Text 21387, 81 rader
Skriven 2006-09-22 20:18:00 av CHARLES ANGELICH (1:123/140)
     Kommentar till en text av ALAN ZISMAN
Ärende: IE Hole
===============
123ecc2446ff
win95



Hello Alan - 

AZ> Workaround needed for IE hole 

AZ> By Brian Livingston 

AZ> Microsoft acknowledged this week a new weakness that allows
AZ> hacked Web sites to infect PCs merely by displaying
AZ> specific images in the Internet Explorer browser. 

AZ> The Redmond company hasn't promised to issue a patch until
AZ> the company's next regular Patch Tuesday on Oct. 10,
AZ> although it's possible that a patch might come out earlier. 

AZ> Until then, individual Windows users can protect themselves
AZ> against the flaw by deregistering vgx.dll. This DLL file is
AZ> used by IE to render images that are based on Vector Markup
AZ> Language (VML). 

AZ> Microsoft recommends that users click Start, Run, paste the
AZ> following line into the input box, and click OK: 

AZ> regsvr32 -u "%ProgramFiles%\Common Files\Microsoft
AZ> Shared\VGX\vgx.dll" 

AZ> After Microsoft releases a patch for the problem, you can
AZ> easily reregister the DLL by repeating the procedure
AZ> without the -u switch: 

AZ> regsvr32 "%ProgramFiles%\Common Files\Microsoft
AZ> Shared\VGX\vgx.dll" 

AZ> While the workaround is in effect, Web sites that use VML
AZ> won't display such images properly. Since some sites are
AZ> already using the flaw to infect PCs, however, it's safer
AZ> to use the workaround even if some sites temporarily look
AZ> different. 

AZ> The above fix works on Windows XP and Server 2003, but the
AZ> security hole also affects Windows 2000 SP4, according to
AZ> Microsoft. For more information, see the Suggested Actions
AZ> (Workarounds) section of MS bulletin 925568. 

AZ> Administrators of networks can use Group Policy to disable
AZ> and reenable the DLL. Details and a downloadable file are
AZ> available at Jesper Johannsson's blog. Be sure to read all
AZ> the follow-up comments on that page, which provide
AZ> important revisions to the procedure as originally posted. 

AZ> The VML hole is unrelated to an ActiveX vulnerability in IE
AZ> that was first reported last week by the French Security
AZ> Incident Response Team (FrSIRT). That flaw hasn't yet been
AZ> widely taken advantage of. Workarounds to protect against
AZ> it are described in FrSIRT advisory 3593 and Microsoft
AZ> bulletin 925444. 

AZ> As always, everyone at Windows Secrets recommends that you
AZ> use the Firefox browser instead of IE, which has numerous
AZ> unpatched security problems. IE flaws, however, should be
AZ> patched whenever possible. Even if you don't use IE, its
AZ> components remain in Windows and can still be exploited in
AZ> some cases. 

An automated repair is located at this website:
http://isotf.org/zert/ 

>
>        ,                          ,
>      o/      Charles.Angelich      \o       ,
>     <|                              |>  __o/
>     / >          USA, MI           < \   __\__
 

--- * ATP/16bit 2.31 * 
... DOS the Ghost in the Machine! http://www.devedia.com/dosghost/
 * Origin: Try Our Web Based QWK: DOCSPLACE.ORG (1:123/140)