Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: more Internet explorer problems: IE 6, 7, 8 & 9.

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Open Discussions

This thread has been marked as locked.
taffy078 more Internet explorer problems: IE 6, 7, 8 & 9.
Contributor 20th Sep, 2012 11:24
Ranking: 408
Posts: 1,340
User Since: 26th Feb, 2009
System Score: 100%
Location: UK
I've just been alerted to a recent Microsoft alert:
Security Advisory (2757760), Published: Monday, September 17, 2012.

http://technet.microsoft.com/en-us/security/adviso...

They recommend as a temporary fix users instal EMET - "Enhanced Mitigation Experience Toolkit". Everyone seems to agree that there are real problems at the moment but there seems to have been many comments on the pros & cons of using EMET.

Many have suggested using another browser until the issue is fixed.

And now it seems that Microsoft are issing a fix tomorrow:

http://technet.microsoft.com/en-us/security/bullet...

So here I am - an average typical user - who has just lived through a week or so thinking all was well in the great universe of personal computing when in fact my PC was at risk.

Was I alone in being blissfully unaware of the potential for disaster? Were you aware? !! :0)

PS Tried to put this in Programs but the system hung up on the manufacturer window - again.


--
taffy078, West Yorkshire, UK

Desktop: Compaq Presario (OEM) 32 bit / AMD Athlon / 2 GB RAM
XP Home - SP3/ IE8/ Norton IS - Secunia PSI v2.0.0.3003

Laptop: Win 7 / IE11 / PSI v2.0.0.3003

Maurice Joyce RE: more Internet explorer problems: IE 6, 7, 8 & 9.
Handling Contributor 20th Sep, 2012 11:52
Score: 11786
Posts: 9,035
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Notifications were available:
BBC News - http://news.bbc.co.uk/1/hi/7784908.stm

You can sign up to - Secunia Advisories: Latest updates on vulnerabilities using your online Profile.

An RSS feed is available that keeps you up to date on such matters.
http://krebsonsecurity.com/2012/09/microsoft-issue...

Despite what Microsoft state other security experts claim EMET will not nullify the problem.

I suspect there are billions like you. Secunia only has a few members in global terms & even you missed it by using PSI!!

I new about it & as a IE only user did nothing & intend to do nothing except by being careful until a fix is available on Friday.

Your hyperlinks reveal a 404 error. I can move the thread for you but seems an ideal selection to me.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
Anthony Wells RE: more Internet explorer problems: IE 6, 7, 8 & 9.
Expert Contributor 20th Sep, 2012 12:15
Score: 2445
Posts: 3,336
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hi taffy ,

Just to add that I picked up the zero-day notification on at least two other "news" websites (as well as the BBC) on or about the 16th .

PSI 2.0.0.3003 displays the relevant SA50626 in the "secure browsing" since the 17th .

Zero-days are not very common but this one serious with even more serious "potential" . The bigger problems are when known patches for things like Flash are left for weeks (or often(very much) longer) unapplied .

At least you know about it .

Take care

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
taffy078 RE: more Internet explorer problems: IE 6, 7, 8 & 9.
Contributor 20th Sep, 2012 12:31
Score: 408
Posts: 1,340
User Since: 26th Feb 2009
System Score: 100%
Location: UK
Helo, Maurice.

I didn't see the BBC article.

I was under the impression that when an item appeared in Secunia Advisories, it generated a new thread in Vulnerabilities. That would make sense wouldn't it rather than expect us to check Advisories every day or whatever.

I did check Vulnerabilities first but the only IE item there was a few months old.

I'm afraid that I'm not into RSS, twitter, facebook !!

At first it looked as if PSI missed the problem but of course it's not that simple is it? Previous versions of PSI showed IE 8 as vulnerable but the latest doesn't - it shows IE8 as patched.

Sorry about the hyperlinks - I hadn't noticed that they were shortened in my post otherwise I would have highlighted that deliberate mis-spells had been inserted by the author on Norton's forum for security reasons:

http://technet.microsoft.com/en-us/security/adviso... / 'advisory' was mis-spelt.

http://technet.microsoft.com/en-us/security/bullet... / 'bulletin' was mis-spelt

PS this is weird - I couldn't post the mis-spelt links. Something in the system (Secunia?) corrected them.




