| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
From: enune at fribble.net (Calum Power) Subject: MS Security Bulletins > MS04-038 CRITICAL Cumulative Security Update for Internet Explorer > (834707) > Five remote code execution and three information disclosure > vulnerabilities exist in Internet Explorer. Is it just me, or does this signal a push for a FULL code-audit on IE? Microsoft have been plagued by the vulnerabilities discovered in their packages (MS-RPC, LSASS) over the past 2 years, however, the vulns discovered in IE have been pushed by the wayside without too much fuss. It is about time Microsoft started taking note of the amount of reports they are receiving in one of their 'flagship' products, and order a complete, professional (did I say third-party? They already employ 30+ secure programming 'experts') audit on their most seemingly vulnerable product. Just my $0.02AUD worth =) Calum -- Calum Power - Cultural Jammer - Security Enthusiast - Hopeless Cynic enune@...bble.net http://www.fribble.net
Powered by blists - more mailing lists