Main Menu
Network
Sponsor
Top 10 Sites
Partners
|
|
Top Submit newsSubscribe 
Communication | Computer Crime | Digital Audio, Video, Photo | General News | Hardware | Internet | Mobile | PDA | Security | Software | Vulnerability |
Previous articleBack to news listNext article
| Sponsored links | Want to become one of our authors and see your work published on ALLSeek.iNFO ?
| | Doubts raised over Microsoft patches |
|---|
Categorie: Software
Posted: 2002-11-27 by ReCall
Views: 496
Source: Click here
| Current Rating: Not rated
|
| | Details |
|---|
Security patches released by Microsoft last week may not completely protect users, according to a Danish security consultancy.
Microsoft security alert 65 and alert 66 deal with the Windows operating system and Internet Explorer, and are rated 'critical' and 'important' respectively.
Alert 66, a bundled software patch for Internet Explorer versions five and six, is aimed at fixing six specific faults in the browser.
Simon Conant, of Microsoft product support services, said: "If users update with this patch they will be covered for all the currently known security flaws.
"They'll still need to use patch 65 as well as that's not a specific Internet Explorer patch but can affect the software."
But Danish security company Secunia said it has identified flaws with both patches.
Microsoft has admitted patch 65 may not be fully effective in certain circumstances, but it has made no mention of problems with patch 66.
Although patch 65 does offer a broad solution it is still vulnerable to malicious websites and HTML emails. If the browser downloads ActiveX controls automatically it might be possible to reintroduce malicious code.
The software giant has suggested that users remove its software from the Trusted Publisher list and check the software's origin before downloading.
Part of the flaw in patch 66 means it is still possible for a website to run an executable that is stored on a system.
This could allow an outsider to view the contents of a previously identified file and view the clipboard.
Secunia spotted the flaws while installing and checking the patches. Details of how to fix them can be found here.
"I was very shocked at the problems, particularly with alert 65," said Thomas Kristensen, chief technical officer of Secunia.
"We noticed the problems and only then did we find them mentioned in the FAQ. The only way around them is to manually install all digital certificates after checking their veracity, and who wants to do that?" he said.
Microsoft could not provide a comment on Secunia's discoveries by the time of going to press.
| | Links |
|---|
Six new vulnerabilities in IE !!! New Cumulative Patch for Internet Explorer
| | Syndication |
|---|
Permalink Email this
The URI to TrackBack this entry is:
http://allseek.info/news/trackback.php?id=376
| | User comments (post your comments ) |
|---|
Only registerd members can post comments and articles
|
| Previous articleBack to news listNext article
|
|
|
|
InterJOB.su
|
