Re: IE/WMP Exploit

["Carlos Kramer" <csk_1975 () hotmail com>]

> Axel Pettinger wrote:
>
> Out of curiosity ... Is MS04-013 installed on your machine?
>
> What you've seen looks like the Adodb.Stream and ms-its problem.

No KB837009 isn't installed. I normally remove Outlook Express and do
not use it - so I'd assumed this patch wasn't required - silly me I should
have read MS04-013 closer:-

What systems are primarily at risk from the vulnerability?
By default, Outlook Express is installed on all supported Windows systems.
Microsoft recommends that this update be installed immediately on all 
systems.

At least this explains why some of my VPN users have been able to get
junkware/spyware on their systems when they aren't using our internal
http proxy (which filters this cruft).

Thanks.

_________________________________________________________________
Getting married? Find great tips, tools and the latest trends at MSN Life 
Events. http://lifeevents.msn.com/category.aspx?cid=married


---------------------------------------------------------------------------
Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN,
wireless security

Protect your network against hackers, viruses, spam and other risks with Astaro
Security Linux, the comprehensive security solution that combines six
applications in one software solution for ease of use and lower total cost of
ownership.

Download your free trial at
http://www.securityfocus.com/sponsor/Astaro_incidents_040614
----------------------------------------------------------------------------