Spyware Sucks
“There is no magic fairy dust protecting Macs" – Dai Zovi, author of “The Mac Hacker’s Handbook"

Non-security update for Internet Explorer

February 28th 2006 in Uncategorized

Update:  I’m seeing confusion about how/when the non-security update is being installed.


The non-security update is NOT being downloaded and installed via Automatic Updates at this time.  It is available via the Download Centre, and Windows Update (as an optional update).  Eventually we will all have to install it, but that isn’t the case at this present time.  It will be included in future cumulative updates.


The non-security update is only being offered to users of Windows XP SP2 and Windows Server 2003 SP1.


Advisory about non-security update here:
http://www.microsoft.com/technet/security/advisory/912945.mspx


Discusses the Internet Explorer ActiveX update described here:
http://support.microsoft.com/kb/912945


I previously discussed this ActiveX change prior to its release:
http://msmvps.com/blogs/spywaresucks/archive/2006/02/11/83189.aspx


The history behind why this change to ActiveX has occurred harks back to the EOLAS patent (old information here):
http://msmvps.com/blogs/spywaresucks/archive/2005/10/09/69848.aspx


Watch out those of you who are using the Google Toolbar.  Your system may crash when you close a window that contains an inactive activex control.  Also, Sun JRE 1.3 and 1.4 are problematic – needing two clicks to establish focus (by rights, NOBODY should be running those versions anyway.. see my comments about Sun Java and security issues here):
http://msmvps.com/blogs/spywaresucks/archive/2005/08/22/63670.aspx


Comments are closed.

Ok, I’ve joined the dark side… been borgified… assimilated… absorbed… whatever you want to call it.
Put in an order today for a brand spanking new SBS server via a good friend, Wayne Small, SBS MVP.  Ahhhhh, some are so disappointed that I succumbed so easily to the siren-call that is SBS…. but I digress ;o)
BORING!!!!! say my […]

Previous Entry

…now that Mac users are being pulled, sometimes kicking and screaming, into the brave new world of being in the sights of the bad guys, and security vulnerabilities…http://docs.info.apple.com/article.html?artnum=303382
The patch addresses an email attachment vulnerability and several Web surfing vulnerabilities.

Next Entry

Archives