|
| IE7 is immune to the VML exploit |
 |
Sat, 23 Sep 2006 05:46:42 +000 |
Internet Explorer 7 is immune to the VML exploit receiving so much press over
the past few days. A patch is anticipated by October 10, but may be released
earlier (see 2nd Security Centre blog entry listed below)
Information about IE VML vulnerability posted at MS.
http://www.microsoft.com/technet/security/advisory/925568.mspx
http://support.microsoft.com/kb/925568
Jesper has also posted information about how to mitigate the threat as well:
http://msinfluentials.com/blogs/jesper/archive/2006/09/19/Block-VML-Zero_2D00_Da
y-Vuln-on-a-domain.aspx
http://msinfluentials.com/blogs/jesper/archive/2006/09/22/More-options-on-protec
ting-against-the-VML-vulnerability-on-a-domain.aspx
Microsoft Security Response Centre blog:
http://blogs.technet.com/msrc/archive/2006/09/19/457560.aspx
http://blogs.technet.com/msrc/archive/2006/09/22/458266.aspx
|
| Post Reply
|
| Re: IE7 is immune to the VML exploit |
 |
Sun, 24 Sep 2006 04:39:05 +000 |
Good to know. Wanna bet that there WILL be no ink on this amongst the punditry
and 'mainstream' media? ...the sound of one hand clapping....
|
| Post Reply
|
| Re: IE7 is immune to the VML exploit |
 |
Mon, 25 Sep 2006 04:56:30 +000 |
Nah, I think that a great announcement would be IE 7 being more standards
complaint or passing the Acid2Test. That would be a REALLY great thing.
IE is a great browser and I do not intend starting a fight here (this being a
mostly pro-IE site), but I think IE is missing a couple of essential features
like:
-Better support for web standards.
-A download manager with the ability to pause and resume downloads.
-Better and easier favorites, feeds and history management.
Browsers like Firefox, Opera and Safari have implemented these things very
nicely, and these are also the main reason why I do not use IE 7 as my main
browser.
Hopefully there are some surprises for the final release of IE 7
|
| Post Reply
|
| Re: IE7 is immune to the VML exploit |
 |
Mon, 25 Sep 2006 05:53:19 +000 |
I don't think that there is anything wrong with the way that IE7 does feeds,
works fine here for the feeds I use it for. I beleive a download manager is
going to be in the next major revision of IE (IE8) and microsoft announced a
while back that they want to have shorter periods between revisions so it's
possibly not that long a wait away. As for web standards, IE usually has scored
fairly badly here but I think that IE7 works quite well at adhering to most
standards and personally I feel ACID2Test doesn't really prove anything because
no developer would ever use that mishmash of code on a site (my copy of firefox
1.5.07 also fails Acid2Test)
Out of my pick of third party browsers I'd choose opera though, i'm not a big
fan of firefox.
|
| Post Reply
|
| Re: IE7 is immune to the VML exploit |
 |
Mon, 25 Sep 2006 17:31:46 +000 |
Nice of you to segue into an IE7 wish list, Salival.
But, since you asked, how many browsers pass the Acid-2 test? Opera, and.....no
one else. If Safari passes the test, I wouldn't care, as it does not run
Windows.
Moreover, IMO, and feel free to correct me, we live in the real world, where
users just want the best tool for the job; I don't see a clamoring for
compliance with the test outside of developers. Since there is no direct enduser
benefit, it remains an esoteric need.
Also, why does the tail need to wag the dog? Shouldn't 'web standards' overseers
take into consideration the browser with, say 90% of the market?
Download management is one of those places where the IE7 team still just does
not get it. Not at all.
Why isn't the Microsoft File Transfer Manager included by default for all
downloads. From everywhere. Simple interface, configurable, all you want from
it, etc.
I hope Ms. Cobb reads this site and can force her minions to include it.
While we're into our IE wish list, can we improve search on the current page.
Something elegant such as in Firefox?
BTW, have you tried Maxthon? Uses the IE engine.
|
| Post Reply
|
|
|
|
|
|
|
|
|
|