GDI Scan

Ritaann,

Did you already install SP2 from WindowsUpdate?
That should cover the most important attack vectors.
Read the article that Nick provided.
It's the 3rd party apps that are next most important.
Get updates for those apps. If there are no updates, email the developer and ask them to make an update.
In the mean time, you could backup the vulnerable 3rd party app's gdiplus.dll by renaming it gdiplus.dll.old and then copying the new MS gdiplus.dll into the same directory that the renamed vulnerable one exists.
The program may not like the new gdiplus.dll and generate an error. Or it may work perfectly. At least it won't be vulnerable.

 

devinco
i have already installed sp2 and i've read the article nick provided so now i'm going to try and rename as you suggested--thanks
rita

 

Here's my scan result: