<<< Date Index >>>     <<< Thread Index >>>

RE: Did MS pull an Ilfak? (MS patch bindiff results)



The only attack vector we know about for Win9x, ME platforms is through
printing. I'm afraid that "fixing" that would break some functionality.

Greg
------------
This post is provided as is and confers no rights or whatever.

-----Original Message-----
From: Joe Polk [mailto:listuser.jav@xxxxxxxxx] 
Sent: Tuesday, January 10, 2006 6:21 AM
To: Brett Glass
Cc: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: Did MS pull an Ilfak? (MS patch bindiff results)

Brett Glass wrote:

>Question: Is Ilfak's patch still needed for Windows 95, 98, SE and ME
>systems, for which Microsoft is refusing to provide a patch? To what
>extent are these systems vulnerable if not patched?
>
>--Brett Glass
>
>
>  
>
Actually, Ilfak never tested his patch on a Win 9x machine. Steve 
Gibson, however, plans to write a
patch for 95, 98, and ME if Microsoft doesn't.

JP