gdiplus.dll virus vulnerability

TLB 3.1 includes a vulnerable version of the file gdiplus.dll. Potentially, someone could distribute a plugin or skin with a virus in a JPEG file. There are updated versions of the gdiplus.dll file, but it needs to be included in TBL.

http://www.microsoft.com/technet/securit...4-028.mspx

http://isc.sans.org/gdiscan.php

That's interesting... I'm running 3.1 and gdiscan doesn't report any such DLL as part of TLB. I wonder if it came with one of the plugins?

TLB Clock is the only plugin that uses gdiplus.dll
Thank you for note.

Hi

just for your info the drivespace plugin uses gdiplus.dll to.

cu jens

jens you need update for Drive Space. The last version do not use gdiplus.

Also note if you download updated gdiplus.dll from microsoft the old version will not be installed.