Welcome, Guest. Please login or register.
July 23, 2025, 08:23:03 AM

Login with username, password and session length

Search:     Advanced search
we're back, baby
*
Home Help Search Login Register
f13.net  |  f13.net General Forums  |  General Discussion  |  Topic: SECURITY: Microsoft's April security updates now available 0 Members and 1 Guest are viewing this topic.
Pages: [1] Go Down Print
Author Topic: SECURITY: Microsoft's April security updates now available  (Read 1843 times)
Trippy
Administrator
Posts: 23657


on: April 10, 2007, 06:23:06 PM

Microsoft's regular monthly security updates are now available. Includes the animated cursor fix that was discussed here plus 4 other Critical security fixes. Fun for the whole family!

http://windowsupdate.microsoft.com/

or

http://www.microsoft.com/technet/security/bulletin/ms07-apr.mspx

Edit: here's a nice summary of the updates from SANS:

http://isc.sans.org/diary.html?storyid=2598
« Last Edit: April 10, 2007, 06:28:21 PM by Trippy »
Yegolev
Moderator
Posts: 24440

2/10 WOULD NOT INGEST


WWW
Reply #1 on: April 10, 2007, 09:08:53 PM

Went to the update site for the first time since Moses began shaving, now that I have a legit key, and I think it's pretty disingenuous to put IE7 in the High Priority section.  Also got the .NET 3.0 since I don't think I had any .NET at all after the reinstall.

Why am I homeless?  Why do all you motherfuckers need homes is the real question.
They called it The Prayer, its answer was law
Mommy come back 'cause the water's all gone
Trippy
Administrator
Posts: 23657


Reply #2 on: April 10, 2007, 09:12:29 PM

It is to a certain extent except that many of the recent security problems with IE 6 don't affect IE 7. You can also "hide" that selection so that it doesn't show, though you will get a warning that you've hidden an update from then on.
Yegolev
Moderator
Posts: 24440

2/10 WOULD NOT INGEST


WWW
Reply #3 on: April 10, 2007, 09:15:22 PM

Well, I suppose the security improvements to IE7 apply to IETab in Firefox?  Because that would be tolerable.

Why am I homeless?  Why do all you motherfuckers need homes is the real question.
They called it The Prayer, its answer was law
Mommy come back 'cause the water's all gone
Trippy
Administrator
Posts: 23657


Reply #4 on: April 10, 2007, 09:22:30 PM

Well, I suppose the security improvements to IE7 apply to IETab in Firefox?  Because that would be tolerable.
Not sure how IETab works and whether or not IE 6 components (i.e. shdocvw.dll and mshtml.dll) can still co-exist on a system with the IE 7 equivalents after IE 7 is installed.
Lantyssa
Terracotta Army
Posts: 20848


Reply #5 on: April 10, 2007, 09:46:31 PM

I haven't looked at the inner workings, but a brief glance at it looked like it simply launched IE within the browser window.  I imagine it is susceptible to anything IE is if you are running in that mode.

Hahahaha!  I'm really good at this!
Yegolev
Moderator
Posts: 24440

2/10 WOULD NOT INGEST


WWW
Reply #6 on: April 10, 2007, 09:52:05 PM

It sure as hell lets the popups go nuts, just like normal IE.  Only just started using it but I think Lantysser is right.

Why am I homeless?  Why do all you motherfuckers need homes is the real question.
They called it The Prayer, its answer was law
Mommy come back 'cause the water's all gone
Trippy
Administrator
Posts: 23657


Reply #7 on: April 10, 2007, 10:08:06 PM

IE 4/5/6 is just a "wrapper" around shdocvw.dll which itself is a wrapper around mshtml.dll. "Custom" IE browsers work by putting a different UI around shdocvw.dll. It's also how other applications can embed a Web browser into themselves -- they just use one of those DLLs. Now I'm not familiar enough with the architecture of IE 7 but I do know it doesn't use those two DLLs (hence the reason why it doesn't always share the same exploits). Googling around it does look like the new IE 7 DLLs do coexist with the IE 6 ones so the question is whether or not IETab has been updated to use the new IE 7 DLLs or if it's stuck with the old IE 6 ones.
Pages: [1] Go Up Print 
f13.net  |  f13.net General Forums  |  General Discussion  |  Topic: SECURITY: Microsoft's April security updates now available  
Jump to:  

Powered by SMF 1.1.10 | SMF © 2006-2009, Simple Machines LLC