Slashdot Mirror
Open Source Firm Releases Patch for IE Bug [UPDATED]
An anonymous reader writes "An open source and freeware software development web site has released a patch to fix the URL spoofing vulnerability in Internet Explorer, which can be exploited by scammers who try to trick people into revealing details of online banking accounts or other private information." Naturally, the source for the patch is available as well. Update: 12/19 15:06 GMT by M : Sadly, the patch appears to contain a buffer overflow and some possibly-malicious code - see an analysis and news story, and this comment which suggests the patch author is trying to figure out who is taking advantage of the original vulnerability. Caveat patcher.
I'm not downloading anything that isn't part of a MS plan. Sounds like a trojan attempt to me.
Why is the group releasing this on their own?
To quote the wise sages of the Quake 3 voiceover...
HUMILIATION!
My own pointless vanity vintage computing page
This patch fixes a security bug in Internet Explorer that could allow someone who actually knows what they're doing to repair buggy programs on your computer.
What the article doesn't say is that the "patch" just removes IE and installs Mozilla. :)
Sorry, but its going to be a cold day in hell when I run something from a website named "openwarez.org".
It didn't ask me to reboot afterwards!!!
Someone start knitting a sweater for Satan...
when hell just froze over? Will microsoft actually have to acknowledge them? Thank them?
An open source firm issued the patch a while back -- It was called mozilla.
How does this affect IE, the MS EULA, and all the other wonderful legal stuff that could be dragged out simply because you modified software that wasn't meant to be modified outside the confines of One Microsoft Way?
Patch on, I guess...if you must. I sleep much more soundly with my RH9 and Firebird.
That's not a link! This is a link:
http://www.openwares.org/downloads/IEpatch.EXE
P.S. I haven't actually tried the executable out, I just added the clickable goodness. I also couldn't pass up the chance to make a Crocodile Dundee joke.
In other news...
Today Micro$oft contributed code to the Linux kernel, and announced plans to help iron out differences between Mozilla and MSIE :-)
Poor MicroSoft!
Microsoft's biggest software threat gets a huge update, one of their own products gets a patch by a third party, Real Networks sues them for monopolistic activities, and Lord of the Rings - Return of the King (a movie made with cheap Linux boxes) is realeased. All this in a 48 hour period!
Man, it's been a rough couple of days.
Sm:)e.
(t'was easy, sorry)
We've always been at war with Eurasia.
Maybe they forgot to sign the EULA?
Found a wonderful fix it is called cfdisk! and slackware 9.1 setup, works great and no IE security issues!
OH THE SHAME I fell off the wagon and use sigs again!
Sued by... by customers bwahaha haha... not... 'nough...ha haha... air...got...to...breath...hahah sued.... customers....
"I think this line is mostly filler"
M$ picks up an open source bug fix off the net, rolls it into IE and releases it real fast ..... 2 weeks later the FSF comes a knocking wanting to know where the source for IE is and "didn't you say in court your browser is so highly integrated into your OS it can't be removed ... we'll have the source to that too please" ....
If this patch gets the press coverage that it deserves, maybe people will learn to take Microsoft's claims of better security response rates than those open-source folk, with a grain of salt.
Or maybe Microsoft will actually start working harder to keep their software secure in a timely manner?
</fingers_crossed>While it's a nice step, it's no replacement for an official Microsoft patch.
It's no replacement for... nothing, in other words?
Microsoft hasn't even said they're *going* to patch this yet, you may be waiting an awful long time.
Don't you wish your girlfriend was a geek like me?
How do we know the executable doesn't have crap in there?
You know, the same could be asked of Internet Explorer.
Mikey-San
Karma: +Eleventy billion (mostly affected by watching Celebrity Jeopardy)
Yeah, patch Q824145. In my case, it turned out to be a blessing. I got so pissed off that MSFT broke standard UI scrolling behavior that I switched to Firebird. I don't understand how a large, successful software company can do such sloppy QA and think that nobody will notice. But then, there are many things that I don't understand.
Oh but wouldn't it be so deee-licious if people FED UP with Windoz bugs started relieasing fixes independent of M$? What do you suppose Bill and Friends would do?
"Who are in control, they are not in control of anything - they don't even control themselves!" - Glen Beck
in other news M$ sues SCO over patented intentional operating system backdoors
litigious bastards
suck it sco!
Don't bother. I'm so 31337 that I just hacked that 127.0.0.1 loser... In a minute someone should be noticing their root file system missing.... Heheheh
Hmmmm.... That's funny.... Where'd my MP3's go......
Stop the Slashdot effect! Don't read the articles!
It seems you've got a good handle on this, so when can Openwares expect your patch for the vulnerability in thier patch?
Read, L
SCO Group of Lindon Utah announces that it has filed suit against Microsoft for including Unix/Linux code in Microsoft's Internet Explorer. Darl McBride says "There's no way these burger flipping losers could fix IE without our help. Microsoft couldn't even fix it without our lawyers."
Shrewd investors continue to laugh at the SCO Group's activities and have the following comments:
"The funniest thing I've seen since the Paris Hilton tapes!" - MSN
"A gut buster worthy of John Belushi - but SCO does more drugs" - Timothy Leary
SCO also announced that Caldera Linux licences still outpace all other SCO products - excluding lawsuits - by a 2:1 margin. Darl announced that they expect to make that 3 to 1 by next summer before they are purchased outright by IBM for $1.50 and a can of Red Bull.
// Terms of Agreement:
//
// By using this source code, you agree to the
// following terms:
//
// 1) You may use the source code, resource
// files for educational purposes only.
// 2) You MAY NOT redistribute this source code
// without written permission. Failure to do
// so is a violation of copyright laws.
// 3) The author of this code may have retained
// certain "additional copyright rights".
// If so, this is indicated in the author's
// description.
Linux: The world's best text-adventure game.
I know I'm going to get modded to hell for this but how about a w3c compliant html/css implementation?
The way to corrupt a youth is to teach him to hold in higher value them who think alike than those who think differently