Full Disclosure mailing list archives
Security Alert: Unofficial IE patches appear on internet
From: n3td3v <n3td3v () gmail com>
Date: Tue, 28 Mar 2006 16:44:29 +0100
Security Alert: Microsoft who wait for a "Patch Tuesday" to release software solutions for critical bugs are creating a world of opportunity for hackers to take advantage of the situation. Not only do unofficial patches allow script kids to patch systems, but it allows for phishing of malcious fake patches (phishing) to appear on web, which may comtain further evil code unrelated to the initial flaw... Round-up: n3td3v group calls on Microsoft to scrap "Patch Tuesday" for critical flaws: http://groups.google.com/group/n3td3v/browse_thread/thread/98e9cb7eeb8c7a69/81e22fcb72f047b3#81e22fcb72f047b3 n3td3v group warns industry not to release third party patches, as they only aid the script kids and phishers, not the global network of MS Windows system consumers, who will never see or hear the third party patches being released by the third party patch developers (EEYE etc): http://groups.google.com/group/n3td3v/browse_thread/thread/83607ba833b697b0/8f0be3bc9c2436c4 Lastly, we stress Microsoft again to solve the trend of third party patches with all its side effects and security threats attached to it by releasing patches before a "Patch Tuesday" for critical flaws. Finally: We ask people not to download third party patches, because we've heard from a contact within Microsoft that a patch for IE is coming this Thursday.
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Security Alert: Unofficial IE patches appear on internet n3td3v (Mar 28)
- Re: Security Alert: Unofficial IE patches appear on internet Matthew Murphy (Mar 28)
- Re: Security Alert: Unofficial IE patches appear on internet n3td3v (Mar 28)
- Re: Security Alert: Unofficial IE patches appear on internet Micheal Espinola Jr (Mar 28)
- Re: Security Alert: Unofficial IE patches appear on internet n3td3v (Mar 28)
- Re: Security Alert: Unofficial IE patches appear on internet nocfed (Mar 28)
- Re: Security Alert: Unofficial IE patches appear on internet Micheal Espinola Jr (Mar 28)
- Re: Security Alert: Unofficial IE patches appear on internet n3td3v (Mar 28)
- Re: Security Alert: Unofficial IE patches appear on internet Matthew Murphy (Mar 28)
- RE: Security Alert: Unofficial IE patches appearon internet William Lefkovics (Mar 28)
- Re: Security Alert: Unofficial IE patches appear on internet Matthew Murphy (Mar 28)
- Re: Security Alert: Unofficial IE patches appear oninternet GroundZero Security (Mar 29)
- Re: Security Alert: Unofficial IE patches appear oninternet n3td3v (Mar 29)