Microsoft warns on browser bugs

***Steve*** · 27-03-2006, 15:04

Just a heads up for any members still using IE, not that there is anything you can do about it until April 11th

Quote:

Microsoft has urged users to be wary as three newly discovered bugs leave people open to attack while using the net. All three bugs affect the software firm's Internet Explorer browser.

Security firms said the vulnerabilities were already being targeted by malicious hackers keen to catch out unsuspecting users.

Microsoft said it would produce patches for the vulnerabilities in its next security update due on 11 April.

Attack vector

The first of the problems discovered in Internet Explorer will simply make the browser program crash if it is used to visit a specially crafted webpage.

The other two vulnerabilities are potentially more serious because they can be used to take control of a victim's computer.

Already, said security firms, specially written websites and hijacked servers were being used to host the malicious code that uses the loopholes to invade vulnerable machines.

In security bulletins about the trio of bugs, Microsoft played down the threat and said: "The attacks are limited in scope for now".

Microsoft usually issues security updates on the second Tuesday of every month and its security team is working towards this date, 11 April, to produce patches for the bugs. However, it said the patches would be released earlier if the threat grew significantly.

Those using the patched versions of IE bundled with Windows 2000, Windows XP and Windows Server 2003 are vulnerable to these bugs. People trying out the Beta 2 version of Internet Explorer 7 are safe.

To avoid falling victim, Microsoft urged users to avoid websites they did not trust and to refrain from opening attachments on e-mail messages from unknown senders.

Another reason to try Firefox or Opera

evilowl · 27-03-2006, 15:22

Quote:

Originally Posted by Steve

Just a heads up for any members still using IE, not that there is anything you can do about it until April 11th

Another reason to try Firefox or Opera

Or IE7 beta

Seriously though, other than flaky FTP integration in Firefox (workaround is to use a 3rd party product) ... I can't think of a good reason for anyone to be using IE anymore.

www.mozilla.org

Still, once OSX is installed on everyone's machines by default instead and we're all using Safari as a browser, I'll be much happier

***Steve*** · 27-03-2006, 15:34

Microsoft can't get their full products to run bug free and comply with industry agreed standards, that doesn't give me much confidence in their beta attempts

I’ll stick to Firefox for now, thanks

Matty · 27-03-2006, 16:51

im running ie7beta2 and its pretty good, seems to be working ok and the bug reporting system is very good, ive posted 2 that i have found and both times the bug has been replied too by an employee working on the software with an explanation of whats occuring and why. Trouble with high use software is that malicious hackers will always try and beat it, and that is now true as much to firefox as IE, security holes are being found in that now too

***Steve*** · 27-03-2006, 17:11

The difference being that FireFox is a compliant browser, supported by many people who don't only update it every 2nd week according to their schedules.

It may be drawing attention now but it is still more secure and has less security issues reported.

Matty · 27-03-2006, 17:16

ms do normally rush out security fixes if its urgent, for some reason these ones dont seem to be of much interest to them

***Steve*** · 27-03-2006, 17:19

Slackers

They are too busy panicking over the much delayed Vista

Chris_Mitton · 27-03-2006, 19:30

The trouble is that every body want's to have a go at Microsoft. Victims of their own success.

Matty · 27-03-2006, 20:07

i tried getting beta of vista but its closed off now, will have to buy it!

thats right Chris, (welcome, btw)anything successful gets pulled down, be it by mischevious hackers or corporate games, success breeds contempt!

SammyC · 27-03-2006, 21:19

It does annoy me when MS get slagged off. I'm no real MS fan but they have advanced the PC desktop (regardless of who thought up the ideas initially) way farther than they would have otherwise.

I realise that if MS hadn't done it someone else probably would have but I'd rather be using XP and Word than the Linux stuff I have to struggle with at work everyday. For example, I shouldn't have to know soooo much about sound cards just to get MP3s playing!

Just my 2p.

***Steve*** · 27-03-2006, 21:48

I am not against MS just IE. My recent experiances with web design has given me just reason to hate it with a passion. Just becasue they are massive company doesn't mean that they shouldn't play along to agreed browser standards, it is just plain pointless and shows their arrogance IMO.

Mr THX · 27-03-2006, 23:06

Quote:

Originally Posted by evilowl

... I can't think of a good reason for anyone to be using IE anymore.

www.mozilla.org

How do you get your Windows updates then ??

***Steve*** · 27-03-2006, 23:10

Quote:

Originally Posted by Mr THX

How do you get your Windows updates then ??

Set Windows to automatically check and download updates, then manually authorise/install them at a convenient time

Works great for me here.

Mr THX · 27-03-2006, 23:20

Found to my annoyance that there were too many times I'd go to get an update off one of the MS sites and it would knock you back. Especially if needing a MS Office download.

evilowl · 28-03-2006, 08:01

As Steve says, use automatic updates and if there's something that you need urgently then just download the individual patch executable.

I subscribe to the Microsoft security bulletins by email so you are notified automatically and you get a link in the email to the files http://www.microsoft.com/security/bulletins/alerts.mspx

If you have a few machines at home then it could also be worth setting up WSUS http://www.microsoft.com/windowsserv...s/default.mspx