Microsoft Patches IE Flaw

By Eric Steil | Published July 2, 2004, 6:05 PM

On Friday Microsoft released a patch for the flaws exploited by the recent Download.Ject attack. The patch is labeled a configuration change, and prevents an ActiveX component from writing to the system. While the flaws have been known for over 9 months, only recently have they been exploited. The patch is available through Windows Update. More information can be found on Microsoft's site.

Comments

View comments by with a score of at least

It appears that this workaround (not a true patch anyway) doesn't work afterall. Read more about it here:
http://weblogs.mozillazi...sa/archives/005909.html

Be smart and dump IE. Use a real modern and secure browser like Firefox, Mozilla or Opera!

Score: 0

|

Could someone (knowledgeable preferably) explain in a sane, calm way, the different alternatives for browsers available and the major differences between them?

thanks!

Score: 0

|

The best thing you can do is to try Firefox, Mozilla and Opera out and then you will see what the difference is and which one works best for you.

Score: 0

|

Interestingly I applied this patch on a W2K SP4+ PC and the monitor kept shutting down after 20mins even though in power management it was set to never for monitor turn off. Maybe a coincidence? I don't know, as this was the only system change. Reboot didn't stop this happening. But a brief powerdown seems to have fixed this behavior.

Score: 0

|

Anyone who knows and/or understands IE's problems in general and this one in particular has long ago switched to Mozilla or Opera. Everyone else keeps blindly using IE and walking into traps. Virtually everyone I know gets their news from the television and have little knowledge or interest in this stuff - when's the last time Channel 3 news pointed this stuff out? They're not even aware that IE is a browser rather than "the Internet" or that there are alternatives... until their computer gets fried to the point where they can't help but realize something's wrong and someone takes the time to show them. I just hope the people who don't know any better have automatic updates turned on...

Score: 0

|

According to SecurityFocus (http://www.securityfocus.com/bid/10514), this bug affects IE 5.5 and later on Windows 95 and later. So why is the patch only for Windows 2000 and above? Microsoft STILL doesn't get it.

It's a simple registry edit to disable ADODB.Stream on those OSes the patch doesn't support.

Score: 0

|

*Smacks head*
That is pretty bad.

Score: 0

|

They _did_ release an update for 9x/ME. Refer to the MS Knowledge Base article.

Score: 0

|

What about folks who *need* ADOB.Stream? They're up the creek?

Score: 0

|

That's the problem with this so-called fix/update/patch. It's a bandaid and nothing more.

Score: 0

|

About time :D

Score: 0

|

After telling US to mind its own business, Kroes slaps caps on Rambus royalties

The holder of many patents worldwide pertaining to DDR memory offered to reduce its royalty stake in that technology, and today the EU said yes.

Microsoft reorg creates the Server & Cloud Division

What does it mean for Ray Ozzie, Microsoft's chief software architect?

Betanews Podcast: Rupert Murdoch and the buying stuff online problem

We'll have a more difficult time paying for online news if the underlying protocol for online payment has a big gaping hole in it.

What does AT&T's 'Mark the Spot' app say about service quality?

That's a question for Betanews readers to answer in comments to this post.

First impressions of Droid: Easy, breezy, friendly, if a little fat

Though it's not quite as well-polished as Apple's iPhone OS, the version of Android that Motorola's Droid phone sports is still a breeze to use.

EC's Kroes to US senators: Mind your own business on Oracle + Sun

UPDATED The EU's antitrust chief told the United States Senate Tuesday that any merger that takes place in the world is more her affair than theirs.

Windows fix for TLS security bug still forthcoming, won't be Tuesday

Anyone looking for a fix for last month's discovery of a potentially serious security hole in TLS and SSL may have to wait until everyone is ready to act together.

Not the first, not the last, technology predictions for 2010

Carmi Levy | Wide Angle Zoom: The real truth is probably that what went around in 2009, will come around to haunt us next year.

Google rolls out real-time search, Near Me Now, extended personalization

Over time, searches from PCs and mobile phones will grow even "more personalized." But what about user privacy and search results that give you "the truth"?

Google Goggles: Hands on with the Shazam of the Real World

Google today unveiled Goggles, its visual search lab for Android devices that identifies objects by sight.

Microsoft: Windows 7 Family Pack wasn't 'pulled,' it just sold out

If you hurry, you may still be able to find the last Family Pack upgrade editions hanging around retail store shelves, but probably not so much online.