| ActiveMac | Anonymous | Create a User | Reviews | News | Forums | Advertise |
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
ActiveMac |
|
Articles |
|
Forums |
|
Links |
|
News |
|
News Search |
|
Reviews |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
DVD |
|
ActiveHardware |
|
Xbox |
|
MaINTosh |
|
News Search |
|
|
|
|
|
|
|
ANet Chats |
|
The Lobby |
|
Special Events Room |
|
Developer's Lounge |
|
XBox Chat |
|
|
|
|
|
|
|
FAQ's |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows "Whistler" XP |
|
Windows CE |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
TopTechTips |
|
Registry Tips |
|
Windows 95/98 |
|
Windows 2000 |
|
Internet Explorer 4 |
|
Internet Explorer 5 |
|
Windows NT Tips |
|
Program Tips |
|
Easter Eggs |
|
Hardware |
|
DVD |
|
|
|
|
|
|
|
Latest Reviews |
|
Applications |
|
Microsoft Windows XP Professional |
|
Norton SystemWorks 2002 |
|
|
|
Hardware |
|
Intel Personal Audio Player 3000 |
|
Microsoft Wireless IntelliMouse Explorer |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Affiliates |
|
ANet Forums |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
|
Links |
|
Member Pages |
|
Site Search |
|
Awards |
|
|
|
|
|
|
|
Credits |
 |
Microsoft Reveals Two New Bugs | |
|
||
| Time: 18:45 EST/23:45 GMT | News Source: InformationWeek | Posted By: Chris Hedlund | ||
|
Microsoft owns up to two new security problems, one of which is yet another issue with Windows Metafile (WMF) images. On the same day Microsoft assured consumers it could protect their PCs, it owned up to two new security problems, one of which was yet another issue with Windows Metafile (WMF) images, the flaw that sent users scrambling in late December and early January. On Tuesday, Microsoft released a pair of security advisories in response to an out-in-the-wild tool that can escalate attackers' privileges, and a new WMF hole in older versions of Internet Explorer. | ||
|
Write Comment
Return to News |
Displaying 1 through 25 of 147 Last | Next |
The time now is
4:12:09 PM
ET.
Any comment problems? E-mail us |
| #1 By 32132 (64.180.219.241) at 2/10/2006 1:26:05 AM |
|
"affects only IE 5.01 and IE 5.5, two aged versions that by one Web metrics vendor's estimate, accounted for just 2.3 percent of all browsers used in January."
Vs. an exploit for Firefox 1.5 "An exploit that takes advantage of a recently-patched bug in Mozilla Corp.'s Firefox browser went public Tuesday, causing security vendors to urge users to update immediately. Code was posted to the Metasploit Project site, which rolls out exploit modules for its Framework tool on a regular basis, that could let hackers corrupt Firefox's memory, then run their own programs to hijack or damage the computer. Metasploit published modules that work against the Linux and Mac editions of Firefox 1.5. The bug, which was one of 8 fixed in the Firefox 1.5.0.1 security update last week, was labeled "Critical" by Mozilla. Symantec on Wednesday confirmed that the exploit works on Linux systems," http://www.informationweek.com/news/showArticle.jhtml?articleID=179101966 This post was edited by NotParker on Friday, February 10, 2006 at 01:26. |
| #2 By 15406 (216.191.227.68) at 2/10/2006 2:21:32 PM |
| #1: I agree with you. The open source community is much better at fixing bugs than MS. The Firefox fix was available before the exploit was publicly released, while the MS fix is still being waited on while the exploit makes its rounds. |
| #3 By 32132 (142.32.208.238) at 2/10/2006 2:46:34 PM |
|
#2 Actually, the bug was fixed for IE 6. A patch was released weeks ago.
My understanding is that Firefox users have to download a new version and install it because 1.5 was NEVER fixed, just replaced. I do appreciate that now that Firefox is compromising Linux and Mac's and Windows, SANS will give them a special honor. Firefox fanboys are now the biggest hypocrites about security. This post was edited by NotParker on Friday, February 10, 2006 at 14:48. |
| #4 By 15406 (216.191.227.68) at 2/10/2006 3:47:00 PM |
| #3: Anyone running 1.5 got patched by the auto-update mechanism. I didn't have to manually download and install anything. Then there's the bug that MS will patch this Tuesday after being on the MS we'll-get-around-to-it list for 9 months. Yep, security is MS top priority, right after profit, marketing and lock-in. |
| #5 By 32132 (142.32.208.238) at 2/10/2006 5:29:40 PM |
|
"Anyone running 1.5 got patched by the auto-update mechanism"
Finally fixed it! Considering that there were 8 security holes since 1.5 ( a couple of week ago right?) they need a good patching mechanism! |
| #6 By 12071 (203.214.147.215) at 2/11/2006 3:07:46 AM |
| #4 Don't be cruel, security is the #1 priority for Microsoft... for the PR team - they're just yet to inform the rest of the company about it. |
| #7 By 32132 (64.180.219.241) at 2/11/2006 4:53:10 PM |
|
“I’m not surprised [WMF] exploited 16-bit code,” said Robert Helm, an analyst at Directions on Microsoft. “If you look over the security vulnerabilities, more and more are affecting versions of Windows prior to Windows XP SP2 and Windows Server 2003, and that’s a good sign that the beating Windows took in prior years is slowing and that XP SP2 has affected the behavior [of hackers].”
It also doesn't surprise me that Firefox served up 8 security vulnerabilities in a release that is only a few weeks old. The hackers who are having trouble with XP SP2 and Windows 2003 are turning to Firefox and other OSS applications which traditionally have a very poor security record. |
| #8 By 37 (67.37.29.142) at 2/13/2006 6:37:01 AM |
|
"turning to Firefox and other OSS applications which traditionally have a very poor security record."
That has to sting! |
|
Write Comment
Return to News |
Displaying 1 through 25 of 147 Last | Next |
The time now is
4:12:09 PM
ET.
Any comment problems? E-mail us |
