Microsoft Patch Leaves IE Users Exposed To Attacks

[AnnMarie]

FYI - Microsoft Patch Leaves IE Users Exposed To Attacks

------------------
Moderator at Suggest A Fix

[JoJo Gunn]

Jeez, what happens after you patch the patch that's been patched?

[AnnMarie]

Hi JoJo - wait for another patch??? lol.

------------------
Moderator at Suggest A Fix

[JoJo Gunn]

I should have added: "Say that as fast as you can".

[AnnMarie]

Awww - I tried it and my lips stuck together

------------------
Moderator at Suggest A Fix

[Spiny]

I don't think IE will ever be completely secure, or anything else for that matter.
If you want security, pull the plug on your internet connection.

Netscape is more secure since less people target it.

------------------

Is that vacancy for registry guru still open?

[Welshjim]

I guess this explains why MS has not sent out the usual security bulletin email notice on this patch. Neither is it on the Windows Critical Update site (though that generally lags by several days, anyway.)
I see the patch is still available froMS' Security Bulletin Search webpage, however. The info from MS says these (and presumably other) vulnerabilities will be taken care of by the IE6 SP1, but gives no date for its availability.
Sure would be nice if MS told us whether we are better off installing the available patch or waiting for further developments.

------------------
Jim
WIN98, IE6, cable,
Norton AV, ZoneAlarm

[This message has been edited by Welshjim (edited 02-13-2002).]

[Nanceel0]

I just installed that patch yesterday! And I got an IE error message closing down IE a little while ago - it took my whole computer with it! Is there any way to remove a patch?
(probably not)
Sincerely, Nancee

[AnnMarie]

Hi Nancee - regretfully, uninstall is not available for that patch. I have seen reports in many forums in the past 24 hours from people having similar problems with it. In this link Microsoft Security Bulletin MS02-005, MS say that they offer free support for their patches. Might be worth a try - good luck.

------------------
Moderator at Suggest A Fix

[Nanceel0]

AnnMarie,
Thanks so much for your quick reply. I'll try that link and hope for some help. That fiasco I experienced really scared me!
Sincerely, Nancee

[AnnMarie]

Dont worry too much Nancee - the reports must be pouring in to MS - I'm sure they will post a fix soon - let us know how you get on with their support staff.

------------------
Moderator at Suggest A Fix

[Nanceel0]

Thanks for your thoughts AnnMarie. I think when I got that error I had permitted ActiveX to run - I don't know if it has anything to do with it or not, but I'm not letting it run anymore.
I had to go to Windows Updates to find an area to e-mail M$ - the other e-mail option required a passport thingy.
I'll let you know whatever I hear about this. (I also mentioned to them that since I sent the report in maybe they could check it and see what went wrong
Sincerely, Nancee

[Nanceel0]

Hi AnnMarie!
I got absolutely no where with M$ support for their security patches. Here's there letter (it's long, but I'm posting it all - I wonder where there free support is!)
Sincerely, Nancee

Hello Nancy,

Thank you for contacting Microsoft Update Support.

This support request was sent to the Microsoft Update team, who is
available to assist with Update site navigation, download, or server
issues.

Now that Internet Explorer is offered as a free downloadable product, it
does not have support of its own. Support for Internet Explorer is based
on the support available for your operating system.

The Product ID number you provided indicates that your copy of Windows
98 SE was purchased under an Original Equipment Manufacturer (OEM)
license agreement. Under this agreement, the manufacturer of the
computer holds the rights to provide industry-standard support for all
hardware and software included in the purchase.

For assistance with your issue, I would recommend that you work with
your computer manufacturer directly. To locate your computer
manufacturer's contact information, please go to http://support.microsoft.com/directo...mdirectory.asp

Microsoft has several secondary support options available to you.
Assisted Pay-Per-Incident support from a Microsoft Support Professional
is available by phone and also through our online Web Response. For more
information about these options, please visit http://support.microsoft.com/default.aspx and from the left-hand menu,
click Contact Microsoft. If you prefer to work with a Support
Professional by telephone, please call (800) 936-5700.

In addition to our assisted support services, Microsoft offers several
no-charge information services that may assist you with resolving
technical issues on your own.

- A general overview of our technical resources can be found at http://support.microsoft.com/default.aspx

- You can search our Knowledge Base, which has thousands of technical
articles on all Microsoft products at http://support.microsoft.com/search/default.aspx

- You may view our Frequently Asked Questions (FAQs) for Microsoft
Products at http://support.microsoft.com/faqs/default.aspx

- You may view our online newsgroups, where users can view and post
information in an open forum at http://support.microsoft.com/newsgroups/default.aspx

I hope this information is helpful to you.

If you have any additional questions, please let us know by replying to
this message.

Thank you,

Gary
Microsoft Online Customer Representative

[AnnMarie]

Hi Nancee - Thanks for posting their reply. I guess all microsoft support staff take a compulsary course in HUPPH ("How to be as Unhelpful as Possible while Pretending to be Helpful"). Gary musta passed with honours. Are you still having problems with your browser?

------------------
Moderator at Suggest A Fix

[Nanceel0]

Hi AnnMarie,
Thanks for your response. My browser seems fine since the other day. But yesterday I had MusicMatch running and went online. When I shut MusicMatch I got a black screen, then BSOD with OD fatal error 0028 etc. VXD VMM(01). When I pressed any key I was online again but my cursor wouldn't budge (same as with IE error reporting tool) so I used c/a/d a few times. When I started pc I immediately went to Command prompt only and did a scandisk /fix. (I didn't know what else to do).
I haven't run MusicMatch with AOL or let Active X run since these problems...I don't know if both instances are related or not. I do know that I did an fdisk/mbr recovery Dec. 27 so I didn't expect any of this...but at this moment everything is okay.
Sincerely, Nancee
P.S. I searched the forum and found I can disable that error reporting tool by renaming the file Dwintl.dll. I also found the instructions at M$ on how to edit the registry re the tool but it involves making a dword and value, so I like renaming the file if I have more problems with that.