IE flaw puts Windows XP SP2 at risk

Sidney · 17th September 2005, 02:18

flaw has been discovered in Internet Explorer that could enable a remote attack on systems running Windows XP with Service Pack 2, eEye Digital Security has warned.

The flaw, which also affects systems running Windows XP, is found in the default installations of Microsoft's IE, according to an advisory released by the security company on Thursday.

"The flaw is not wormable but allows for the remote execution (of code) with some level of end-user intervention," said Mike Puterbaugh, eEye's senior director of product marketing.

The discovery of this IE flaw comes just over a month after Microsoft issued a cumulative patch addressing three vulnerabilities for IE.

The new IE flaw also adds to another vulnerability, discovered last month, that affects systems using Windows XP SP2.

Microsoft's Windows XP with SP2 is designed to make it more difficult for attackers to run malicious software on users' computers.

A Microsoft representative confirmed that the company had received the report from eEye and said it will be investigating the issue. Because the details of the vulnerabilities have not been made public, users are not at risk of an exploit being developed to take advantage of the flaw, the representative said.

eEye has provided Microsoft with details about the flaw, but the security researcher does not release details to the public until a vendor has developed a relevant patch or issued an advisory.

http://news.com.com/IE+flaw+puts+Win...l?tag=nefd.top

6th February 2007, 15:24

Can you believe this! I just upgraded my system to SP2 and straightaway I have bumped into this news. Well this is horrifying news for any PC users considering that most of us are still travelling in the Windows bandwagon. Its now understood by me why people are promoting linux in such a big way noiwadays. With so many flaws coming up the life is indeed becoming difficult for people like us who have no other options but to use Windows.

Sidney · 6th February 2007, 16:59

Just Widnows update from SP2; most of the flaws have been corrected ... this is many months ago

jmke · 6th February 2007, 17:25

yes, I was looking at the front page wondering where this news was

17th September 2005, 03:18

17th September 2005, 02:18	#1
Sidney Member Join Date: Mar 2004 Posts: 15,738	IE flaw puts Windows XP SP2 at risk flaw has been discovered in Internet Explorer that could enable a remote attack on systems running Windows XP with Service Pack 2, eEye Digital Security has warned. The flaw, which also affects systems running Windows XP, is found in the default installations of Microsoft's IE, according to an advisory released by the security company on Thursday. "The flaw is not wormable but allows for the remote execution (of code) with some level of end-user intervention," said Mike Puterbaugh, eEye's senior director of product marketing. The discovery of this IE flaw comes just over a month after Microsoft issued a cumulative patch addressing three vulnerabilities for IE. The new IE flaw also adds to another vulnerability, discovered last month, that affects systems using Windows XP SP2. Microsoft's Windows XP with SP2 is designed to make it more difficult for attackers to run malicious software on users' computers. A Microsoft representative confirmed that the company had received the report from eEye and said it will be investigating the issue. Because the details of the vulnerabilities have not been made public, users are not at risk of an exploit being developed to take advantage of the flaw, the representative said. eEye has provided Microsoft with details about the flaw, but the security researcher does not release details to the public until a vendor has developed a relevant patch or issued an advisory. http://news.com.com/IE+flaw+puts+Win...l?tag=nefd.top __________________ lazyman Opteron 165 (2) @2.85 1.42 vcore AMD Stock HSF + Chill Vent II

6th February 2007, 16:59	#3
Sidney Member Join Date: Mar 2004 Posts: 15,738	Just Widnows update from SP2; most of the flaws have been corrected ... this is many months ago __________________ lazyman Opteron 165 (2) @2.85 1.42 vcore AMD Stock HSF + Chill Vent II

6th February 2007, 17:25	#4
jmke Madshrimp Join Date: May 2002 Location: 7090/Belgium Posts: 79,022	yes, I was looking at the front page wondering where this news was 17th September 2005, 03:18 __________________

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Windows Vista SP2 Officialy Released	jmke	WebNews	0	26th May 2009 13:53
Windows Vista SP2 Goes RTM	jmke	WebNews	0	29th April 2009 10:49
Microsoft Patch Tuesday: 5 Criticals, 2 Important, 1 Moderate Patch	jmke	WebNews	0	14th April 2009 18:47
Microsoft Security Bulletin Summary for September 2008	jmke	WebNews	0	9th September 2008 19:20
Microsoft Security Bulletin Summary for August 2007	jmke	WebNews	0	14th August 2007 22:21
Cybercrooks add Windows flaw to arsenal	jmke	WebNews	0	2nd October 2006 10:08
Microsoft Security Bulletin Summary for June 2006	jmke	WebNews	0	14th June 2006 20:51
Windows Firewall flaw may hide open ports	Sidney	WebNews	0	2nd September 2005 05:55
Windows flaw reaches beyond XP	Sidney	WebNews	0	19th July 2005 00:05
List of fixes included in Windows XP Service Pack 2	jmke	WebNews	1	17th August 2004 15:03

6th February 2007, 15:24	#2
sammy12male Posts: n/a	Can you believe this! I just upgraded my system to SP2 and straightaway I have bumped into this news. Well this is horrifying news for any PC users considering that most of us are still travelling in the Windows bandwagon. Its now understood by me why people are promoting linux in such a big way noiwadays. With so many flaws coming up the life is indeed becoming difficult for people like us who have no other options but to use Windows.