(1 item) |
|
(1 item) |
|
(5 items) |
|
(1 item) |
|
(1 item) |
|
(2 items) |
|
(2 items) |
|
(4 items) |
|
(1 item) |
|
(6 items) |
|
(2 items) |
|
(4 items) |
|
(1 item) |
|
(4 items) |
|
(2 items) |
|
(1 item) |
|
(1 item) |
|
(1 item) |
|
(1 item) |
|
(1 item) |
|
(1 item) |
|
(1 item) |
|
(1 item) |
|
(2 items) |
|
(2 items) |
|
(5 items) |
|
(3 items) |
|
(1 item) |
|
(1 item) |
|
(1 item) |
|
(3 items) |
|
(1 item) |
|
(1 item) |
|
(2 items) |
|
(8 items) |
|
(2 items) |
|
(7 items) |
|
(2 items) |
|
(2 items) |
|
(1 item) |
|
(2 items) |
|
(1 item) |
|
(2 items) |
|
(4 items) |
|
(1 item) |
|
(5 items) |
|
(1 item) |
|
(3 items) |
|
(2 items) |
|
(2 items) |
|
(8 items) |
|
(7 items) |
|
(3 items) |
|
(7 items) |
|
(6 items) |
|
(1 item) |
|
(2 items) |
|
(5 items) |
|
(5 items) |
|
(7 items) |
|
(3 items) |
|
(7 items) |
|
(16 items) |
|
(10 items) |
|
(27 items) |
|
(15 items) |
|
(15 items) |
|
(13 items) |
|
(16 items) |
|
(15 items) |
I was glad to see that I'm not the only one having trouble applying the GDI+ patch.
I've downloaded the GDI+ detection tool that scans your system telling you whether you have anything not covered by Windows Update that has installed the GDI+ libraries, and is still using an unpatched version. I run it and it tells me this:
The software tool has detected that you are running Microsoft software that may contain a security vulnerability. There are security updates available from Microsoft that fix this security vulnerability.
Note the unhelpful absence of any clue as to which piece of software might be causing the problem.
It does offer this ray of hope:
Would you like to learn more about the security vulnerability as well as the necessary security updates that address it? (Note that if you click No this tool will not prompt you again.)
And if I click on Yes, it takes me here. That page tells me to check the Office Update site. I already have, and I'm patched to the hilt there, thanks. Step 2 I am to ignore, because that is "For Users of Windows Versions Other Than Windows XP or Windows Server 2003" and I'm running XP sp2.
I'm guessing Step 3 is mislabelled because it says "For Windows 2000 Users" but it tells you to visit Windows Update. I would have thought visiting Windows Update was good advice no matter what version of Windows you're running.
I'm fully up to date so far. Then it helpfully suggests that I might like to try running the very tool that took me to this page... Obviously I've already done that. But I do it again, and it tells me exactly what it did last time - apparently I still have a problem, and apparently it's not prepared to tell me how it knows that - I have to keep guessing.
Now although it appears not to be linked to from the page the tool takes you too, I happen to know there's a more detailed page about this issue here. This lists a whole load of products that use GDI+ that are not listed on the page the detection tool takes you to.
But I've run every single patch listed there for the programs I have installed. And still this tool is telling me I have Microsoft software installed that is vulnerable.
Why can't it just tell me which software? Or failing that, at least tell me how it drew that conclusion so I can work out what to do next?
The worrying thing about this is that I'm supposed to know a thing or two about computers and I can't work out what's going on - am I patched and the tool is wrong? Am I missing some patches? So what are the odds of someone who isn't computer literate getting their system patched correctly?
On the plus side, all the programs that are likely to display JPEGs from the internet are patched, so in practice I don't believe I'm at as much risk as I would be if I hadn't run any patches at all. But even so, this is pretty poor.