Microsoft releases 'critical' patches

TalkBack 22 of 52:

Next »

« Previous

• Thread View
• Flat View

Active X IS part of IE when it has to be "turned off" deliberately

I'm not sure whether we haven't got down to the level of nit picking now. My intention was to highlight the fact that IE is not a sepearte browser, it is a "set" of Windows OS functionality. Because of this, any IE flaw, whether that be an Active X thing or a IE Help thing, is not a flaw with a browser, it is a flaw with the OS - Windows - which the browser code has been heterogeneously mixed into. Your intention seems to be to deny that there is a problem, and to tout the flawed IE as a stand-alone application from Microsoft, which it isn't.

Nothing personal, you understand. Here's some interesting links about the very latest "IE patch".

http://www.theregister.co.uk/2005/01/10/ie_sp2_exploit/
Code which exploits a vulnerability in the HTML Help control of Internet Explorer has been released onto the net. Secunia has upgraded the vulnerability, uncovered in October 2004, to "extremely critical". Even users who have upgraded to Windows XP SP2 with all available patches are affected, the security reporting firm warns.

http://www.eweek.com/article2/0,1759,1750426,00.asp
Microsoft Patch Day Lacks an IE Fix By Ryan Naraine
January 11, 2005

RELATED LINKS
Hackers Tune In to Windows Media Player

Microsoft has released a fix for a critical hole in the HTML Help ActiveX control in Windows, but a well-known vulnerability in the Internet Explorer browser remains unpatched.

Just days after a researchers raised the threat level because an IE exploit was making the rounds, Microsoft rolled out a patch that lessens the danger. But officials admit that a comprehensive browser fix is not yet ready.

In the absence of a browser fix, Microsoft released MS05-001 to plug a "critical" code execution flaw in the HTML Help ActiveX control. The advisory warned that a successful exploit could allow an attacker to "take complete control of an affected system" to load, manipulate or delete data.

The HTML Help flaw is rated critical in Windows 2000, Windows XP Service (including Service Pack 2), Windows 98 and Windows NT. In Windows Server 2003, the severity rating is moderate.

Posted by: whisperycat   Posted on: 02/09/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now
• Virtualization: Architectural Considerations And Other Evaluation Criteria VMware Of the many approaches to x86 systems virtualization available in the ... Download Now
• Building the Virtualized Enterprise with VMware Iinfrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now