Re: MS Security Bulletins

["Calum Power" <enune () fribble net>]

> MS04-038 CRITICAL Cumulative Security Update for Internet Explorer
> (834707)
> Five remote code execution and three information disclosure
> vulnerabilities exist in Internet Explorer.

Is it just me, or does this signal a push for a FULL code-audit on IE?
Microsoft have been plagued by the vulnerabilities discovered in their
packages (MS-RPC, LSASS) over the past 2 years, however, the vulns
discovered in IE have been pushed by the wayside without too much fuss.

It is about time Microsoft started taking note of the amount of reports
they are receiving in one of their 'flagship' products, and order a
complete, professional (did I say third-party? They already employ 30+
secure programming 'experts') audit on their most seemingly vulnerable
product.

Just my $0.02AUD worth =)

Calum
--
Calum Power
- Cultural Jammer
- Security Enthusiast
- Hopeless Cynic
enune () fribble net
http://www.fribble.net

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html