GDI scan tool

SANS has released the easy-to-use 'GDI Scan' for ferreting out the critical flaw that paves the way for JPG exploits. These are serious vulnerabilities that affect the majority of Internet users and could lead to serious compromise. Tom Liston, president of LaBrea Technologies, has written an open letter to Microsoft that does a great job of expressing the frustrations felt by many of us, describing their MS04-028 as the "literary equivalent of spaghetti code."