RE: Did MS pull an Ilfak? (MS patch bindiff results)

["Greg Wroblewski" <Greg.Wroblewski () microsoft com>]

The only attack vector we know about for Win9x, ME platforms is through
printing. I'm afraid that "fixing" that would break some functionality.

Greg
------------
This post is provided as is and confers no rights or whatever.

-----Original Message-----
From: Joe Polk [mailto:listuser.jav () gmail com] 
Sent: Tuesday, January 10, 2006 6:21 AM
To: Brett Glass
Cc: bugtraq () securityfocus com
Subject: Re: Did MS pull an Ilfak? (MS patch bindiff results)

Brett Glass wrote:

> Question: Is Ilfak's patch still needed for Windows 95, 98, SE and ME
> systems, for which Microsoft is refusing to provide a patch? To what
> extent are these systems vulnerable if not patched?
>
> --Brett Glass
>
>
>  
Actually, Ilfak never tested his patch on a Win 9x machine. Steve 
Gibson, however, plans to write a
patch for 95, 98, and ME if Microsoft doesn't.

JP