Internet Storm Center Incident Handler Tom Liston has posted an open letter to Microsoft concerning the recent JPEG vulnerabilities discovered in GDI+. Liston critisizes Microsoft on several points including the effectiveness of the company’s GDI+ Detection Tool. As an alternative to using Microsoft’s tool, Internet Storm Center offer its own scanning utility, GDI Scan.
http://www.virusthreatcenter.com/permalink.aspx?BlogId=53
If you have used either of these tools, or another utility designed to scan for programs susceptable to the GDI+ JPEG vulnerabilities, I’d like to know what you think of their effectiveness.
Did the scanners work as expected?
Did they find all potential threats?
Did you experience any problems when running them?
