| ActiveMac | Anonymous | Create a User | Reviews | News | Forums | Advertise |
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
ActiveMac |
|
Articles |
|
Forums |
|
Links |
|
News |
|
News Search |
|
Reviews |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
DVD |
|
ActiveHardware |
|
Xbox |
|
MaINTosh |
|
News Search |
|
|
|
|
|
|
|
ANet Chats |
|
The Lobby |
|
Special Events Room |
|
Developer's Lounge |
|
XBox Chat |
|
|
|
|
|
|
|
FAQ's |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows "Whistler" XP |
|
Windows CE |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
TopTechTips |
|
Registry Tips |
|
Windows 95/98 |
|
Windows 2000 |
|
Internet Explorer 4 |
|
Internet Explorer 5 |
|
Windows NT Tips |
|
Program Tips |
|
Easter Eggs |
|
Hardware |
|
DVD |
|
|
|
|
|
|
|
Latest Reviews |
|
Applications |
|
Microsoft Windows XP Professional |
|
Norton SystemWorks 2002 |
|
|
|
Hardware |
|
Intel Personal Audio Player 3000 |
|
Microsoft Wireless IntelliMouse Explorer |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Affiliates |
|
ANet Forums |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
|
Links |
|
Member Pages |
|
Site Search |
|
Awards |
|
|
|
|
|
|
|
Credits |
 |
Microsoft's borrowed code may pose risk | |
|
||
| Time: 00:49 EST/05:49 GMT | News Source: CNET | Posted By: Robert Stein | ||
|
As reported earlier this week by CNET News.com, a flaw in the zlib software-compression library could leave much of the systems based on the open-source operating system Linux open to attack. On Thursday, the researchers who discovered the flaw reported that at least nine of Microsoft's major applications--including Microsoft Office, Internet Explorer, DirectX, Messenger and Front Page--appear to incorporate borrowed code from the compression library and could be vulnerable to a similar attack. | ||
|
Write Comment
Return to News |
Displaying 1 through 25 of 158 Last | Next |
The time now is
12:49:47 AM
ET.
Any comment problems? E-mail us |
| #1 By 2332 (129.21.145.80) at 3/15/2002 5:38:35 AM |
|
#1 - Microsoft is not affeced by this flaw. There, I said it again.
People who assume that because zlib is used in various Windows applications that they too are vulnerable to a double free exploit are stupid. Why not learn exactly what the issue is before calling others stupid? |
| #2 By 135 (209.180.28.6) at 3/15/2002 9:34:13 AM |
|
Caezar - The Open Source community claims that it "guarantees" better code. Go read the various articles and such from Erik Raymond, starting with the Cathedral and the Bizarre.
But my question is why has this claim of better code not shown up in reality? There have been numerous exploits published of open source code, Redhat is still leading Microsoft 23 to 14 on security issues for 2002. |
| #3 By 135 (209.180.28.6) at 3/15/2002 9:39:23 AM |
|
[To people claiming Microsoft is vulnerable] - You are operating under an uninformed position without logic. There is no dispute that Microsoft has incorporated this code into their products. It would seem that this would be necessary to support the IETF Content-Encoding feature of HTTP 1.1 which specifies gzip compression.
The question is whether Microsoft's implementation has this vulnerability. As RMD pointed out, Windows is not affected in the same way by a double free(). So it doesn't appear to be the case. This article is a perfect example of FUD, as it serves no other purpose. It offers no factual evidence, it has no logic, no process behind the conclusions. It simply makes wild accusations for no other reason than to damage the Microsoft name. |
| #4 By 135 (209.180.28.6) at 3/15/2002 11:08:36 AM |
|
#15 - I simply go out and view the published list of security errata on Redhat's website, and then compare it to the list on Microsoft's security site.
#16 - Agreed. |
| #5 By 10 (12.221.49.44) at 3/15/2002 12:44:54 PM |
|
ohh yeah?! well my dad, can kick your dads ass! lol :P This post was edited by Tegument on Friday, March 15, 2002 at 17:49. |
| #6 By 135 (209.180.28.6) at 3/15/2002 2:42:16 PM |
|
#21 - Microsoft's security bulletins don't all relate to Windows, they relate to all products including SQL Server, Exchange, IIS, IE, etc.
It would be difficult for you to argue that particular point considering the bulk of the RedHat problems... telnet, openssh, sudo, ldap, groff, ncurses, etc. It's hard to argue that those packages aren't part of the OS. Others such as Apache, squid, uucp, pine, mutt, php, etc. are comparable to similar products shipped by Microsoft. Besides, Microsoft ships several orders of magnitude more software than Redhat, so in theory RedHat should have a statistical advantage just on sheer volume. Sorry, the apples to apples comparison stays, because it is proof that the claims of the Open Source community are based on emotions rather than factual evidence. |
| #7 By 135 (208.50.201.48) at 3/16/2002 1:49:26 PM |
|
Caezar - Sorry, nice way to weasel out of the argument but the fact remains that the Open Source community has been claiming for years that they produce higher quality software with fewer bugs and most certainly more secure and faster than anything created by Microsoft.
Never in any of their statements did they ever place conditions on their claims. Whether or not you think Eric Raymond is a spokesperson for Open Source is irrelevant, because he is frequently quoted as such. |
| #8 By 135 (208.50.201.48) at 3/16/2002 1:49:27 PM |
|
Caezar - Sorry, nice way to weasel out of the argument but the fact remains that the Open Source community has been claiming for years that they produce higher quality software with fewer bugs and most certainly more secure and faster than anything created by Microsoft.
Never in any of their statements did they ever place conditions on their claims. Whether or not you think Eric Raymond is a spokesperson for Open Source is irrelevant, because he is frequently quoted as such. |
|
Write Comment
Return to News |
Displaying 1 through 25 of 158 Last | Next |
The time now is
12:49:47 AM
ET.
Any comment problems? E-mail us |
