| ActiveMac | Anonymous | Create a User | Reviews | News | Forums | Advertise |
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
ActiveMac |
|
Articles |
|
Forums |
|
Links |
|
News |
|
News Search |
|
Reviews |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
DVD |
|
ActiveHardware |
|
Xbox |
|
MaINTosh |
|
News Search |
|
|
|
|
|
|
|
ANet Chats |
|
The Lobby |
|
Special Events Room |
|
Developer's Lounge |
|
XBox Chat |
|
|
|
|
|
|
|
FAQ's |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows "Whistler" XP |
|
Windows CE |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
TopTechTips |
|
Registry Tips |
|
Windows 95/98 |
|
Windows 2000 |
|
Internet Explorer 4 |
|
Internet Explorer 5 |
|
Windows NT Tips |
|
Program Tips |
|
Easter Eggs |
|
Hardware |
|
DVD |
|
|
|
|
|
|
|
Latest Reviews |
|
Applications |
|
Microsoft Windows XP Professional |
|
Norton SystemWorks 2002 |
|
|
|
Hardware |
|
Intel Personal Audio Player 3000 |
|
Microsoft Wireless IntelliMouse Explorer |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Affiliates |
|
ANet Forums |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
|
Links |
|
Member Pages |
|
Site Search |
|
Awards |
|
|
|
|
|
|
|
Credits |
 |
New Microsoft patch doesn't plug all holes | |
|
||
| Time: 08:53 EST/13:53 GMT | News Source: ComputerWorld | Posted By: Brian Kvalheim | ||
|
The Netherlands - Microsoft Corp.'s effort last week to fix a vulnerability in the Internet Explorer (IE) Web browser program and end the latest series of Internet attacks doesn't address another closely related and dangerous vulnerability, according to a security specialist. Dutch security expert Jelmer Kuperus published code on the Web that he says can be used to break into fully patched Windows systems using a slightly modified version of an attack called Download.Ject that Microsoft patched last week. The new attack targets a hole in a different Windows component than the one addressed by Microsoft's software patch on Friday. Using a similar attack, malicious hackers could break into patched Windows machines, Kuperus said. | ||
|
Write Comment
Return to News |
Displaying 1 through 25 of 316 Last | Next |
The time now is
11:32:37 PM
ET.
Any comment problems? E-mail us |
| #1 By 17996 (69.21.203.150) at 7/8/2004 11:42:46 AM |
|
Who writes these articles? Microsoft made it pretty clear last week that the "configuration change" didn't fix the underlying vulnerability. All it does is disable one ActiveX control. There are plenty more that could be used in a similar fashion.
"The new attack targets a hole in a different Windows component..." No, there is no hole in Shell.Application, just like there is no hole in ADODB.Stream. They are both behaving as designed; the problem was in the IE security model where someone could get access the My Computer security zone when they shouldn't. Nowhere does Microsoft call what they released last week a "patch." The term "configuration change" is accurate; all it does is add a single entry in the registry. |
| #2 By 17996 (66.191.120.31) at 7/8/2004 9:09:24 PM |
| How does this relate to MIME? |
| #3 By 135 (208.186.90.168) at 7/8/2004 10:02:43 PM |
|
Fascinating...
http://www.eweek.com/article2/0,1759,1621463,00.asp Apparently Mozilla has a major flaw which allows someone to execute arbitrary programs, it's a problem feature they've known about it since 2002 and refused to fix it until yesterday when someone released an exploit. What was it I was saying about moving from IE to Firefox making you safer? They all have bugs. The difference is, most people aren't going to hear about this one, and even Mozilla isn't talking about it on their main website. |
| #4 By 135 (208.186.90.168) at 7/9/2004 1:13:26 AM |
|
Halcyon - Wait a minute... Let me get this straight.
The problem is Windows fault because the Mozilla browser allows a remote site to execute code on the Windows machine? How come this problem doesn't exist in IE then? You're spinning so bad you're starting to sound like Scott McClellan. |
| #5 By 55917 (66.68.181.8) at 1/24/2007 3:02:52 PM |
| Great new site about tranny <a href="http://www.tranny-xxx.info/picsfree.html">pics free shemale</a>. Millions pics and movies <a href="http://www.tranny-xxx.info/extremeshem.html">extreme shemale sex</a>! |
|
Write Comment
Return to News |
Displaying 1 through 25 of 316 Last | Next |
The time now is
11:32:37 PM
ET.
Any comment problems? E-mail us |
