Potentially 'devastating` MS JPEG flaw

A Windows JPEG vulnerability could be exploited with "devastating" effect using Internet Explorer, a security firm claimed yesterday.

"We believe that the potential damage caused by this threat could be devastating in its global harm and outreach," said Finjan Software CEO Shlomo Touboul. "It would be equivalent to the most malicious Internet worm ever seen, comparable in magnitude and destructive potential to the Blaster and Sasser worms."

According to Touboul, even simple Internet surfing could leave users at risk, as hackers could remotely access vulnerable PCs simply by getting a user to browse a page that contains a malformed JPEG image.

While the current exploit is fairly scarce, security experts predict future attempts to create malicious images that would work on Outlook and Internet Explorer programs, Internetweek reports.

PCs running Linux are growing in popularity in part because they can be loaded with a pirated copy of Windows, Gartner reports.

According to a study by the research firm, about 40% of Linux PCs will be modified to run an illegal copy of Windows, a bait-and-switch manoeuvre that reduces the cost of obtaining a Windows PC. This trend increases to around 80% in certain developing areas.

In 2008, Linux will account for 7.5% of PCs shipped, but only 2.6% of the installed base, about the same that Apple`s installed base will be then, reports News.com.

Gateway has unveiled its 700GR desktop PC, based on a new chassis design that helps cool high-end processors and graphics cards.

According to PCWorld, the 700GR features Intel`s Pentium 4 550 processor, 1GB of memory, a 250GB hard drive, a CD rewritable drive, and a Radeon X300SE graphics card with 128MB of memory.

The PC`s BTX (balanced technology extended) design moves the processor, chip set and memory modules to allow a stream of air to flow through the PC`s chassis.

The suggested retail price is $1 200 (R7 600) without the monitor.

The e-Financial WorldExpo, which focuses on a range of IT products used by financial institutions, will be held in Canada in November.

Topics to be covered at the event include customer relationship management, online banking applications, business intelligence, risk management, outsourcing, security and Web services.