Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: MS Security Bulletins
From: "Calum Power" <enune () fribble net>
Date: Mon, 18 Oct 2004 00:28:31 +1100 (EST)

MS04-038 CRITICAL Cumulative Security Update for Internet Explorer
Five remote code execution and three information disclosure
vulnerabilities exist in Internet Explorer.

Is it just me, or does this signal a push for a FULL code-audit on IE?
Microsoft have been plagued by the vulnerabilities discovered in their
packages (MS-RPC, LSASS) over the past 2 years, however, the vulns
discovered in IE have been pushed by the wayside without too much fuss.

It is about time Microsoft started taking note of the amount of reports
they are receiving in one of their 'flagship' products, and order a
complete, professional (did I say third-party? They already employ 30+
secure programming 'experts') audit on their most seemingly vulnerable

Just my $0.02AUD worth =)

Calum Power
- Cultural Jammer
- Security Enthusiast
- Hopeless Cynic
enune () fribble net

Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]