Vulnerability found from leaked Windows source code - Tilted Forum Project Discussion Community

digby · 02-16-2004, 11:55 AM

Quote:

From Security Focus.com
The first new security vulnerability to emerge from last week's Microsoft source code leak crossed a security mailing list over the weekend, reigniting debate over the seriousness of the leak.

The vulnerability affects Internet Explorer 5 and various versions of Outlook Express. It was unearthed in code the two programs use to process bitmap image files, and affects the software on several versions of Windows, including 98, 2000 and XP. While some systems appear to be immune to the glitch, a proof-of-concept exploit that was posted to the Full Disclosure mailing list crashes Outlook Express 6 on Windows XP systems. Service Pack 1 appears to correct the vulnerability.

There is more in the link, but this seemed a decent summary.

Article Linkage

yakimushi · 02-16-2004, 03:04 PM

Thank God its only an Internet Explorer bug...

since I use Mozilla Firefox

Scorpion23 · 02-17-2004, 08:27 AM

Well, we can look forward to more of this in the future :/

Glad I picked now to switch to linux

cowudders14 · 02-17-2004, 10:37 AM

I run win 2k, and have had windows update pop up every day for the last week - I think that microsoft are working their *ss off!

Marburg · 02-17-2004, 11:00 AM

Heh.
Sounds like an interesting mix of piracy and open-source development.

Crack · 02-19-2004, 06:50 AM

Quote:

Originally posted by cowudders14
I run win 2k, and have had windows update pop up every day for the last week - I think that microsoft are working their *ss off!

I *wish* I could actually DL and use those updates... hmpf

losthellhound · 02-19-2004, 07:01 AM

My windows update is as well working overtime.. Im glad to see that they are working.. Id be more worried if I never got prompted for updates

Pragma · 02-19-2004, 11:17 PM

Your New Best Friend. Microsoft will mail to you - for free - the last six months worth of security patches. One of the best things they've done.

cowudders14 · 02-20-2004, 12:41 PM

Quote:

Originally posted by crackprogram
I *wish* I could actually DL and use those updates... hmpf

What's up? Running a non-too legal version of XP?

If you are running 2K or earlier you shouldn't have a problem, legal or not. Anything we can help with?

Crack · 02-23-2004, 02:51 PM

Quote:

Originally posted by cowudders14
What's up? Running a non-too legal version of XP? If you are running 2K or earlier you shouldn't have a problem, legal or not. Anything we can help with?

I am running XP Pro Corporate ED... I think I have already said too much...

cowudders14 · 02-24-2004, 12:32 PM

Quote:

Originally posted by crackprogram
I am running XP Pro Corporate ED... I think I have already said too much...

Ah...
'Nuff said!

IIRC you can still download the service packs manually?
Also, without pushing the rules of the TFP too much, there are ways round such problems as yours...

SiN · 02-24-2004, 12:38 PM

Quote:

Originally posted by cowudders14
Ah...
'Nuff said!

IIRC you can still download the service packs manually?

I haven't had a problem yet with whatever I'm not talking about with updating...and I've gone thru several reinstalls etc using perhaps nothing at all similar to the same OS.

How's that for helpful?

02-17-2004, 08:27 AM	#3 (permalink)
Scorpion23 Psycho	Well, we can look forward to more of this in the future :/ Glad I picked now to switch to linux __________________ "Empirically observed covariation is a necessary but not sufficient condition for causality" - Edward Tufte

02-17-2004, 10:37 AM	#4 (permalink)
cowudders14 Bringer of good Moos... Location: Midlands, UK	I run win 2k, and have had windows update pop up every day for the last week - I think that microsoft are working their *ss off! __________________ Moo! I'm mooey!

02-17-2004, 11:00 AM	#5 (permalink)
Marburg Crazy Location: Nova Scotia, Canada	Heh. Sounds like an interesting mix of piracy and open-source development. __________________ Ask a simple question... get pain.

02-19-2004, 07:01 AM	#7 (permalink)
losthellhound Thats MR. Muffin Face now Location: Everywhere work sends me	My windows update is as well working overtime.. Im glad to see that they are working.. Id be more worried if I never got prompted for updates __________________ "Life is possible only with illusions. And so, the question for the science of mental health must become an absolutely new and revolutionary one, yet one that reflects the essence of the human condition: On what level of illusion does one live?" -- Ernest Becker, The Denial of Death

02-19-2004, 11:17 PM	#8 (permalink)
Pragma I am Winter Born Location: Alexandria, VA	Your New Best Friend. Microsoft will mail to you - for free - the last six months worth of security patches. One of the best things they've done. __________________ Eat antimatter, Posleen-boy!

02-16-2004, 03:04 PM	#2 (permalink)
yakimushi Addict	Thank God its only an Internet Explorer bug... since I use Mozilla Firefox