RE: Fw: TiVo Software uses gdiplus.dll

["LeeUKHA" <mailinglists@xxxxxxxxxxx>]

This doesn't actually relate to UK TiVo types as it's the US Home Media
Option software that is the problem.

However, there are lots of other bits of software that have this
vulnerability.

See http://www.bleepingcomputer.com/forums/topict3077.html
for the test and
fix.

Crash helmets on, this is could get very ugly...
Lee
-----Original Message -----
From: Davey [mailto:DB1001@xxxxxxx]
Sent: 04 October 2004 16:30
To: ukha_d@xxxxxxx
Subject: [ukha_d] Fw: TiVo Software uses gdiplus.dll


Chap/esses,
Saw this on NTBugTraq and thought of you.

This issue is relates to the gdiplus.dll security issue - if you need more
info then  google MS04-028 and gdiplus.dll . Can't comment on the email..
as
I don't have a TiVo

Anyway just a "heads up" for you TiVo type people .... don't
shoot the
messenger if he's talking rubbish

Davey

-----Original Message-----
From: Josh Hurley
Sent: 17 September 2004 00:09
To: NTBUGTRAQ@xxxxxxx
Subject: TiVo Software uses gdiplus.dll

TiVo has software package that allows a user to setup an Image and Audio
server on their PC. When connected to the same LAN as the TiVo it allows
the
image and audio files to be viewed on a TV via the TiVo DVR.

I contacted TiVo to ask if there software was effected and they only
referred me to their Press Release section of their website. I guess the
answer is yes?!?

This brings up an important question, can a user tell by version number if
the gdipluss.dll is effected? Apparently companies like TiVo are not
concerned with security so we need a way to figure out what is effected.




[Non-text portions of this message have been removed]