Microsoft Patches IE Flaw

By Eric Steil | Published July 2, 2004, 6:05 PM

On Friday Microsoft released a patch for the flaws exploited by the recent Download.Ject attack. The patch is labeled a configuration change, and prevents an ActiveX component from writing to the system. While the flaws have been known for over 9 months, only recently have they been exploited. The patch is available through Windows Update. More information can be found on Microsoft's site.

Comments

View comments by with a score of at least

It appears that this workaround (not a true patch anyway) doesn't work afterall. Read more about it here:
http://weblogs.mozillazi...sa/archives/005909.html

Be smart and dump IE. Use a real modern and secure browser like Firefox, Mozilla or Opera!

Score: 0

|

Could someone (knowledgeable preferably) explain in a sane, calm way, the different alternatives for browsers available and the major differences between them?

thanks!

Score: 0

|

The best thing you can do is to try Firefox, Mozilla and Opera out and then you will see what the difference is and which one works best for you.

Score: 0

|

Interestingly I applied this patch on a W2K SP4+ PC and the monitor kept shutting down after 20mins even though in power management it was set to never for monitor turn off. Maybe a coincidence? I don't know, as this was the only system change. Reboot didn't stop this happening. But a brief powerdown seems to have fixed this behavior.

Score: 0

|

Anyone who knows and/or understands IE's problems in general and this one in particular has long ago switched to Mozilla or Opera. Everyone else keeps blindly using IE and walking into traps. Virtually everyone I know gets their news from the television and have little knowledge or interest in this stuff - when's the last time Channel 3 news pointed this stuff out? They're not even aware that IE is a browser rather than "the Internet" or that there are alternatives... until their computer gets fried to the point where they can't help but realize something's wrong and someone takes the time to show them. I just hope the people who don't know any better have automatic updates turned on...

Score: 0

|

According to SecurityFocus (http://www.securityfocus.com/bid/10514), this bug affects IE 5.5 and later on Windows 95 and later. So why is the patch only for Windows 2000 and above? Microsoft STILL doesn't get it.

It's a simple registry edit to disable ADODB.Stream on those OSes the patch doesn't support.

Score: 0

|

*Smacks head*
That is pretty bad.

Score: 0

|

They _did_ release an update for 9x/ME. Refer to the MS Knowledge Base article.

Score: 0

|

What about folks who *need* ADOB.Stream? They're up the creek?

Score: 0

|

That's the problem with this so-called fix/update/patch. It's a bandaid and nothing more.

Score: 0

|

About time :D

Score: 0

|

'A pivot from war to peace:' The AMD + Intel armistice, in their own words

An extraordinary day in technology history is recognized by two long-time rivals that mutually decided it's futile to fight anyplace else except the marketplace.

PS3, Xbox to soon get Twitter, Facebook integration

Both Microsoft's Xbox 360 and Sony's PlayStation 3 will integrate with Facebook in the near future.

Windows Marketplace for Mobile now available in browser, iTunes' App Store still not

You can now check out what Windows Marketplace for Mobile has to offer without a Windows Phone.

Microsoft damage control after marketer claims Win7 inspired by Mac

Have you ever said anything you wish you could take back? Ever? No? Not even once? Well then, you won't sympathize with a mid-level Microsoft manager today.

Blockbuster's way down, but poised for a comeback

Though it took a serious beating in 2009, Blockbuster CEO Jim Keyes says the company can turn it around.

iTunes Preview doesn't go far enough to create Web-based option for store

Apple has rolled out iTunes Preview, a Web interface for browsing iTunes.

PDC 2009 Preview: The move to Office 2010 and Visual Studio 2010

The major focus of Microsoft's conference next week will likely be explaining why two pillars of its software sales strategy deserve to remain where they are.

Dell's first smartphone aids the Android onslaught

Longtime PC leader Dell has finally announced its Android-based smarphone.

After the Intel + AMD armistice: Do we really want a level playing field?

Scott Fulton On Point: One by one, the reasons for us to continue suspending the course toward open and fair competition in IT, are dropping like flies.

FLO TV launches pocketable, smartphone-like TVs

Qualcomm's FLO TV Personal Television made by HTC launches in retail today.

Google acquires Gizmo5, builds IP telephony portfolio

Google Voice today confirmed rumors that it would acquire IP telephony company Gizmo5