Slashdot Mirror
New Windows Vulnerability in Help System
wesleyt writes "CERT announced today a significant Microsoft Windows vulnerability related to IE and its handling of the Windows help subsystem. There are currently no patches available and no virus definitions for the major scanners. As well, exploits have been reported in the wild. Because the vulnerability is in the help subsystem, even users who avoid Outlook and IE are vulnerable, since IE is the default handler for help files. It seems that this is going to be an ugly one."
First of all: We're not talking about Lunix vs. Windows! We're talking about Linux vs. Windows. There's a fairly big difference. Linux is a fully featured UNIX clone. Lunix is an OS for the Commodore 64/128. Second: Its been out for 1 month and MS hasn't made an announcement! There are already exploits in the wild before MS admitted this existed! That's kind of a problem. I have no problem that its there in the first place. It just needs to be fixed sometime before there are already viruses exploiting it.
-Mr. Lizardo
(Responding to Slashdot trolls since 1998)
^I'm with stupid.^
To summarize:
Argh! Why does Windows give anonymous websites full access to my computer! It is a terd
Argh! Why doesn't X give anonymous programs full access to my video hardware! Its a terd.
This has been a pseudo-troll brought to you by Mr. Lizard's excess karma. It just keeps building up. Can someone help me cut it down to a sane level?
-Mr. Lizardo
^I'm with stupid.^
It seems that this is going to be an ugly one.
How about the report this morning on Linux being completely unacceptable for ANY secure purpose including defense, from the AP?
"Linux a national security risk" is the headline, I believe. Is that an ugly one, too?