main
Report a problem

Unpatched Microsoft Flaw Leaves IE6 at Risk

Daniel Fleshbourne   on 04 August 2008 - 14:48 · 12 comments & 4922 views

Advertisement (Why?)
A vulnerability in as-yet unpatched Microsoft software poses a more severe threat to Internet Explorer 6 users than those on the next version of the browser, security vendor Symantec has warned. The flaw in Microsoft's Access database software came to light just as Microsoft issued its patches for the month on July 8. The problem is within the Snapshot Viewer ActiveX control, which allows someone to see an Access report without launching the software.

Attackers are actively exploiting the vulnerability by either creating Web pages or hacking existing Web pages to host the attack. The hackers lure people to the pages through spam or an instant message.

View: The full story @ PCWorld

Post a comment · Send to friend Comments · There are 12 additional comments
#1 +mad_onion on 04 Aug 2008 - 14:54
the actually title for this news should be "IE 6 leaves people at risk"
#2 GP007 on 04 Aug 2008 - 18:56
I understand many people still use IE6 for some unknown reason or they just don't update at all. But really MS should get as many people to update to IE7 as they can. Even if that means you have to push IE7 over AU etc.

It'll make things better for everyone security wise.
#3 +Chrono951 on 04 Aug 2008 - 20:41
There is no reason to stay on IE6 after 7 has been out for this long.
(1 reply) #4 ThaCrip on 04 Aug 2008 - 21:01
who actually still uses IE6 anymore?

cause it seems everyone either uses IE7 or Firefox nowadays for the most part.

but then again im sure there's people out there that dont get updates etc etc but it will always be like that cause the sad (but pretty much a fact) is most of the people who read neowin are more technical savy and probably are not using IE6 so this article probably is somewhat useless for them but all the people who this might help are probably not reading these forums etc etc lol
#4.1 Unplugged on 05 Aug 2008 - 08:25
Companies that have web based software or managemnet systems that break under IE7 and most likely break again under IE8. The cost of getting someone to rewrite the gui/javascript and css will cost thousands.
#5 mule on 04 Aug 2008 - 21:04
I hate to say that we at our org. still use 6 because of compatibility issues with some applications...damn.
#6 Tikitiki on 05 Aug 2008 - 00:38
Fix: Firefox or IE7
(2 replies) #7 Airlink on 05 Aug 2008 - 01:47
I stick with IE6 'casue I hate IE7's GUI, but I only use IE for Windows Update. For everything else, I surf it with Firefox.
#7.1 Shiranui on 05 Aug 2008 - 04:28
(Airlink said @ #7)
I stick with IE6 'casue I hate IE7's GUI, but I only use IE for Windows Update. For everything else, I surf it with Firefox.


If you only use IE6 for Windows Update, WTF does the look of the GUI have to do with it!?

#7.2 cork1958 on 05 Aug 2008 - 11:32
I still use IE6 because IE7 is to dang dumb to remember usernames at sites I visit after rebooting the computer.

Should add that I very seldom even use Windows anymore though as it is just plain dumb!
#8 C_Guy on 05 Aug 2008 - 15:39
If you are still using IE6 then the security issue is your own problem, not Microsoft's. Either update or stay at risk... but don't whine about it.
#9 +mrbester on 06 Aug 2008 - 11:22
Way to miss the point. The flaw isn't in IE6 but in an ActiveX control that, through IE6, can be the vector for an attack. I notice noone has blamed the control but instead jumps on the idiotic bandwagon of "you shouldn't be using IE6". Those that are usually have no say in it as they are corporate users whose back-end systems just don't work on IE7 and it is not cost effective (according to management) to rewrite the systems.

Even under IE7 the flaw remains. It's just that IE7 doesn't have the same kind of route through to ActiveX. So, should Microsoft issue a patch for IE6, which is not at fault here, or to fix the flaw in the control? If an exhaust rattled because there was a stone in it, would you remove the stone or wrap the exhaust in muffling?

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)