Home › Blogs › str's blog

IE 7 bug was in Outlook Express, not in IE - true or not?

Sat, 2006-10-21 08:06 — str

As I blog here yesterday that less than a day after Microsoft released Internet Explorer 7, Secunia reported the first vulnerability in the final version of the new Web browser - turns out questionable and denied by Microsoft.

Here's what they're saying in Microsoft Security Response Center Blog:

These reports are technically inaccurate: the issue concerned in these reports is not in Internet Explorer 7 (or any other version) at all. Rather, it is in a different Windows component, specifically a component in Outlook Express. While these reports use Internet Explorer as a vector the vulnerability itself is in Outlook Express.

But Secunia maintains that IE 7 vulnerability that they reported is correct. They said that the vulnerability is fully exploitable via IE, which is the primary attack vector, if not the only attack vector. Just because a vulnerability stems from an underlying component does not relieve IE or any other piece of software from responsibility when it provides a clear direct vector to the vulnerable component

"Seems like Microsoft is looking to promote the security of IE by hiding behind an explanation that certain vulnerabilities, though only exploitable through the Web browser, are to blame on other Windows components", Secunia CTO Thomas Kristensen said in one interview.

He added, "Microsoft should take responsibility for the vulnerabilities and risks in IE, caused by the browser being integrated in Windows".

Again going back to Microsoft Security Response Center Blog they admit it by denying some reality, hehehe:

While we are aware that the issue has been publicly disclosed, we’re not aware of it being used in any attacks against customers.

In my opinion as long as Microsoft continues to fully integrate their browser (IE) to their OS (Windows); hackers got an open gate to hack the entire system by simply using IE as front or back door. So in this case, even the bug is in Outlook Express, they can still use IE to exploit that Outlook Express bug.

Folks, you better switch to Linux. I'm here to help.

Comments

Wed, 2006-11-01 10:56 — kaizen

HELP HELP !!!! Outlook and other e-mail service provider

Mga chong, help me naman kc may probs mga pc namin. ayaw mag send ng mga emails sa outlook pati kahit gamitin yung mga yahoo at hotmail ayaw din. pero pwedi kmi makareceived. we can browse the msg but pag mag forward or delete or reply ayaw magcontinue, then no page found na. whats the probs?

while we read emails and we want to reply, then pag iclick n yung send ayaw at naghang sya matagal then error sending n.

sa outlook express sabi your microsoft exchange server not configure.

kahit sa qatar expat website hindi ako makapost. pero d2 pwedi bakit kaya?????

HELP !!!!
==========
Mabuhay tayong lahat mga Filipino!
Pinoy ako Pinoy tayo!
Kaya natin Ito!
Ipakita natin ang Galing ng Pinoy sa Buong Mundo.

Sat, 2006-11-04 01:37 — niceguygeek

mukhang ang problema mo ay

mukhang ang problema mo ay ang network connection.

saan ba yan sa bahay or sa trabaho?

kung sa office, try mong compare sa ibang PC na ka network nya.

pag sa haus naman, if possible, try to use other PC or bring home a notebook para ma try mo kung sa network nga or isolated sa PC mo mismo.

pag sa network, we need to understand more ur case. like ur network setup, etc.

pag isolated ang case sa PC mo, ang best solution jan, reformat mo na lang.

let us know dude, para matulungan ka namin.

ingatz.

niceguy

Sat, 2006-11-04 10:16 — sherwinaval

Let be formatting your last resort

just a suggestion from the previous post...

Let be formatting your last resort...

Try scanning your pc with any reliable anti spyware and anti virus program. May mga cases na kaya na block ang transaction mo sa web ay may spyware or virus sa pc mo.

Tama rin ang suggestion nila na isolate mo muna kung sa isang pc lang nangyayari ito. Kung network wide, try configuring your router/server baka may gumalaw. Kung sa isang pc lang naman, try scanning. kapag lahat na ginawa mo at ayaw pa rin, then that should be the time na mag reformat ka.

afaik, hindi pwede i block basta basta ng isp's ang ports 25, 80, 8080, 443 dahil yan ang default ports for the web.

anyway, try mo muna mga suggestions.. baka sakali magawa pa =D

Sat, 2006-11-04 07:05 — kaizen

Sa ISP provider ang problem

thank you sa reply niceguy. we have ISA2004, WinXP, winserver. pero inalis ko n yung server, i connected directly sa DSL business line, ganun p din. sa outlook okey n ang send and receive to our mail server abroad pero pag sa yahoo, hotmail, qatar expat forum, i cant post, send, reply, delete ng mga msg. ive read something n its from ISP n they blocked port 25. maybe this is the reason why. i cahnge daw yata sa port 587. bka meron tga Qtel dyan help naman. kahit sa IP address lang namin iunblocked.

Sarap kasama sa volunteers days!!! panalo sa damin g pagkain. eat all you can. hehehehe
=====================
Mabuhay tayong lahat mga Filipino!
Pinoy ako Pinoy tayo!
Kaya natin Ito!
Ipakita natin ang Galing ng Pinoy sa Buong Mundo.

Wed, 2006-11-01 11:18 — kaizen

this is whats happening

The page cannot be displayed
Explanation: The Web server connection was closed.

Try the following:

* Refresh page: Search for the page again by clicking the Refresh button. The timeout may have occurred due to Internet congestion.
* Check spelling: Check that you typed the Web page address correctly. The address may have been mistyped.
* Access from a link: If there is a link to the page you are looking for, try accessing the page from that link.
* Contact website: You may want to contact the website administrator to make sure the Web page still exists. You can do this by using the e-mail address or phone number listed on the website home page.

Technical Information (for support personnel)

* Error Code 64: Host not available
* Background: The connection to the Web server was lost.

kahit may post ako sa yahoogroups eto lumalabas. pero d2 pwedi ako makapagreply
=============================

Mabuhay tayong lahat mga Filipino!
Pinoy ako Pinoy tayo!
Kaya natin Ito!
Ipakita natin ang Galing ng Pinoy sa Buong Mundo.