Re: Microsoft Security Advisory (935423) Vulnerability in Window

Forums » Up and Running » Security » Security » Microsoft Security Advisory (935423) Vulnerability in Window


Share Topic:	RSS topic:	toggle: flat / full normal / watch	Posting:	Post a:	Post a:

Links: ·Hijack This logs? ·Panda Free Tools ·Vundo Removal

dinput.dll »
« Pimp my Tinfoil hat

Mele20
Premium
join:2001-06-05
Hilo, HI

Re: Microsoft Security Advisory (935423) Vulnerability in Window

Whoa! This is nasty! There is NO WAY to protect yourself if you use Outlook Express (even if you use IE7) and even Windows Vista Mail is somewhat vulnerable. From Microsoft Security Advisory (935423):

"Caveat: Reading e-mail in plain text on Windows Vista Mail does not mitigate attempts to exploit the vulnerability when Forwarding and Replying to mail sent by an attacker.

Note: Reading e-mail in plain text on Outlook Express does not mitigate attempts to exploit this vulnerability."

I have always read all email in OE in Plain Text. That has been excellent protection until this. Alexander Sotirov from Determina recommends reading ALL MAIL with Telnet. That is sure going to be fun.
--
"If you want to do DRM on a PC then you need to treat the user as the enemy." Ross Anderson in "`Trusted Computing' Frequently Asked Questions"

»www.msfirefox.com/

permalink · 2007-03-30 06:24:40 · Print ·

AB Premium join:2006-04-04 Leesburg, VA	Re: Microsoft Security Advisory (935423) Vulnerability in Window said by Mele20 : Whoa! This is nasty! There is NO WAY to protect yourself if you use Outlook Express (even if you use IE7) Don't use an animated cursor?
	permalink · 2007-03-30 15:34:50 ·

EGeezer
Go Bobcats
Premium
join:2002-08-04
Country!

·Callcentric

·RoadRunner Cable

·AT&T CallVantage

Microsoft has its priorities well placed ...

said by Mele20

:

I have always read my incoming email in OE in Plain Text. That has been excellent protection until this. Alexander Sotirov from Determina recommends reading ALL MAIL with Telnet. That is sure going to be fun.

I use a really old version of Mailwasher (2.0.28 beta) to screen, preview and scrub junk while it's on my ISP's POP server. It's been quite effective and requires minimal effort.

What really gripes me is that Microsoft has not issued a fix for this, but I just saw the second non-patch Tuesday WGA update notification. MS didn't wait for patch Tuesday to issue these "high priority updates".

[sarcasm]
But I'm sure that WGA updates must be a more meaningful priority for users than these insignificant little security holes. But at least I know if my systems become infected, they'll be using "genuine copies" of a vulnerable OS.

[/sarcasm]
--
03:14:07 UTC Tuesday, Jan. 19, 2038 - a date that will live in infamy...

permalink · 2007-03-31 23:41:13 · Print ·

your comment..

Forums » Up and Running » Security » Security	dinput.dll » « Pimp my Tinfoil hat


Saturday, 05-Dec 20:26:56	Terms of Use \| Privacy Policy \| Hosting by www.nac.net - DSL,Hosting & Co-lo \| feedback \| contact over 10 years online! © 1999-2009 dslreports.com. page compression OFF