IE 5.5 and IE 6 Mega Patch

[AnnMarie]

This bulletin was released on December 13th. The patch is regarded by Microsoft as a critical update. Details and download here Cheers

[Spiny]

Nice try... http://discussions.virtualdr.com/For...ML/003892.html

[AnnMarie]

Awwww sorry Spiny - I wasnt trying to rain on your parade - didnt see your post - shoulda put my glasses on hehe. Merry Xmas to you.

[Spiny]

I should have used a more striking title.

Here's another security fix: Netscape 6.2.1!

Merry Xmas!

[Alice Wyman]

Hi Spiny,

I did see your original post on this. Thanks.

As for the Netscape solution, I use only Netscape 4.78 for e-mail, never Outlook Express. If it was up to me I wouldn't use IE either but some sites are "optimized" for IE and won't work right with Netscape.

As for the Dec 13th IE patch, this is from http://www.microsoft.com/technet/sec...n/MS01-058.asp Microsoft Security Bulletin MS01-058 13 December 2001 Cumulative Patch for IE

Inclusion in future service packs:
The fix for these issue will be included in IE 5.5 Service Pack 3, and IE 6 Service Pack 1.

Superseded patches:
MS01-055
=============================================

MS01-055 is the 13 November 2001 Cumulative Patch for IE http://www.microsoft.com/technet/sec...n/MS01-055.asp which I just installed.

Looks like Microsoft is now doing periodic cumulative patches for Internet Explorer instead of individual patches, at least these are the only two "IE cumulative" patches I see at http://www.microsoft.com/technet/tre...ty/current.asp

The 11-13-01 patch was big enough (580kb) but this one was 2.15MB!

According to MS01-058 the first of the three new vulnerabilities patched is the most critical:

"...could enable the attacker to create a web page or HTML mail that, when opened, would automatically run an executable on the user's
system. This vulnerability affects IE 6.0 only. It does not affect IE 5.5."

I have the Dec 13th patch for IE5.5Sp2 downloaded but I usually "sit" on a new patch for a week or two to see if there are problems reported... I might just wait for IE5.5Sp3 on this one.


------------------
IBM Aptiva 2140L5H Win95B Pentium II 233mhz 64mb ram
DUN1.3 WS2 DX6.1 WMP 6.4 RP8 Netscape 4.78 IE5.5 SP2