Yet another serious IE security flaw, Download Ject

page 1, 2, 3  next
You are here:  SillyDog701 > Message Centre > Windows (and Microsoft talk) > [sdt=6154]
SillyDog701 Forums
Author Message
DJGM
diamond member


Joined: 19 Jun 2002
Posts: 4338
Location: Manchester, England, UK
25 Jun, 2004 2:34 pm Yet another serious IE security flaw, Download Ject [sdp=36340]  

BBC News Online wrote:

Web browser flaw prompts warning

Users are being told to avoid using IE until Microsoft patches a serious security hole in it.

The loophole is being exploited to open a backdoor on a PC that could let criminals take control of a machine.

The threat of infection is so high because the code created to exploit
the loophole has somehow been placed on many popular websites.

Experts say the list of compromised sites involves banks,
auction and price comparison firms and is growing fast.

Serious problem

The net watchdog, the US Computer Emergency Reponse Center, and the net security monitor,
the Internet Storm Center, have both issued warnings about the combined threat of
compromised websites and browser loophole.

Cert said: "Users should be aware that any website, even those that may be trusted by the
user, may be affected by this activity and thus contain potentially malicious code."


Ho-hum . . . yet another serious IE security bug that some complacent fools will ignore!

If you're using IE and have any common sense, you should not dismiss this problem . . .


More info . . .

BBC News Online - http://news.bbc.co.uk/1/hi/technology/3840101.stm

Microsoft - http://www.microsoft.com/security/incident/download_ject.mspx

Edit, added "Download.Ject" to the subject - Admin 5.7.2004
Unsticky by Admin 11.8.2004

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7) Gecko/20040614 Firefox/0.9

Mozilla = Swiss Army Knife: It's versatile, reliable, and contains useful tools.
Microsoft Internet Explorer = Old Swiss Cheese: Full of holes, and it stinks!
Back to top profile website
Wellander
SUSPENDED


Joined: 21 Oct 2002
Posts: 2576
25 Jun, 2004 2:41 pm [sdp=36344]  

Important Customers who have deployed Windows XP Service Pack 2 RC2 are not at risk. Good for those.

How does the extended support for Windows 98, Windows 98 Second Edition, and Windows Millennium Edition affect the release of security updates for these operating systems?
Microsoft will only release security updates for critical security issues. Non-critical security issues are not offered during this support period. For more information about the Microsoft Support Lifecycle policies for these operating systems, visit the following Web site.

For more information about severity ratings, visit the following Web site.

Are Windows 98, Windows 98 Second Edition, or Windows Millennium Edition critically affected by any of the vulnerabilities that are addressed in this security bulletin?
No. None of these vulnerabilities are critical in severity on Windows 98, on Windows 98 Second Edition, or on Windows Millennium Edition.
Back to top profile
Wellander
SUSPENDED


Joined: 21 Oct 2002
Posts: 2576
25 Jun, 2004 3:33 pm [sdp=36351]  

Hi,
Also Internet Explorer is a very good web browser.
Except for 6.

Hope sillydog does not have this.
Back to top profile
Phoenix21692
silver member


Joined: 23 Jun 2003
Posts: 234
Location: US
25 Jun, 2004 3:44 pm [sdp=36358]  

Heh, Internet Explorer 6 was the worst in my experience since it forced me to reformat my old computer in January 2003. I end up losing almost 2 years of stuff at the time. Heck, I'd say that none of them are any good at all. However, Internet Explorer 3.02 or lower are okay, as these don't integrate into the system and cause reckless problems. The only time I use Internet Explorer is at the library, since they don't have other options.

UserAgent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040616

Last edited by Phoenix21692 on 25 Jun, 2004 4:22 pm; edited once(1)
Back to top profile
DJGM
diamond member


Joined: 19 Jun 2002
Posts: 4338
Location: Manchester, England, UK
25 Jun, 2004 4:21 pm [sdp=36372]  

Wellander wrote:

Hi,
Also Internet Explorer is a very good web browser.
Except for 6.

Hope sillydog does not have this.


Which is your opinion, and you're welcome to that.

The fact is that Internet Explorer is a dangerously insecure, and technically obsolete OS component
that falsely masquerades as a web browser. But, if you're prepared to ignore the technical experts
that say IE is dangeous software, that entirely up to you. Who am I to stop such complacency?

IMO, the only half decent version of IE is v5.x for Mac. And MS cancelled that last year . . .

