Update for those Windows 98 or Me users who are running VFP9beta: Last night Microsoft released a security update for GDI+ #MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987). I decided to check my August 24 link above to see if a new GdiPlus.dll file was available there too. Surprise, when I clicked on the
GDI+ RTM link I got a so sorry message
The download you requested is unavailable ... try the "Search for a Download" area on the Download Center home page.
So here is the new Platform SDK Redistributable: GDI+
gdiplus_dnld.exe dated 09/14/2004 and
GDI+ version 3102.1360 where gdiplus.dll is 1,645,320 bytes dated 05/04/2004 11:53a:
Here is the new GDI+ detection tool
gdidettool.exe to test for vulnerable Microsoft applications (obviously it can't check third party software) dated 09/14/2004:
Note these installation instructions in the accompanying redist.txt:
- For Windows XP use the system-supplied gdiplus.dll. Do not install a new gdiplus.dll over the system-supplied version (it will fail due to Windows File Protection).
- For Windows 2000, Windows Millennium Edition, Windows NT 4.0 and Windows 98, install gdiplus.dll into the private directory of the application
not into the system directory.
dbMark