Results 1 to 3 of 3

Thread: No patch yet? FIX it!

  1. July 7th, 2009, 08:36 AM #1
    Cider
    Cider is offline
    Only african to own a PC! Cider's Avatar
    Join Date
    Jun 2003
    Location
    Israel
    Posts
    1,683

    No patch yet? FIX it!

    Hey guys,

    Read an article about some code in IE being exploited and no patch.

    Here is one of these "Fix it " things.

    http://support.microsoft.com/kb/972890#FixItForMe

    Patch!

    Original Article

    http://www.news24.com/Content/SciTec..._security_hole
    The world is a dangerous place to live; not because of the people who are evil, but because of the people who don't do anything about it.
    Albert Einstein
    Reply With Quote Reply With Quote
  2. July 7th, 2009, 12:01 PM #2
    nihil
    nihil is offline
    Senior Member nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,188
    Thanks for the QuickFix links Cider,

    This is strange as MS say:

    Our investigation has shown that there are no by-design uses for this ActiveX Control in Internet Explorer which includes all of the Class Identifiers within the msvidctl.dll that hosts this ActiveX Control.

    So why is it there then?

    I think that it is rather scary that malware authors could actually find and create a use for something that MS don't even know what to do with

    I also noticed that Windows 2000 doesn't have a problem with it so I am guessing that it isn't used by IE6
    Reply With Quote Reply With Quote
  3. July 7th, 2009, 03:49 PM #3
    ByTeWrangler
    ByTeWrangler is offline
    StOrM™
    Join Date
    Aug 2004
    Posts
    1,003
    We can merge my thread and this I guess..

    This is use of Directshow vulnerability

    http://antionline.com/showthread.php?t=278323

    Secunia is having more information about it now :

    http://secunia.com/advisories/35683/


    Plus we can put this as an *HEADS UP* .. This is critical and is being actively exploited..
    Parth Maniar,
    CISSP, CISM, CISA, SSCP

    *Thank you GOD*

    Greater the Difficulty, SWEETER the Victory.

    Believe in yourself.
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Similar Threads

  1. July Microsoft Patch Disclosure
    By CyberB0b in forum Microsoft Security Discussions
    Replies: 0
    Last Post: July 15th, 2008, 01:48 AM
  2. Newest Microsoft IE patch flawed!
    By s0nIc in forum Microsoft Security Discussions
    Replies: 7
    Last Post: May 21st, 2002, 01:27 PM
  3. IIS Patch announcement
    By souleman in forum Microsoft Security Discussions
    Replies: 5
    Last Post: April 11th, 2002, 11:39 PM
  4. MS security patch fails on local files
    By gstudios in forum Microsoft Security Discussions
    Replies: 1
    Last Post: April 3rd, 2002, 10:26 PM
  5. Botched Browser Security Patch
    By RogueSpy in forum AntiOnline's General Chit Chat
    Replies: 5
    Last Post: February 11th, 2002, 08:24 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules