Microsoft fixes serious Windows flaws

Cnet News ^ | August 9, 2005 | Joris Evers

[Panerai]

Microsoft on Tuesday issued alerts on several security flaws in Windows, the most serious of which could allow an attacker to gain control over a victim's computer.

Microsoft released six security bulletins as part of its monthly patching cycle, three of which it deems "critical." The Redmond, Wash., software gives that rating to any security issue that could allow a malicious Internet worm to spread without any action required on the part of the user.

One bulletin addresses three flaws in Internet Explorer. Of all the issues Microsoft offered fixes for Tuesday, these put users at most risk of attack, said Oliver Friedrichs, senior manager at Symantec Security Response. Two other vulnerabilities, affecting the plug-and-play feature and printing in Windows, could also spell some trouble for users, he said.

An error in the way IE, Microsoft's widely used Web browser, handles JPEG images is especially alarming, according to Symantec. An attacker could commandeer a PC by crafting a malicious image and tricking the victim to look at it on, for example, a Web site or in an HTML e-mail, Microsoft said in its MS05-038 security bulletin.

"These vulnerabilities can be leveraged by malicious Web sites to install spyware, Trojan horses, bots, or other programs on an unsuspecting user's machine," Friedrichs said.

The other two IE flaws that Microsoft now has fixes for could also allow an attacker to take control of a user's computer. One relates to how the browser handles URLs related to a feature that lets users view file folders in IE. The other deals with the ability of IE to call on other parts of Windows and is similar to a problem patched last month.

[TheForceOfOne]

Microsoft fixes serious Windows flaws

Oh, I thought it was going to be an Opus by Bill Gates, or a resurrection of Opus by Bill Gates, oh never mind! lol

[Golden Eagle]

It is fact.

Facts require proof. You have zilch, and your claims are less than impressive on their own. Tivo? ROFLMAO!

[Lx]

There's ways around it but it requires a trip to Frys to turn over one of their laptops to get a valid code plus I think it's only one reghack. I suggest you buy it though.
You can also get the code from the web.

[ShadowAce]

Tivo? ROFLMAO!

Notice, though, I did not say it was on the desktop.

[Golden Eagle]

Notice, though, I did not say it was on the desktop.

Doesn't matter. You still made a very bold statement, that you indicated was a fact, yet you still don't have squat to back it up.

[vrwc1]

There's ways around it but it requires a trip to Frys to turn over one of their laptops to get a valid code plus I think it's only one reghack.

That would be unethical, not to mention illegal.

I suggest you buy it though.

That's what I recommend too.

[Lx]

Yes, is would be wrong. Which is why I suggested they buy it. I just think it's funny that if you want an activation code, you only need to do what I suggest. Of course if the same code shows up too many times, you get blacklisted on the next service pack.
Thank you for saving me and anyone else reading from doing something immoral and illegal.

[ShadowAce]

You still made a very bold statement, that you indicated was a fact, yet you still don't have squat to back it up.

OK, then let's go through this logically.

What to the root DNS servers run? Hint: It's not Windows.

Cisco routers? Again--it's not Windows.
How about web servers?

While we both know that Apache runs on both Windows and *nixes, we also know that most MS-powered sites are also running IIS, rather than Apache, so that 70% figure is pretty hard to overcome.

How many millions of TiVo units have been sold? I don't actually have that number but each one uses Linux.

So--whether you know it or not, you are making use of Linux every time you connect to the Net, watch your recorded programs, or FReep. Many more use Linux than Windows. Just not on the Desktop.

[ShadowAce]

Also, please note that Google does not use Windows either. Care to bet on what it does use?

What percentage of the World's population uses Google?

[Golden Eagle]

So--whether you know it or not, you are making use of Linux every time you connect to the Net

ROFLMAO, and exactly how do you know this? Answer: you don't, and can't possibly.

What to the root DNS servers run? Hint: It's not Windows.

FYI, the DNS roots aren't called by every single client that connects to the internet. Nor have you presented any proof that they all run Linux. Not to mention they are only about 12 of them, total, that aren't accessed by every client.

Your comments remain completely flimsy, but typical.

[Golden Eagle]

How many millions of TiVo units have been sold? I don't actually have that number

LOL, we noticed.

[ShadowAce]

Your comments remain completely flimsy, but typical.

Flimsy they may be, but they are still more substantial than what you have brought to the discussion. Also, I note you make no mention of the Cisco or Google products.

[Golden Eagle]

I simply pointed out you have no proof of your claim.

That was and remains obviously rock solid.

[ShadowAce]

That was and remains obviously rock solid.

LOL!

[AFreeBird]

How many millions of TiVo units have been sold?

As do the Dish Network PVR's.

[Quix]

Have read similar assertions in the professional media of the business.

You might check it out before becoming so hostile and cheeky.

It is certainly logical based on routers alone.

[Golden Eagle]

Have read similar assertions in the professional media of the business. You might check it out before becoming so hostile and cheeky. It is certainly logical based on routers alone.

Hi Quix, and welcome to the discussion. Yes, we all constantly read the giddy reports in the liberal media, describing the domination of Linux, when in reality it's stuck down at about ~3% of desktops and 10-12% of overall server shipments. They love it because it represents the socialized utopia they think we should all be spending our lives working towards.

And yes, my replies to ShadowAce rightfully questioned his claim, especially since he like many others regularly and knowingly distort the facts about Linux, this being simply another example. In this particular instance, he stated something that is obviously incorrect, again being "More people use Linux worldwide (even in the US)than any other OS", which is obviously absurd to any well informed person.

When questioned on it, he mentions Tivo but no figures on how many Tivos exist verses computers (all of which even including servers are dominated at a ~90% rate with Windows); DNS root servers, yet refuses to address exactly how many are UNIX verses Linux; Cisco routers, again neglecting the fact that not all Cisco routers run on Linux and instead often use their own proprietary O/S; and most absurdly puts up a chart of Apache web server, with no mention that most if not all UNIX web servers use Apache, and even more outrageous is the fact that Apache web servers can and do run on Windows, the very product he was attempting to indicate to distinguish his claims against.

You're welcome to join in the discussion, but if you do, I suggest you check the facts before advising me to do so. Once you do, you'll recognize who is the one peddling the BS, and who is the one attempting to correct the confusion. Thanks.

[Golden Eagle]

What he said wasn't true. And he's done a terrible job defending it so far, if you care to take a look.

[Quix]

Conceivable. There do appear to be other possibilities. But, I leave it to you two heady experts.