Re: MS02-023 does not patch actual issue!

From: Tom Gilder (tomat_private)
Date: Thu May 16 2002 - 10:56:33 PDT

  • Next message: Mandrake Linux Security Team: "MDKSA-2002:031 - fileutils update"

    On Thursday, May 16, 2002, 4:46:18 PM, you wrote:
    > I was unable to run the demonstration code on
    > http://sec.greymagic.com/adv/gm001-ax/.
    > I get the following error:
    > "An error has occurred in this dialog."
    > ...
    > I am running Windows XP Professional 32bit with the latest patches.
    
    GreyMagic software stated that:
    
    > As a result of that incomplete "patch" IE5 and IE5.5 are still very much
    > vulnerable to this attack in other resources. For a demonstration see
    > http://sec.greymagic.com/adv/gm001-ax/.
    
    If you have Windows XP, you will have IE6.
    
    
    -- 
    Tom Gilder
    tomat_private
    



    This archive was generated by hypermail 2b30 : Thu May 16 2002 - 14:48:48 PDT