[42191] in bugtraq
RE: Did MS pull an Ilfak? (MS patch bindiff results)
daemon@ATHENA.MIT.EDU (Greg Wroblewski)
Sat Jan 14 15:36:14 2006
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Date: Tue, 10 Jan 2006 13:39:28 -0800
Message-ID: <87132D865951404C8C8B0D68FCE0466C0796B758@RED-MSG-41.redmond.corp.microsoft.com>
From: "Greg Wroblewski" <Greg.Wroblewski@microsoft.com>
To: "Joe Polk" <listuser.jav@gmail.com>, "Brett Glass" <brett@lariat.org>
Cc: <bugtraq@securityfocus.com>
Content-Transfer-Encoding: 8bit
The only attack vector we know about for Win9x, ME platforms is through
printing. I'm afraid that "fixing" that would break some functionality.
Greg
------------
This post is provided as is and confers no rights or whatever.
-----Original Message-----
From: Joe Polk [mailto:listuser.jav@gmail.com]
Sent: Tuesday, January 10, 2006 6:21 AM
To: Brett Glass
Cc: bugtraq@securityfocus.com
Subject: Re: Did MS pull an Ilfak? (MS patch bindiff results)
Brett Glass wrote:
>Question: Is Ilfak's patch still needed for Windows 95, 98, SE and ME
>systems, for which Microsoft is refusing to provide a patch? To what
>extent are these systems vulnerable if not patched?
>
>--Brett Glass
>
>
>
>
Actually, Ilfak never tested his patch on a Win 9x machine. Steve
Gibson, however, plans to write a
patch for 95, 98, and ME if Microsoft doesn't.
JP
