Microsoft Patches IE Flaw

By Eric Steil | Published July 2, 2004, 6:05 PM

On Friday Microsoft released a patch for the flaws exploited by the recent Download.Ject attack. The patch is labeled a configuration change, and prevents an ActiveX component from writing to the system. While the flaws have been known for over 9 months, only recently have they been exploited. The patch is available through Windows Update. More information can be found on Microsoft's site.

Comments

View comments by with a score of at least

It appears that this workaround (not a true patch anyway) doesn't work afterall. Read more about it here:
http://weblogs.mozillazi...sa/archives/005909.html

Be smart and dump IE. Use a real modern and secure browser like Firefox, Mozilla or Opera!

Score: 0

|

Could someone (knowledgeable preferably) explain in a sane, calm way, the different alternatives for browsers available and the major differences between them?

thanks!

Score: 0

|

The best thing you can do is to try Firefox, Mozilla and Opera out and then you will see what the difference is and which one works best for you.

Score: 0

|

Interestingly I applied this patch on a W2K SP4+ PC and the monitor kept shutting down after 20mins even though in power management it was set to never for monitor turn off. Maybe a coincidence? I don't know, as this was the only system change. Reboot didn't stop this happening. But a brief powerdown seems to have fixed this behavior.

Score: 0

|

Anyone who knows and/or understands IE's problems in general and this one in particular has long ago switched to Mozilla or Opera. Everyone else keeps blindly using IE and walking into traps. Virtually everyone I know gets their news from the television and have little knowledge or interest in this stuff - when's the last time Channel 3 news pointed this stuff out? They're not even aware that IE is a browser rather than "the Internet" or that there are alternatives... until their computer gets fried to the point where they can't help but realize something's wrong and someone takes the time to show them. I just hope the people who don't know any better have automatic updates turned on...

Score: 0

|

According to SecurityFocus (http://www.securityfocus.com/bid/10514), this bug affects IE 5.5 and later on Windows 95 and later. So why is the patch only for Windows 2000 and above? Microsoft STILL doesn't get it.

It's a simple registry edit to disable ADODB.Stream on those OSes the patch doesn't support.

Score: 0

|

*Smacks head*
That is pretty bad.

Score: 0

|

They _did_ release an update for 9x/ME. Refer to the MS Knowledge Base article.

Score: 0

|

What about folks who *need* ADOB.Stream? They're up the creek?

Score: 0

|

That's the problem with this so-called fix/update/patch. It's a bandaid and nothing more.

Score: 0

|

About time :D

Score: 0

|

PDC 2009: What have we learned this week?

There was the freebie that no one will forget, the heebie-jeebies courtesy of Scott Guthrie, and a teensy bit clearer picture of how this cloud thingie should work.

Live report: Will Google Chrome OS change Linux?

The mysteries of just what Chrome OS is, and how much of an operating system it truly is, may be resolved today.

PDC 2009: Microsoft cares about Web browser performance

The effort to give users of the world's dominant Web browser the impression of quality, is a personal one for the man who leads that battle.

Nokia re-affirms its commitment to Symbian, sort of

Maemo won't necessarily be replacing Symbian in the Nokia N-Series, but that's definitely a place where it will be found.

E-book readers will be in short supply this holiday season

E-readers are hot this year, and a lot of compelling new products have been released, but are there enough electrophoretic displays to go around?

Sony looks to finally open a single storefront for downloads

Sony has had many different download portals for movies, music, e-books, and games, and now it's looking to make a single shop for all of it.

Tuning out the tablet: Time to give the endless speculation a rest

Wide Angle Zoom: Wishing and hoping and thinking and praying....won't put an iTablet on the market.

Five improvements for IT managers in 2010

If businesses are to improve their efficiency for next year, they need to stop and reassess the basic tenets of their job.

AOL's spinoff from Time Warner to shed 2,500 jobs

As AOL moves toward become an independent company again, it will cut nearly a third of its workforce.

Gartner: SMS-based money transfer will be bigger than mobile browsing, search

Gartner issues its predictions for the 10 things our phones will be doing in 2012.

Don't forget to upgrade to Firefox 3.6 beta 3 today

Mozilla has released the latest beta its Firefox 3.6 browser software, just over one week after beta 2.