Peter Kruse" <kruse () krusesecurity dk>
Date: Wed, 6 Oct 2004 18:30:38 +0200
Copy your updated gdiplus.dll file and overwrite the vulnerable DLL's.
Please note that this procedure might provent third part software from
This usally occurs when third part software is installed on the system.
Their DLL's might be based upon the vulnerable version from MS. You shold
make a backup of the vulnerable DLL's and overwite them with the new patched
version. If this doesn't give any problems, with any other software you've
installed, you can always delete the backup.
Full-Disclosure - We believe in it.