Paint Shop Pro support - PSP 9.01 upgrade patch

Author

PSP 9.01 upgrade patch - do I really *need* it?

Suzanne R. Stone

2005-02-13, 11:18 pm

The thing keeps launching the explorer update page wanting to give me
the 9.01 patch. But I haven't been having any problems with 9.0. What
is the upgrade supposed to do for me, and is it anything I really need
to bother with?

And what the heck is up with this photo security patch? I'm reluctant
to dl that one too.

Kris Zaklika

2005-02-13, 11:18 pm

"Suzanne R. Stone" wrote:
>
> The thing keeps launching the explorer update page wanting to give me
> the 9.01 patch. But I haven't been having any problems with 9.0. What
> is the upgrade supposed to do for me, and is it anything I really need
> to bother with?

It corrects some errors in the program. If you don't want
these errors corrected then don't apply the patch. Personally,
I would apply the patch, since it protects you against errors
that you may encounter in future and costs you nothing to
apply.

> And what the heck is up with this photo security patch? I'm reluctant
> to dl that one too.

You'd better take this one more seriously. This is not really
anything to do with PSP. Instead, the gdiplus.dll file supplied
by Microsoft is subject to exploitation by malware. According
to Microsoft, the file cannot be exploited when it is used
the way PSP is using it. However, on your computer you
probably have many other programs from Microsoft that use
gdiplus.dll in an exploitable way. Often Microsoft programs
each install their own copy of this file, so that you may have
multiple copies splattered over your system, each of which is
vulnerable. Go to the Microsoft web site and search for
gdiplus. You will find there is a program on the site that
will scan your computer for the presence of vulnerable copies
of gdiplus.dll. Or, you can simply do Start > Search > For
Files or Folders in Windows to locate the files. Then you can
replace them with a corrected version of gdiplus.dll from
Microsoft. Jasc (now Corel) has provided this file as patch
to PSP merely as a convenience to users. Patching PSP won't
fix all the vulnerabilities on your system created by Microsoft
since these depend on the Microsoft products you have installed.
The same gdiplus.dll file may also be used by Adobe products,
or products from other companies, and you'll have to take
care of those too.

Uni

2005-02-13, 11:18 pm

Suzanne R. Stone wrote:
> The thing keeps launching the explorer update page wanting to give me
> the 9.01 patch. But I haven't been having any problems with 9.0. What
> is the upgrade supposed to do for me, and is it anything I really need
> to bother with?
>
> And what the heck is up with this photo security patch? I'm reluctant
> to dl that one too.

It's to help, notice I said help, protect you from the JPEG virus!!! I
thought only Microsoft applications had this problem, not PSP-9!!!!!

Uni

Uni

2005-02-13, 11:18 pm

Kris Zaklika wrote:
> "Suzanne R. Stone" wrote:
>
>
>
> It corrects some errors in the program. If you don't want
> these errors corrected then don't apply the patch. Personally,
> I would apply the patch, since it protects you against errors
> that you may encounter in future and costs you nothing to
> apply.
>
>
>
>
> You'd better take this one more seriously. This is not really
> anything to do with PSP.

Is this a case where reverse engineering can nab you in the behind?

Uni

Canopus

2005-02-13, 11:18 pm

"Kris Zaklika" <Kris.Zaklika@corel.com> wrote in message
news:420F9C6A.EDEA55B4@corel.com...
> "Suzanne R. Stone" wrote:
>
> It corrects some errors in the program. If you don't want
> these errors corrected then don't apply the patch. Personally,
> I would apply the patch, since it protects you against errors
> that you may encounter in future and costs you nothing to
> apply.
>
>
> You'd better take this one more seriously. This is not really
> anything to do with PSP. Instead, the gdiplus.dll file supplied
> by Microsoft is subject to exploitation by malware. According
> to Microsoft, the file cannot be exploited when it is used
> the way PSP is using it. However, on your computer you
> probably have many other programs from Microsoft that use
> gdiplus.dll in an exploitable way. Often Microsoft programs
> each install their own copy of this file, so that you may have
> multiple copies splattered over your system, each of which is
> vulnerable. Go to the Microsoft web site and search for
> gdiplus. You will find there is a program on the site that
> will scan your computer for the presence of vulnerable copies
> of gdiplus.dll. Or, you can simply do Start > Search > For
> Files or Folders in Windows to locate the files. Then you can
> replace them with a corrected version of gdiplus.dll from
> Microsoft. Jasc (now Corel) has provided this file as patch
> to PSP merely as a convenience to users. Patching PSP won't
> fix all the vulnerabilities on your system created by Microsoft
> since these depend on the Microsoft products you have installed.
> The same gdiplus.dll file may also be used by Adobe products,
> or products from other companies, and you'll have to take
> care of those too.

Is the gdiplus.dll corrected via running Windows Update and downloading the
critical updates or does this have to be done separately to Windows Update?
I seem to remember an update that mentioned jpeg exploits some time back and
always keep up to date with the Windows Update so am wondering if I have to
double check this now.

Rob

Kris Zaklika

2005-02-13, 11:18 pm

Canopus wrote:
[snip]

> Is the gdiplus.dll corrected via running Windows Update and downloading the
> critical updates or does this have to be done separately to Windows Update?
> I seem to remember an update that mentioned jpeg exploits some time back and
> always keep up to date with the Windows Update so am wondering if I have to
> double check this now.

I don't know how Microsoft does its thing. That's a question for
Microsoft. If the version number in Properties is 5.1.3102.1360
or higher I think you are covered but Microsoft is the definitive
source. They made the problem.

> Rob

secheese

2005-02-13, 11:19 pm

On Sun, 13 Feb 2005 12:38:30 -0500, Suzanne R. Stone
<perletwo@yahoo.com> wrote:

>The thing keeps launching the explorer update page wanting to give me
>the 9.01 patch. But I haven't been having any problems with 9.0. What
>is the upgrade supposed to do for me, and is it anything I really need
>to bother with?

Definitely install the patch.