Slashdot Mirror

← Back to Stories (view on slashdot.org)

.ANI Vulnerability Patch Breaks Applications

Posted by CmdrTaco on from the this-is-only-gonna-hurt-twice dept.

Jud writes "Microsoft's fix for the .ANI vulnerability was part of Patch Tuesday yesterday. However, all is not well with the update. Reportedly, installing the patch will break applications such as Realtek HD Audio Control Panel and CD-Tag, which mentions they are affected by the problem on their main page. A hotfix is currently available from Microsoft, however their current position is this is an isolated problem and the fix is not planned to be pushed out through Microsoft Update. "

2 of 164 comments (clear)

  1. This was not patch Tuesday by Anonymous Coward · · Score: 5, Informative

    Patch Tuesday is the second Tuesday of each month. This was an out of cycle patch released.

  2. Re:Before all the lame bashing.. by camcorder · · Score: 5, Insightful

    It's not time taking releasing the patch, it's the design decition done by a software company with its flagship product used by millions. You put a useless feature like handling .ani in HTML with your renderer, you also embed this renderer everywhere throughout your "OS", then for sure it would take lots of time to test for problems for such a single fix in .ani file handler. We saw same scenerio in past dozens of times.

    Having millions of users might be an excuse, but having a bad design can't, if you claim to be developing best software.

    I really find it just plain spreading FUD to compare open source software equivalent microsoft software with those metrics. Blah, blah, but it's used by millions, see what happens when open source is used by millions. Just wondering how many in those millions compare design decisions taken during software development of product they use. What's lame is not seeing how broken design of some parts of the software, not bashing due to these flaws.