Mobydock And Gdi+ Vulnerability?

The latest version of MobyDock (v0.87b) ships with a version of GDIPlus.dll that has been identified as being vulnerable to the GDI+ exploit by Microsoft:

Version: 5.1.3100.0

I replaced it with a newer version that was installed elsewhere on my system (5.1.3102.2180) and the program seems to suffer no ill effects.

See this KB article:

http://www.microsoft.com/technet/security/...n/ms04-028.mspx

Look under the 'Frequently Asked Questions' section for specific version information.

This does not mean that MobyDock uses GDI+ in a manner that could be exploited. All I'm saying is, if you're a cautious type like myself, replacing it with a non-vulnerable 5.1.x.y version eliminates any possibility of problems and doesn't break the program.

If you wish to thoroughly check your entire system for potentially vulnerable versions of GDIPlus.dll, I recommend:

http://isc.sans.org/gdiscan.php

as it checks third-party applications (unlike the Microsoft scanner).

#217125