GDI+ and RHINO

[Anonymous]

Hi,

The announcement at
http://www.graphisoft.com/support/archicad/archiguide/SecurityHole.html is good.
Since our company also distributes the file GDIPLUS.DLL with our software product Rhinoceros 3.0, I would like to know from the developers what version(s) of this file indicate the vulnerability?

Thank you,

Gordon Adams
Robert McNeel & Associates
gordon@mcneel.com

[Laszlo Vertesi]

On behalf of Miklós Misley:

Hi,
You can find all information at <http://www.microsoft.com/technet/security/bulletin/MS04-028.mspx>,
Especially:
"For the affected programs and components listed in this bulletin may need to update all versions of Gdiplus.dll that are earlier than version 5.1.3102.1355 or versions that are identified as vulnerable in the following FAQ’s. See the ‘If I use third-party applications that distribute the gdiplus.dll file, could I still be vulnerable even after I have installed all required Microsoft security updates?’ FAQ in this bulletin for more information about other applications that may have installed the Gdiplus.dll file."

I hope this helps
Miklos Misley
Director of Development, Graphisoft