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7) Gecko/20040614 Firefox/0.9

Mozilla = Swiss Army Knife: It's versatile, reliable, and contains useful tools.
Microsoft Internet Explorer = Old Swiss Cheese: Full of holes, and it stinks!
Back to top profile website
Wellander
SUSPENDED


Joined: 21 Oct 2002
Posts: 2576
25 Jun, 2004 4:24 pm [sdp=36376]  

Hi,
It is good for browsing files on your HDD.
Back to top profile
djv1
diamond member

Dustin
Joined: 14 Jan 2004
Posts: 1156
25 Jun, 2004 4:27 pm [sdp=36379]  

Yes, but not good for much else

Elves21692 wrote:
However, Internet Explorer 3.02 or lower are okay


you can't open up to many sites with those anymore.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.6) Gecko/20040206 Firefox/0.8

Dustin
Back to top profile
Wellander
SUSPENDED


Joined: 21 Oct 2002
Posts: 2576
25 Jun, 2004 4:29 pm [sdp=36380]  

3.03 and lower.
But they have thire own set of issues.
Back to top profile
Phoenix21692
silver member


Joined: 23 Jun 2003
Posts: 234
Location: US
25 Jun, 2004 4:39 pm [sdp=36392]  

They're not that good nowadays. I know what you mean. What makes them okay is that don't integrate into the OS as much. But then again, there isn't much use for IE 3.03 and lower.

UserAgent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040616
Back to top profile
Mandrake
Moderator


Joined: 13 Sep 2002
Posts: 3641
Location: Australia
25 Jun, 2004 5:57 pm [sdp=36425]  

Windows 95/98/ME with IE installed are most certainly effected by this issue. Microsoft won't release a patch for 95, and may or may not release a patch for Windows 98 and ME.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040616

Antec 1200 Case | Core 2 Duo E8200 | Gigabyte X48-DS4 | 1.91TB HDD | 4GB G-Skill/Kingston DDR2-800 | HIS Radeon 4870 Xfire | Zalman 850W PSU | Auzen X-Fi Prelude | Logitech Z-2300 Speakers | Sony 1080P 40" HDTV | MS Natural MultiMedia Keyboard | MS Habu Gaming Mouse
Back to top profile
Don_HH2K
Moderator


Joined: 09 May 2004
Posts: 4538
25 Jun, 2004 6:02 pm [sdp=36431]  

I'm not defending Microsoft, but every browser does have its holes. The ones in IE are jut exploited more because it has 80-something percent of the browser market right now. I'm sure that Safari, Opera, Netscape, Konqueror, and even those such as Lynx have security holes of their own, although not as many. As for obsolete, how long has it been since IE had a large redesign, and isn't it still a 4th-gen browser?

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
Back to top profile website
Wellander
SUSPENDED


Joined: 21 Oct 2002
Posts: 2576
25 Jun, 2004 6:03 pm [sdp=36434]  

Hi,
The last Major update was 4.0 Back in 1997 I believe.
Back to top profile
Don_HH2K
Moderator


Joined: 09 May 2004
Posts: 4538
25 Jun, 2004 6:08 pm [sdp=36443]  

Wellander wrote:
Hi,
The last Major update was 4.0 Back in 1997 I believe.


Wow.. Even longer than Netscape's one year and one day!

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
Back to top profile website
Wellander
SUSPENDED


Joined: 21 Oct 2002
Posts: 2576
25 Jun, 2004 6:10 pm [sdp=36445]  

Hi,
Ie 4.01 and 5.xx were minor upgrades.
Back to top profile
Don_HH2K
Moderator


Joined: 09 May 2004
Posts: 4538
25 Jun, 2004 6:16 pm [sdp=36449]  

I found that when I switched from 98 gold to 98SE and used IE for awhile (when browsing in Windows Explorer for files and forgetting to switch to Netscape). It seemed to be no different than the transition between Netscapes 1.0 thru 2.0, there weren't a whole lot of changes except for new features, everything rendered the same.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
Back to top profile website
Display posts from previous:   
Reply to topic    Forum Index > Windows (and Microsoft talk) All times are CST (GMT -6)
page 1 of 3 page 1, 2, 3  next
To add your questions, comments, and for more features and more, please join SillyDog701 Message Centre. It's free! This is SillyDog 701 Message Centre (SD701 Forums).
Harley-Davidson sportster parts - shop online for harley davidson parts & accessories at 20% discount.
Buy Text Links - buy and/or sell text link ads.

Michael Jackson Thriller 25 You can support SillyDog701 when you buy your favourite music, TV shows, movies from iTunes Store. You can even rent movies from iTunes Store.
Need online space for sharing and syncing? .Mac now to up 10GB storage.

*Search | FAQ | Rules and Policies | MozInfo701 - Mozilla Information Centre | SD701 Open Directory | Message Board Map | download Netscape