Microsoft Plugs 'Critical' IE Hole

[tacitus]

<h2>Microsoft Plugs 'Critical' IE Hole</h2> (http://www.pcworld.com/news/article/0,aid,117197,00.asp)

Users urged to not wait for Windows XP service pack, and to apply cumulative patch now.

Stuart J. Johnston, special to PC World
Friday, July 30, 2004

Microsoft has issued a special cumulative patch for its Internet Explorer browser, addressing three new security holes rated "critical," including one that was used in a virus attack in July.

Patches rated "critical" mean that not installing the patch may lead to catastrophic damage to a PC because an attack could give a cracker complete control of that system, including the capability to reformat the hard drive, according to Microsoft.

security patch (http://www.microsoft.com/technet/security/bulletin/ms04-025.mspx)

<hr>

Don't ask for trouble, install the patch.

[Rhino]

[ QUOTE ]
tacitus said:
Microsoft Plugs 'Critical' IE Hole

[/ QUOTE ]
No word yet on what they're gonna do about the other 231 critical holes.

[RayChuang]

[ QUOTE ]
Rhino said:
No word yet on what they're gonna do about the other 231 critical holes.

[/ QUOTE ]

Actually, Microsoft just released Windows XP Service Pack 2, which has a whole bunch of changes to address Internet security issues. The "offline" install version is a huge file--something like 272 megabytes in size! http://www.click-smilies.de/sammlung0304/sprachlos/speechless-smiley-006.gif

[Rink]

hey Ray, where is this offline install version??????

[DoctorDoom]

It will be available on CD for folks like me that get real-time DL speeds of 3KB/s or less. It would take me over 25 hours to DL it. AUGH!

BTW, you might want to wait.

[ QUOTE ]
YOUR POOR LITTLE hard drive, the poor thing... It takes a heck of a long time on a BT DSL line to download the 256MB service pack 2 for Windows XP, but after it's downloaded it takes ages more to install it, you'll be astounded to read.

No wonder IBM has told its staff not to download it on their machines - an ocean going tanker takes ages to turn around, how much more so an IBM with goodness knows how many DeathStar Big Blue drives on board?

That's their problem. We downloaded the SP2 direct from the URL supplied by our own Charlie D, and we're still watching what these IT types call "the client" upgrading itself.

So far, it hasn't BSODed, but if I were you I'd send off for a CD from Microsoft and cross your fingers. The INQ's totally patched Centrino 900MHz ULV machine is holding up so far, but it's two hours now and this is no trivial patch, we can assure you.

[/ QUOTE ]
Win XP SP2 will hammer your drive (http://www.theinquirer.net/?article=17757)

[ QUOTE ]
Businesses are preparing to adopt a 'wait-and-see' approach to Microsoft's security update Service Pack 2 for Windows XP because of concerns over its stability and impact on existing systems.

Microsoft's long-awaited and delayed Windows XP SP2 was finally sent off to the manufacturers at the end of last week and will be made available to users in download and CD over the coming weeks.

But many IT bosses have said they will hold off from installing SP2 and do testing on the update while watching how other early adopter firms cope.

Graham Yellowley, director of technology at Tokyo-Mitsubishi bank, is not planning to install SP2 until the fourth quarter this year.

[/ QUOTE ]
CIO jury: Wait-and-see on Windows XP SP2 (http://zdnet.com.com/2100-1104_2-5303632.html)

If one is security-conscious, XP2 will most likely be unneeded.

[dajoga]

I don't use IE, should I still get the plug for my 98se?

[Estragon]

This patch is for Windows XP.

For 98se, open IE and go to Tools - Windows Update. If there are updates for your version, they will be listed. You can choose those you wish to install.

Even if you don't use IE, I can't see any harm in updating the security patches for it.

[dajoga]

Thanks, Esty--your answer seems familiar, I'll bet I asked that question b/4 but can't remember--ooooo...these "hereafter" moments are gettin' to me.

[dajoga]

[ QUOTE ]
Estragon said:
This patch is for Windows XP.

For 98se, open IE and go to Tools - Windows Update. If there are updates for your version, they will be listed. You can choose those you wish to install.

Even if you don't use IE, I can't see any harm in updating the security patches for it.




[/ QUOTE ]

A question about two updates:

What is MS Root Certificate Program? Do I need that?
Windows Media Player 9 Series--is that a good one or not?