Once again, Microsoft quality on display

[Rich Jordan]

http://news.bbc.co.uk/2/hi/technology/7784908.stm

Apparently yet another delightful exploitable flaw in MS windows internet explorer 7. Happy trails, all you wintel users.

[Dub_James]

Do we get to call them Wapple owners now?

[Ben Rumson]

Keep those flaws coming Bill. I get paid to patch 'em... Bwahahahahahaha!

[Rich Jordan]

Do we get to call them Wapple owners now?

Wintel is just an abbreviation, not a pejorative. A lot of folks started using it back when NT was available on multiple architectures (IA32, Alpha, PowerPC, and MIPS).

Probably a closer analogy for the Mac would be "Mactel" for the new intel based boxes.

[Dub_James]

"Mactel", I like that

[chrisb]

Do we get to call them Wapple owners now?

Wintel is just an abbreviation, not a pejorative. A lot of folks started using it back when NT was available on multiple architectures (IA32, Alpha, PowerPC, and MIPS).

Probably a closer analogy for the Mac would be "Mactel" for the new intel based boxes.

Mactel or hippie are appropriate.

[Rich Jordan]

MS has released an out of band patch for this most recent in a very long string of critical and easily exploitable vulnerabilities in their web browser product, obviously a carefully crafted and engineered piece of code on par with so much of its other product. Immediate implementation is strongly recommended because there are a growing number of compromised websites serving up the exploit.

You will need the most recent patch Tuesday updates (specifically MS08-073) as well as this special update to close off the current known vulnerabilities; the special update is specific to this most recent vulnerability.

This is for IE5, 6, 7, and at least some variants of 8. MS knows how to let bugs stew for a long long time. Wonder how long the blackhats have been using it before MS found out.

http://www.microsoft.com/technet/securi ... 8-078.mspx

Or you could just use Firefox.

[Rich Jordan]

New blip on the SANS diary; the vulnerability covered by this patch can not be exploited via a Word document with other vectors expected to be found. Best patch your systems , y'all.

http://isc.sans.org/diary.html?storyid=5530

[308Mike]

Or you could just use Firefox.

Firefox 3.0.5 with the NoScript add-on.