Posted by malebolgia on 16 September 2005 - 21:00 · 22 comments & 1542 views
A flaw has been discovered in Internet Explorer that could enable a remote attack on systems running Windows XP with Service Pack 2, eEye Digital Security has warned.

The flaw, which also affects systems running Windows XP, is found in the default installations of Microsoft's IE, according to an advisory released by the security company on Thursday. "The flaw is not wormable but allows for the remote execution (of code) with some level of end-user intervention," said Mike Puterbaugh, eEye's senior director of product marketing. The discovery of this IE flaw comes just over a month after Microsoft issued a cumulative patch addressing three vulnerabilities for IE.

News source: C|Net News.com


Windows Vista Starter Edition
  • Only sold in emerging markets
  • Very feature limited
  • Only 3 simultaneous applications running
Windows Vista Home Basic Edition
  • Equivalent to XP Home
  • Includes firewall, parental controls, Security Center, Movie Maker, Photo Library and more
  • For first time buyer / budget conscious
Windows Vista Home Premium Edition
  • Everything from Vista Home Basic
  • Adds DVD video authoring, HDTV support, DVD ripping support
  • Similar to current XP Media Center edition but with added features
Windows Vista Professional Edition
  • Aimed at the business consumer
  • Can join domain, has IIS web server
  • Akin to XP Pro
Windows Vista Small Business Edition
  • Designed for small businesses without IT staff
  • Backup and Shadow Copy support, Castle and server-join networking, and PC fax and scanning utility
  • Pre-paid access to the Windows Live! Small Business or Microsoft Office Live! subscription services
Windows Vista Enterprise Edition
  • Optimized for the enterprise
  • Ships with Virtual PC & the multi-language user interface (MUI)
  • Aimed at business decision makers, IT managers and decision makers, and information workers/general business users.
Windows Vista Ultimate Edition
  • "The best operating system ever offered for a personal PC"
  • Superset of both Vista Home Premium and Vista Pro Edition
  • Podcasting application, Game Performance Tweaker, possible free music/movie downloads



There are 22 additional comments
Advertisement
(5 replies) Quote this comment Reply to this comment #1 Posted by ripgut on 16 Sep 2005 - 21:14
another day another flaw......
Quote this comment #1.1 Posted by SquareSoft0 on 16 Sep 2005 - 23:35
Your comment is greatly appreciated and you are a valued member of this community.
Quote this comment #1.2 Posted by toadeater on 17 Sep 2005 - 00:18
I appreciated it too. Keep up the good work Ripgut. Anything that gets Microsoft to clean up its act is a valuable service to this community.
Quote this comment #1.3 Posted by Fark on 17 Sep 2005 - 10:38
you two are just waiting for an argument aren't you?
leave the guy alone, his comment wasn't open for flaming.
Quote this comment #1.4 Posted by GamblerFEXonlin on 17 Sep 2005 - 16:55
As they say it takes two to start a brawl so if you keep from posting any provocative or sarcastic replies there will never be no problems.

But you are right it wasn't a very useful post though.
Quote this comment #1.5 Posted by SquareSoft0 on 18 Sep 2005 - 05:18
Know what's funny Fark? Toadeater wasn't sarcastic, he really is that deluded, sadly.
Quote this comment Reply to this comment #2 Posted by Sqube on 16 Sep 2005 - 21:20
Aren't we getting to the point where reporting on Windows vulnerabilities is pointless?
Quote this comment Reply to this comment #3 Posted by exobot on 16 Sep 2005 - 21:32
We reached that point a long time ago, yet for some odd reason, they are still considered 'news'.
Quote this comment Reply to this comment #4 Posted by mad_onion on 16 Sep 2005 - 21:37
yeah is it really classified as news now, theres a lot more vulnerabiliets than there are things to exploit them. mabye just post news when there is an exploit? we get it software has vulnerabilties we dont need to be told everyday
(1 reply) Quote this comment Reply to this comment #5 Posted by Laser_iCE on 16 Sep 2005 - 22:37
Maybe Neowin should set up a section called Windows Patches.
Quote this comment #5.1 Posted by Colin-uk on 17 Sep 2005 - 16:30
like this you mean?

http://www.neowin.net/forum/index.php?showforum=72

Quote this comment Reply to this comment #6 Posted by J_R_G on 17 Sep 2005 - 03:16
What a lame me too post. "Everyone else bashes windows so I will too!!" Get some originality, or am I insulting your religion? Oh btw, didn't apple just have 40 or so security patches recently and firefox had a bunch too. This is getting so old.
(3 replies) Quote this comment Reply to this comment #7 Posted by Jeremy1 on 17 Sep 2005 - 06:34
with some level of end-user intervention

That right there is the key, and is what makes this not quite as big a deal as some would think.
Quote this comment #7.1 Posted by Echelon Left on 17 Sep 2005 - 13:43
So, don't use IE and switch to a different browser. Don't use IE? You're not affected by this latest flaw.
Quote this comment #7.2 Posted by Jeremy1 on 17 Sep 2005 - 18:38
Or, don't click "Install" when the box comes up asking you to install "YOU MUST CLICK INSTALL TO CONTINUE___________________LatestExploit.exe"
Quote this comment #7.3 Posted by Ateoto on 19 Sep 2005 - 16:28
The amount of people that would STILL click on that would amaze you Jeremy1.
(2 replies) Quote this comment Reply to this comment #8 Posted by shmengie on 17 Sep 2005 - 17:04
has anyone here ever actually been attacked by one of these "...vulnerability which could allow an attacker to take control of your system..."? i never have. and my less-knowledable friends and family never have. has anyone?
Quote this comment #8.1 Posted by amrinders87 on 18 Sep 2005 - 03:57
Thats what I am wondering. I mean, I used IE for a very long time and never had any problems.
Quote this comment #8.2 Posted by jeff_pony on 18 Sep 2005 - 09:48
I am guessing these are holes that viruses could use to start messing with your system, rather than some hacker sitting at the other end of your eithernet cable.
Quote this comment Reply to this comment #9 Posted by mr_demilord on 17 Sep 2005 - 18:35
<snip> This IS news.

Last edited by 12010 on 17 Sep 2005 - 19:52
Quote this comment Reply to this comment #10 Posted by justlooking on 17 Sep 2005 - 18:51
I used IE for 3 years before FF and I don't recall anyone taking control of my machine EVER even though there seem to be 2 million vulnerabilities. I'm getting sick of theoretical vulnerabilities and bashers gleefully reporting them.
Quote this comment Reply to this comment #11 Posted by King Rilian on 17 Sep 2005 - 19:50
Oops, wrong news article. Ignore this.
[1]

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.


Scroll to the Top
....
My Preferences
....
Communicating with server
Loading
Please Wait...
....
Loading
 X 
....