FIX: Several vulnerabilities in JPEG processing (GDI+) and in GIF imaging components could allow for remote code execution in Windows Embedded CE 6.0 R2

View products that this article applies to.

SYMPTOMS

In Microsoft Windows Embedded CE 6.0 R2, several vulnerabilities in JPEG processing (GDI+) and in GIF imaging components could allow for remote code execution.

Back to the top

A supported software update is now available from Microsoft as Windows CE 6.0 Platform Builder Monthly Update (February 2008). You can confirm this by scrolling to the "File information" section of this article. The package file name contains the product version, date, Knowledge Base article number, and processor type. The package file name format is:

Product version-yymmdd-kbnnnnnn-processor type

For example: Wincepb50-060503-kb917590-armv4i.msi is the ARMV4i Windows CE 5.0 Platform Builder fix that is documented in KB article 917590 and that is contained in the May 2006 monthly update. To resolve this problem immediately, click the following article number for information about obtaining Windows CE Platform Builder and core operating system software updates:

837392 (http://support.microsoft.com/kb/837392/ ) How to locate core operating system fixes for Microsoft Windows CE Platform Builder products

Prerequisites

This software update is supported only if all previously issued software updates for this product have also been applied.

Restart requirement

After you apply this software update, you must perform a clean build of the whole platform. To clean the platform, click Clean on the Build menu. To build the platform, click Build Platform on the Build menu. You do not have to restart the computer after you apply this software update.

Software update replacement information

This software update does not replace any other software updates.

File information

The English version of this software update package has the file attributes or the later file attributes that are listed in the following table.

Collapse this tableExpand this table

File name	File size	Date	Time
Wincepb60-080222-kb948813-armv4i.msi	1,703,936	22-Feb-2008	19:54
Wincepb60-080222-kb948813-mipsii.msi	1,635,328	22-Feb-2008	19:54
Wincepb60-080222-kb948813-mipsii_fp.msi	1,635,328	22-Feb-2008	19:54
Wincepb60-080222-kb948813-mipsiv.msi	1,644,032	22-Feb-2008	19:54
Wincepb60-080222-kb948813-mipsiv_fp.msi	1,638,400	22-Feb-2008	19:54
Wincepb60-080222-kb948813-sh4.msi	1,620,480	22-Feb-2008	19:54
Wincepb60-080222-kb948813-x86.msi	1,539,584	22-Feb-2008	19:54

The English version of this software update package has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Collapse this tableExpand this table

File name	File size	Date	Time	Path
Gdi_render.lib	1,318,066	14-Feb-2008	19:20	public\gdiex\oak\lib\armv4i\debug
Img_gifdecoder.lib	156,478	14-Feb-2008	19:20	public\gdiex\oak\lib\armv4i\debug
Gdi_render.lib	1,173,812	14-Feb-2008	19:19	public\gdiex\oak\lib\armv4i\retail
Img_gifdecoder.lib	140,052	14-Feb-2008	19:20	public\gdiex\oak\lib\armv4i\retail
Gdi_render.lib	1,250,308	14-Feb-2008	19:20	public\gdiex\oak\lib\mipsii\debug
Img_gifdecoder.lib	148,198	14-Feb-2008	19:20	public\gdiex\oak\lib\mipsii\debug
Gdi_render.lib	1,036,876	14-Feb-2008	19:20	public\gdiex\oak\lib\mipsii\retail
Img_gifdecoder.lib	128,582	14-Feb-2008	19:20	public\gdiex\oak\lib\mipsii\retail
Gdi_render.lib	1,248,664	14-Feb-2008	19:21	public\gdiex\oak\lib\mipsii_fp\debug
Img_gifdecoder.lib	148,506	14-Feb-2008	19:21	public\gdiex\oak\lib\mipsii_fp\debug
Gdi_render.lib	1,020,362	14-Feb-2008	19:21	public\gdiex\oak\lib\mipsii_fp\retail
Img_gifdecoder.lib	128,972	14-Feb-2008	19:21	public\gdiex\oak\lib\mipsii_fp\retail
Gdi_render.lib	1,271,836	14-Feb-2008	19:21	public\gdiex\oak\lib\mipsiv\debug
Img_gifdecoder.lib	150,388	14-Feb-2008	19:22	public\gdiex\oak\lib\mipsiv\debug
Gdi_render.lib	1,046,986	14-Feb-2008	19:21	public\gdiex\oak\lib\mipsiv\retail
Img_gifdecoder.lib	129,816	14-Feb-2008	19:22	public\gdiex\oak\lib\mipsiv\retail
Gdi_render.lib	1,251,650	14-Feb-2008	19:22	public\gdiex\oak\lib\mipsiv_fp\debug
Img_gifdecoder.lib	150,146	14-Feb-2008	19:22	public\gdiex\oak\lib\mipsiv_fp\debug
Gdi_render.lib	1,024,744	14-Feb-2008	19:22	public\gdiex\oak\lib\mipsiv_fp\retail
Img_gifdecoder.lib	129,600	14-Feb-2008	19:22	public\gdiex\oak\lib\mipsiv_fp\retail
Gdi_render.lib	1,119,712	14-Feb-2008	19:23	public\gdiex\oak\lib\sh4\debug
Img_gifdecoder.lib	136,320	14-Feb-2008	19:23	public\gdiex\oak\lib\sh4\debug
Gdi_render.lib	933,906	14-Feb-2008	19:23	public\gdiex\oak\lib\sh4\retail
Img_gifdecoder.lib	119,882	14-Feb-2008	19:23	public\gdiex\oak\lib\sh4\retail
Gdi_render.lib	1,042,172	14-Feb-2008	19:23	public\gdiex\oak\lib\x86\debug
Img_gifdecoder.lib	119,056	14-Feb-2008	19:24	public\gdiex\oak\lib\x86\debug
Gdi_render.lib	1,006,956	14-Feb-2008	19:23	public\gdiex\oak\lib\x86\retail
Img_gifdecoder.lib	114,844	14-Feb-2008	19:23	public\gdiex\oak\lib\x86\retail