Microsoft sees 3 'critical' Windows security flaws

AP via Boston.com ^ | 9 August 2005

[Fractal Trader]

Microsoft Corp. warned users of its Windows operating system on Tuesday of three newly found "critical" security flaws in its software, including one that could allow attackers to take complete control of a computer.

Computer security experts urged users to download and install the patches, which are available at www.microsoft.com/security.

"Users (should) apply the updates as quickly as possible," said Oliver Friedrichs, senior manager of Symantec Security Response, part of security software company Symantec Corp. SYMC.O.

Microsoft said that vulnerabilities exist in its Internet Explorer Web browser, the most severe of which could allow an attacker to take complete control of an affected computer.

An attacker could exploit that vulnerability by luring users to malicious Web pages and running software code on the user's PC resulting to take it over.

Microsoft also issued another security warning, which it rated at its second-highest level of "important."

For more than three years, Microsoft has been working to improve the security and reliability of its software as more and more malicious software targets weaknesses in Windows and other Microsoft software.

[SNIP]

[Fractal Trader]

I wonder if these exploits are being used by the Cool Web Search malware mentioned in another post.

[Mister_Diddy_Wa_Diddy]

Probably so. My question is, why only three?

[Mark]

An attacker could exploit that vulnerability by luring users to malicious Web pages...

DU?

[Boundless]

> Microsoft said that vulnerabilities exist in its Internet Explorer Web browser ...

Download and use FireFox.

It's not perfect either, but it is vastly safer.

And make sure your firewall, anti-virus and anti-spyware
apps are up to date (or switch to Linux, which has vastly
less need for such defenses).

[NoClones]

whoa, complete control?

i'd better take an axe to those darn COMPUTERS before they get ambitious and try to get control over...over...the whole world!

/ humor off

[Terpfen]

There are 3 critical-rated security updates, but more that are rated non-critical.

Including that Windows malware detector tool, I'm currently downloading 8 updates.

[Cautor]

Any idea how you can determine what service pack your computer is currently running--1 vs 2?

[Terpfen]

... or switch to Linux...

Whoa, I see a typo there! I think you meant "OS X," not Linux. :)

[airborne]

I get the suspicion that they are built in on purpose.

[dinasour]

Any idea how you can determine what service pack your computer is currently running

Open "My Computer" and select the menu item "Help/About"

[N3WBI3]

This cant be! I have been told many times that closed source is much safer because the code is not out there for the world to see..

[Billthedrill]

You getting MS05-038? That's the cumulative IE patch. I keep getting "page not found."

[N3WBI3]

This cant be! Ive been told many times windows is much more safe because the hackers dont have easy access to the source.. Were they lying to me?

[N3WBI3]

start -> run -> then type "winver" (without the quotes)

[MediaMole]

You can switch to Linux, but you can't switch your existing WinXP box to OS X.... yet.

[Terpfen]

I don't know the ID#, but I just downloaded 5 security updates, two routine updates, and that Windows malware detection tool (which of course detected nothing, because I keep my system protected.)

[Boundless]

>> ... or switch to Linux...

> Whoa, I see a typo there!
> I think you meant "OS X," not Linux. :)

Well, ya, sure, but:
- it's not a free download, and
- it won't run on your existing hardware that is
presently hosting Mr.Bill's fragile collage of DOS patches

[Right Wing Assault]

complete control

Yeah, mine sold my house while I wasn't looking and blew it all on poker.

[Cautor]

Thank you. Will do.

[Cautor]

Thanks to you also.