Slashdot Mirror
Exploit Based On Leaked Windows Code Released
mischief writes "A post to Bugtraq from SecurityTracker.com reports an Internet Explorer 5 exploit that has been released based on the Win2K code leak: 'It is reported that a remote user can create a specially crafted bitmap file that, when loaded by IE, will trigger an integer overflow and execute arbitrary code.' Only affects IE 5 apparently, but still - it didn't take long!"
If you read the bugtraq article, notice how the poster claims:
Anyway, I took a look, and decided that Microsoft is GAYER THAN AIDS.
An exploit this quick?
Well yeah. If you think about it, I'm sure just about every Linux zealot on the planet is frantically analyzing the source to create an exploit for each and every hole they can find in an effort to prove just how inferior Windows is to Linux. I'm sure if a bunch of Windows zealots were working around the clock to create Linux exploits you'd see Linux exploits pop up with the same amount of frequency.
Completely off-topic, but "their" is not a singular pronoun. The proper singular pronoun, when sex is unknown, is "he." That's why I said "he."
If this is true, why hasn't Microsoft put a bunch of people on this very task, to discredit Linux?
between Microsoft and the open source community. W/ open source the src is open, so we work together to improve it. However, when a proprietary company's greatest asset, thier source code, is released or leaked unauthroized, someother individuals will use it to spit that very company, as they have what is most valuable to the company. Just my 2 cents ;-D
They've found a bug in a version of IE that's TWO FUCKING YEARS OLD. Subsequent versions are not affected. Is this all this "many eyes" approach capable of?
That was interesting to read. It made me wonder who the people are who come up with these exploits. This person is obviously very immature, but also very knowlegable about programming to spot something so quickly in so much code. The question is, is this a ridiculously knowledgable 13 year old, or a well-seasoned older programmer who has the social skills of a 13 year old?
Actually, I wonder who you are, somebody whining about immature programmers to avoid the uncomfortable thought that their Windows system is full of technical flaws, and that the company who is supposed to fix them is incapable or unwilling to do it.
Have you got your LWN subscription yet?
I would disagree with you there. Just go to microsoft.com and download IE6.
Mozilla is a good alternative, but its not quite as fast as IE6 in rendering web pages. Not to mention its not as mature as IE6.