New IE Patch . . .

Microsoft Windows operating system, and software for Windows platform, including QuickTime Player and iTunes for Windows. We also discuss topics about Microsoft Corp.

Moderators: Josh, Don_HH2K, Mandrake

New IE Patch . . .

Postby Mandrake » Wed 04 Jun, 2003 8:59 pm

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-020.asp

Fixes two vunerabilites.
UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 4.0)
User avatar
Mandrake
Moderator
Moderator
 
Posts: 4193
Joined: Fri 13 Sep, 2002 6:35 am

Postby DJGM » Fri 06 Jun, 2003 7:09 am

It only fixes 2 vulns? Why am I not surprised? At the last count, IE had 15
unpatched vulns. Oh well, yet another inadequate patch to add to the list!
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.0.2) Gecko/20030208 Netscape/7.02 (DJGM-i.net)
SeaMonkey = Swiss Army Knife: It's versatile, reliable, and contains useful tools.
Windows Internet Explorer = Old Swiss Cheese: Full of holes, and it stinks!
User avatar
DJGM
diamond member
diamond member
 
Posts: 4572
Joined: Wed 19 Jun, 2002 1:03 pm
Location: Manchester, England, UK

Postby Mandrake » Sun 08 Jun, 2003 4:49 am

It is rather pathetic - the only fix is to disable scripting, which i have done permanantly in IE.
UserAgent: Mozilla/5.0 (Windows; U; Win 9x 4.90; en-US; rv:1.5a) Gecko/20030601
Core i7 920 | ASUS P6T Deluxe v2 | 3TB+ HDD | 12GB Corsair DDR3 | Radeon 4890 Xfire | X-Fi Titanium Fatal1ty | Logitech Z-5500 Speakers | Dell 3008WFP | Seven RC1
User avatar
Mandrake
Moderator
Moderator
 
Posts: 4193
Joined: Fri 13 Sep, 2002 6:35 am

Postby DJGM » Wed 11 Jun, 2003 3:13 am

Incredibly, as of 9th June, the unpatched vuln count has now increased to 18.
The patches don't work. They take one step forward, then several steps back!
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.0.2) Gecko/20030208 Netscape/7.02 (DJGM-i.net)
SeaMonkey = Swiss Army Knife: It's versatile, reliable, and contains useful tools.
Windows Internet Explorer = Old Swiss Cheese: Full of holes, and it stinks!
User avatar
DJGM
diamond member
diamond member
 
Posts: 4572
Joined: Wed 19 Jun, 2002 1:03 pm
Location: Manchester, England, UK

Postby Mandrake » Wed 11 Jun, 2003 4:33 am

LOL! 18! They were at 10 before.. I was finally thinking Microsoft has gotten there stuff together and were making IE a half secure browser. So much for that . . . !
UserAgent: Mozilla/5.0 (Windows; U; Win 9x 4.90; en-US; rv:1.4) Gecko/20030609
Core i7 920 | ASUS P6T Deluxe v2 | 3TB+ HDD | 12GB Corsair DDR3 | Radeon 4890 Xfire | X-Fi Titanium Fatal1ty | Logitech Z-5500 Speakers | Dell 3008WFP | Seven RC1
User avatar
Mandrake
Moderator
Moderator
 
Posts: 4193
Joined: Fri 13 Sep, 2002 6:35 am

Postby DJGM » Wed 11 Jun, 2003 5:16 am

The last vuln count before last week's cumulative security patch according to Thor Larholm, was
at 15. Ideally, if this latest patch was made to fix 2 of these vulns, the number would have gone
down to 13 unpatched vulns. IMO, for any web browser, whether or not it's the current market
leader, and whether or not it's built inextricably into the operating system, that's still 13 vulns
too many! Now that this latest patch has proved totally ineffective, and the total number
of security craters has since increased, it's about time someone went on TV, and
exposed Microsoft for the cowboy operation that it is!

It's just as well Roy Rogers is no longer alive, he probably sue me for saying that!

I am considering getting in touch with the BBC's consumer affairs show, Watchdog. Amongst
complaints about poor public services, rogue traders, dodgy builders and the like, they often
feature technical consumer complaints against UK tech firms and telcos. It also wouldn't
be the first time Microsoft has been featured on Watchdog. Not long after Windows XP
was released, Watchdog received quite a number of complaints from people reporting
various problems with upgrading from earlier versions of Windows. IIRC, MSN UK was
also featured on Watchdog a while back, for a less than positive reason!
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.0.2) Gecko/20030208 Netscape/7.02 (DJGM-i.net)
SeaMonkey = Swiss Army Knife: It's versatile, reliable, and contains useful tools.
Windows Internet Explorer = Old Swiss Cheese: Full of holes, and it stinks!
User avatar
DJGM
diamond member
diamond member
 
Posts: 4572
Joined: Wed 19 Jun, 2002 1:03 pm
Location: Manchester, England, UK

Postby Mandrake » Wed 11 Jun, 2003 7:16 am

I'm in total agreement here .. 13 security vunerabilites is far too many! I was a little shocked when Opera 7 was released, and it had 5 vunerablilites, but Opera 7.01 was out in 5 days and corrected all of the vunerabilites! The only way Microsoft can rid themselves of these problems is to redesign the Active X and VBscript portions of Explorer, and make sure that they have NO holes. That way most of the vunerabilites wouldn't exsist. Of course, removing Active X and Vbscript would be even better.
UserAgent: Mozilla/5.0 (Windows; U; Win 9x 4.90; en-US; rv:1.4) Gecko/20030609
Core i7 920 | ASUS P6T Deluxe v2 | 3TB+ HDD | 12GB Corsair DDR3 | Radeon 4890 Xfire | X-Fi Titanium Fatal1ty | Logitech Z-5500 Speakers | Dell 3008WFP | Seven RC1
User avatar
Mandrake
Moderator
Moderator
 
Posts: 4193
Joined: Fri 13 Sep, 2002 6:35 am


Return to Windows (and Microsoft talk)

Who is online

Registered users: Google [Bot]