Bug on all IE 5,6 and Windows XP SP2 ...

http://www.k-otik.net/bugtraq/08222004.IEDragNdrop.php

Disable Script Java ...

Kappa.

Re: Disable scrypt ... by N

N
Thu Aug 26 23:12:51 CDT 2004

In article <gDhXc.191796$5D1.9019609@news4.tin.it>, Kappa says...

> Bug on all IE 5,6 and Windows XP SP2 ...

> http://www.k-otik.net/bugtraq/08222004.IEDragNdrop.php

> Disable Script Java ...

Better yet, disable MS Internal Exploder!

--
Norman
~Win dain a lotica, En vai tu ri, Si lo ta
~Fin dein a loluca, En dragu a sei lain
~Vi fa-ru les shutai am, En riga-lint

Re: Disable scrypt ... by Karl

Karl
Fri Aug 27 06:21:47 CDT 2004


"N. Miller" <anonymous@discussions.microsoft.com> wrote in message
news:MPG.1b9854a13f124f3e98a38c@msnews.microsoft.com...
> In article <gDhXc.191796$5D1.9019609@news4.tin.it>, Kappa says...
>
> > Bug on all IE 5,6 and Windows XP SP2 ...
>
> > http://www.k-otik.net/bugtraq/08222004.IEDragNdrop.php
>
> > Disable Script Java ...
>
> Better yet, disable MS Internal Exploder!

Unfortunately, you can't. Key parts of IE like the MS HTML rendering
subsystem and the zones feature are core Windows components. Some IE and OE
vulnerabilities still affect you even if you don't use them or have
"uninstalled" them. Moving from IE to, say, Mozilla, removes some of the IE
vulnerabilities but adds all of the Mozilla vulnerabilities, for a net
effect of who knows what. You would have to move to a non-Windows operating
system to totally avoid IE vulnerabilities.

And Mozilla, Netscape, Firefox etc. have all had some serious
vulnerabilities found, one of them unpatched for five years.

IE on Windows XP SP2 is a lot more secure. If you've got XP, IE might be as
safe or safer than Mozilla, who knows.



Re: Disable scrypt ... by MisterKurtz

MisterKurtz
Fri Aug 27 09:22:15 CDT 2004


"Karl Levinson [x y] mvp" <levinson_k@despammed.com> wrote in message
news:uItGkcCjEHA.636@TK2MSFTNGP12.phx.gbl...
>
> "N. Miller" <anonymous@discussions.microsoft.com> wrote in message
> news:MPG.1b9854a13f124f3e98a38c@msnews.microsoft.com...
> > In article <gDhXc.191796$5D1.9019609@news4.tin.it>, Kappa says...
> >
> > > Bug on all IE 5,6 and Windows XP SP2 ...
> >
> > > http://www.k-otik.net/bugtraq/08222004.IEDragNdrop.php
> >
> > > Disable Script Java ...
> >
> > Better yet, disable MS Internal Exploder!
>
> Unfortunately, you can't. Key parts of IE like the MS HTML rendering
> subsystem and the zones feature are core Windows components. Some IE and
OE
> vulnerabilities still affect you even if you don't use them or have
> "uninstalled" them. Moving from IE to, say, Mozilla, removes some of the
IE
> vulnerabilities but adds all of the Mozilla vulnerabilities, for a net
> effect of who knows what. You would have to move to a non-Windows
operating
> system to totally avoid IE vulnerabilities.
>
> And Mozilla, Netscape, Firefox etc. have all had some serious
> vulnerabilities found, one of them unpatched for five years.
>
> IE on Windows XP SP2 is a lot more secure. If you've got XP, IE might be
as
> safe or safer than Mozilla, who knows.
>
>

Can you say FUD



Kurtz