SillyDog701

[Mandrake]

Here we go again, this time it's a six year old flaw in IE that has re-surfaced . . .

A security flaw that had been fixed in older versions of Microsoft Internet Explorer has reappeared in the latest version of the browser software.

Security company Secunia issued a bulletin warning of the flaw in versions 5.01, 5.5 and 6.0 of Internet Explorer (IE). The problem had been fixed six years ago, when it appeared in versions 3.0 and 4.0 of the IE browser.

C|Net Article

I reccommend that everyone should use a browser like FireFox or Opera, and use a Firewall to block IE from accessing the Internet.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040629 Firefox/0.9.1

[DJGM]

Q: What has IE got in common with a Teflon based frying pan?

A: They're both non-stick!


Honestly though, using IE is akin to hiding from an axe wielding psycho, under a patchwork quilt!

UserAgent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040618

[DJGM]

Microsoft have issued a "config change" to deal with the "Download.Ject" exploit.

More information available on Microsoft's website here . . .

Basically, MS recommend that all Windows 2000/XP/2003 users apply
this patch a.s.a.p. The update can be obtained from Windows Update.

UserAgent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040618

[Antony]

Microsoft have issued a "config change" to deal with the "Download.Ject" exploit.

More information available on Microsoft's website here . . .

Basically, Microsoft has decided to plug the hole by turning off the ability for the ActiveX component to write to the operating system. (C|net News.com)

UserAgent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/125.2 (KHTML, like Gecko) Safari/125.8

[Don_HH2K]

If it makes Windows more secure, then go ahead. It's not a big loss to non-IE users.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)

[Wellander]

Microsoft have issued a "config change" to deal with the "Download.Ject" exploit.

More information available on Microsoft's website here . . .

Basically, Microsoft has decided to plug the hole by turning off the ability for the ActiveX component to write to the operating system. (C|net News.com)

Hi,
That sais good by to WIndows update.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a1) Gecko/20040520

[Don_HH2K]

Unless Microsoft develops some secret new technology that can only be accessed via command line for updates.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)

[Mandrake]

Specifically Microsoft's configuration change blocks the ability of the ADODB.screen ActiveX component to write to the PC's hard drive. It does not disable ActiveX entirely, and WindowsUpdate still works fine.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040616

[Antony]

According to SecurityFocus, this vulnerability has been known for more than 9 months, it affects IE 5.5 and later on Windows 95 and later.
however, the fix is only available for Windows 2000 and above
too late, too little

Reference: Microsoft Internet Explorer ADODB.Stream Object File Installation Weakness (SecurityFocus)

SillyDog701 recommends Mac to any user who is thinking about getting a new computer.

UserAgent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-us) AppleWebKit/125.2 (KHTML, like Gecko) Safari/125.8

[DJGM]

IMHO, for an organisation as big as Microsoft, to waste so much precious time,
pondering whether or not to issue a patch for a very serious security problem,
while a large number of computer users had their systems exploited via this
dangerous bug, is just disgraceful, and totally unacceptable.

Especially, when a comparatively tiny, independent non-profit software vendor
such as Mozilla, with far less revenue and far fewer resources at it's disposal
than Microsoft, gets their security bug fixed in less than a day and a half!

The Microsoft staffers involved with IE, should hang their heads in shame.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7) Gecko/20040616