More M$ IE Patches

[uraloony]

Taken from http://zdnet.com.com/2100-1104-914836.html

IMHO, This is getting very old and is turning into a never ending cycle... Bwuahahahaa!

- uraloony

Microsoft stomps on new IE bugs

Microsoft urged Windows users to download a fix for Internet Explorer on Wednesday, following the company's announcement that six new flaws had been found in its Web browser.

The software giant called three of the flaws critical, but only one of them--a cross-site scripting error that affects only Internet Explorer 6.0--would allow an attacker or a worm to run a program on the victim's computer.

"Two of them are critical because of the possibility of information disclosure," said Christopher Budd, security program manager for the Microsoft security response team. "But they have steep requirements."


The first flaw occurs when the browser sends information within a link to another browser. Known as cross-site scripting, the technique can be abused by an attacker to get the other site to run a program specified by a malicious user. The flaw outlined by Microsoft on Wednesday would require that the attacker either host a Web page with the malicious link or send an HTML command via e-mail.

The two critical flaws that could compromise user information occur because of the way IE handles popular site templates, known as cascading style sheets, and the way it processes cookies. Both require the exact names of files on the target system to work, reducing the risk somewhat.

The other flaws and the patch can be found in the advisory.

Microsoft Windows XP users will automatically be prompted to install the update by the operating system, while users of other Windows variants will have to go to the Windows Update site.

The 2MB download includes all the old repairs for Internet Explorer 5.01, 5.5 and 6.0, plus patches for the latest six holes as well.

In addition to the patches, the software update additionally adds a new "feature," restricts the default settings of the "Restricted Sites" zone to block all frames.

[Dome]

MSIE might suck when it comes to security, but using linux and Mozilla for the past 3 months with NO windows contact what so ever has gotten me to realize, as far as browsing nice "flashy" websites, and creating your own masterpeice web desgin, IE is the best for this job, everything runs nice and smooth, including flash, java, and any other scripting language.......

in Mozilla i constantly have trouble with Flash (any flash page i go to freezes for a minute before it starts loading, and its not my connection cus i got DSL).... and also with Java, it is installed but keeps saying its not isntalled :\ ... oh well i can deal without the two, just saying that when it comes to just browsing the net and not worrying about security IE is definately good

[uraloony]

Dome > using Opera for *nix is great as far as compatibility with "flashy" stuff. Flash and Java work well on it in my experience. Opera also uses much less resources than Mozilla does. Check it out.

http://www.opera.com/

- ura