About usContact usSite help
Quick links
Search this site

Turnpike Mail and News Client

Recently, Microsoft announced a fix for a "critical" security issue (MS04-0028) which related to the display of JPEG images in a wide range of their software. Malicious images are now starting to circulate which exploit the underlying problem, with a view to spreading "viruses" and/or leaving machines open to other attacks.

Although Turnpike does not use Microsoft's JPEG viewer, the malicious images do affect the third-party image display software incorporated in Turnpike. Although it does not seem that the specific Microsoft-targeted exploit works (there's no virus infection or insecurity left behind), any attempt to view one of the malicious images will cause Turnpike to immediately shut down or crash.

In line with previous stated policy to provide security updates, Turnpike Six v6.04 has been released and is available from our FTP site.

For the full version:

ftp://ftp.demon.co.uk/pub/mirrors/turnpike/entire.exe

Or for the upgrade version:

ftp://ftp.demon.co.uk/pub/mirrors/turnpike/uv604.exe

This update addresses the problem with mal-formed JPEGS.

Requests for Turnpike CDs made via the Demon website will be fulfilled when new CDs become available in a few weeks time.

Can we also take this opportunity to remind customers to keep their anti-virus packages up to date.

Users of versions of Turnpike prior to 6.04 are advised to turn off the in-line image viewer and update as soon as possible.

Although beyond the scope of Turnpike, if you are using an external third party program to view images, ensure the vendor's latest patches for viewing malformed JPEGs have been applied.

Further details of version 6.04 of Turnpike can be found in the support newsgroup demon.ip.support.turnpike

Instructions to upgrade from earlier versions of Turnpike to this latest version are identical to those for upgrading to V6.03 and can be found:

http://www.demon.net/toolkit/downloads/upgrade.html

 

Malcolm Muir
Technical Relations Manager





*