Slashdot Mirror

← Back to Stories (view on slashdot.org)

Microsoft, zlib, and Security Flaws

Posted by timothy on from the not-the-security-initiative-we-had-in-mind dept.

nakhla writes: "News.com is reporting that Microsoft's use of code from the open-source zlib library has led to possible security problems. The flaws in zlib were reported recently, and apply to several key Microsoft technologies, such as DirectX, Front Page, Install Shield, Office, and Internet Explorer. The article also mentions how this is not Microsoft's first use of open-source code in its software, but does point out that since zlib is not GPL'd they are under no obligation to release the source code to any of their products."

6 of 470 comments (clear)

  1. If we can't see MS's source by darnellmc · · Score: 1, Offtopic

    How do we know they never used GPL'ed code anywhere?

  2. Tally anybody? by ILikeRed · · Score: 2, Offtopic

    I wonder if anyone is keeping a running tally since the security initiative started???

    Here is another bug with the MicroSoft SQL server. They've got overflows in their stored procedures. No fix, but you can delete the files if you can live without them....

    --
    I have come to a conclusion that one useless man is a shame, two is a law firm, and three or more is a congress -J Adams
    1. Re:Tally anybody? by Sam+Jooky · · Score: 0, Offtopic

      *BZZZZT*

      You used the acronym 'ISTR' twice already. Please stop using it as you confused my little brain which didn't immediately recognize it and then forced me to sit here saying things like:
      "I see that really ..."
      "I say to Randolph ..."
      "I suck toes righteously ..."
      ...
      "I seem to recall!"

      :)

      sapienza

  3. Um? by jonnyfish · · Score: 1, Offtopic

    And yet again, it is being reported that this zlib issue is leaving a "hefty" portion of systems vulnerable to attack. Forgive my ignorance, but how? In the previous discussion on the topic, I read some posts that sort of explained a possible risk that might occur if there's a full moon and the lighting is just right.

    So I ask you: what? From what I've heard the worst that could happen is your system could crash. I hardly see that as any sort of real issue, since programs like to do that all the time.

  4. Re:oh goody by NanoGator · · Score: 1, Offtopic

    Heh yah I've noticed that. It's really cool to hate Microsoft. It sure is great that we get news of MS screwing up. Too bad nobody ever pays attention to the good things MS does. I bet that most ppl who bash MS have never spent time with Windows 2000.

    --
    "Derp de derp."
  5. Re:oh goody by smack_attack · · Score: 1, Offtopic

    Yeah, I've got plenty of karma to burn as well, so those mods who feel it's appropriate to mod me down because I don't march to the drums can kiss my ass.

    BTW, I use XP on my desktop and I love it. I use Debian on my servers and I love that too. Windows does not fit well on a server just as Linux does not fit well on the Desktop, why can't people understand that?

    --

    Hammer of Truth