Trojan horse rides on unpatched IE flaw

TalkBack 31 of 59:

Next »

« Previous

• Thread View
• Flat View

Calling non-zealot, shadetree, Loverock et al

Where are the usual patronising lectures from the Microsoft party faithful about "dumb users" who get infected and exploited because they haven't kept their anti-virus / Microsoft patchwork quilt up to date?

The fact is, it has ALWAYS been the case that Microsoft do not bother patching all the exploitable flaws they know about. When enough users have had their systems hosed by a new exploit to raise the fear of a little negaive PR, that's when Microsoft might start thinking about a patch.

The fact is also that nobody who uses Windows is safe from an exploit, no matter how many additional cost they have aded to their Windows TCO by 3rd party anti-virus, 3rd party spyware killers, 3rd party fire walls. You can spend until you're blue in the face, Windows is insecure by design and there are an untold number of un-patched flaws that Microsoft DON'T know about, to add to the list of ones they do.

A little less of the holier-than-thou patronising from the Microsoft fan boys is in order now, I feel. Because, once again, Apple MAc and Linux users are not afected.

Enjoy your Microsoft experience, and don't forgetto pay your subscriptions!



http://blogs.zdnet.com/Ou/index.php?p=135

Here is a list of unpatched Windows XP issues:

Microsoft Windows UPnP GetDeviceList Denial of Service
Microsoft Windows XP Wireless Zero Configuration Wireless Profile Disclosure (Microsoft promises a fix for Windows Vista, but what about Windows XP SP2? That's still the most up to date environment the last time I checked.)
Windows Registry Editor Utility String Concealment Weakness
Microsoft Windows Unspecified USB Device Driver Vulnerability
Windows Remote Desktop Protocol Private Key Disclosure
Microsoft Windows Image Rendering Denial of Service Vulnerability
Microsoft Jet Database Engine Database File Parsing Vulnerability
Windows Registry Key Locking Denial of Service
Windows XP Internet Connection Firewall Bypass Weakness
Windows Packet Fragmentation Handling Denial of Service Vulnerability
Microsoft Java Virtual Machine Cross-Site Communication Vulnerability
Microsoft Windows "desktop.ini" Arbitrary File Execution Vulnerability
Windows Metafile Handling Vulnerability
Windows XP Malicious Folder Automatic Code Execution Vulnerability
Microsoft HTML Help Control Privilege Escalation Vulnerability
Windows RPC Race Condition Denial of Service Vulnerability
Microsoft Windows Unauthorised Thread Termination
Microsoft Windows TCP Packet Information Disclosure
Windows NTFS File System Information Disclosure
XP PostMessage Password Disclosure
Microsoft Windows Terminal Server Denial of service
Microsoft Windows crashes on invalid font file
Microsoft Windows Certificate Chain vulnerability
Windows XP expose registered wireless access points
Windows XP admin downgrade problem
NT will let user execute any 16bit application
XP Remote Desktop DoS

Posted by: whisperycat   Posted on: 12/01/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Virtualization: Architectural Considerations And Other Evaluation Criteria VMware Of the many approaches to x86 systems virtualization available in the ... Download Now
• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now
• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now