9/30: Trojan.Duckey Exploits JPEG Flaw
September 30, 2004

Trojan.Ducky is a downloader Trojan that exploits the Microsoft GDI+ Library JPEG Segment Length Integer Underflow vulnerability (as described in the Microsoft Security Bulletin MS04-028).

Technical details are at Symantec page.