--
taffy078, West Yorkshire, UK

Desktop: Compaq Presario (OEM) 32 bit / AMD Athlon / 2 GB RAM
XP Home - SP3/ IE8/ Norton IS - Secunia PSI v2.0.0.3003

Laptop: Win 7 / IE11 / PSI v2.0.0.3003
Was this reply relevant?
+0
-0
Maurice Joyce RE: more Internet explorer problems: IE 6, 7, 8 & 9.
Handling Contributor 20th Sep, 2012 13:35
Score: 11786
Posts: 9,035
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 20th Sep, 2012 13:40
I was under the impression that when an item appeared in Secunia Advisories, it generated a new thread in Vulnerabilities. That would make sense wouldn't it rather than expect us to check Advisories every day or whatever.

In my view not a good idea - there are sometimes up to 20 per day. This leaves the Forum open to spammers as seen in the past. I think the Forum should be for user problems & solutions.EDIT I note their are 17 in my mail folder so far today - many will be of no value to an average home user using the Windows OS

The PSI sign up to receive notifications is simple enough the same as setting up an RSS feed - they arrive in your mail box & can be controlled by individual mail folders for leisure reading.

The notification via a PSI scan is/has been an issue. The scan result page is not totally accurate & never has been for true security advice. It has difficulty in informing the user that:

1. A programme is fully patched & secure.
2. It is completely patched by the user but remains vulnerable due to pending action by the vendor. Adobe Flash as pointed out by Anthony is a classic. If we are to trust Secunia that remains vulnerable as shown here:
http://secunia.com/advisories/47161/

For this you require Secure browsing switched on in any PSI version prior to 2.0.0.4003 which only shows browsers rather than an array of programmes.

Are U trying to publish these?
http://technet.microsoft.com/en-us/security/adviso...

http://technet.microsoft.com/en-us/security/bullet...

Hope this helps

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
taffy078 RE: more Internet explorer problems: IE 6, 7, 8 & 9.
Contributor 20th Sep, 2012 13:54
Score: 408
Posts: 1,340
User Since: 26th Feb 2009
System Score: 100%
Location: UK
thanks Anthony, Maurice.

Maurice - when I posted the links, I took care to ensure that the whole of the link appeared. I presume that there is a cut-off or security thing that cuts them in half. Yours appear in part only, as well! :0)


--
taffy078, West Yorkshire, UK

Desktop: Compaq Presario (OEM) 32 bit / AMD Athlon / 2 GB RAM
XP Home - SP3/ IE8/ Norton IS - Secunia PSI v2.0.0.3003

Laptop: Win 7 / IE11 / PSI v2.0.0.3003
Was this reply relevant?
+0
-0
Maurice Joyce RE: more Internet explorer problems: IE 6, 7, 8 & 9.
Handling Contributor 20th Sep, 2012 14:06
Score: 11786
Posts: 9,035
User Since: 4th Jan 2009
System Score: N/A
Location: UK
That is correct. But yours are truncated & do not reveal the site - not sure how U are posting them.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
taffy078 RE: more Internet explorer problems: IE 6, 7, 8 & 9.
Contributor 20th Sep, 2012 15:08
Score: 408
Posts: 1,340
User Since: 26th Feb 2009
System Score: 100%
Location: UK
Last edited on 20th Sep, 2012 15:12
This really is strange, Maurice.. I copied the links from a forum post elsewhere and then pasted them onto Notepad. I now realise that it's Notepad that is mis-spelling them.

I've just pasted them into Word and they appear normally:

http://technet.microsoft.com/en-us/security/bullet...
http://technet.microsoft.com/en-us/security/adviso...

As I draft this, the links are complete, not truncated. EDIT: but they are truncated when they appear here.

So why does Notepad mis-spell the links by adding a 'O' (or a '0')?

--
taffy078, West Yorkshire, UK

Desktop: Compaq Presario (OEM) 32 bit / AMD Athlon / 2 GB RAM
XP Home - SP3/ IE8/ Norton IS - Secunia PSI v2.0.0.3003

Laptop: Win 7 / IE11 / PSI v2.0.0.3003
Was this reply relevant?
+0
-0
Maurice Joyce RE: more Internet explorer problems: IE 6, 7, 8 & 9.
Handling Contributor 20th Sep, 2012 15:21
Score: 11786
Posts: 9,035
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 20th Sep, 2012 15:24
Testing using Notepad.
http://technet.microsoft.com/en-us/security/bullet...

If you copy other than from the actual source of the link it may well fail.

I copied from my browser into Notepad - copied it from Notepad & bingo it works.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
Anthony Wells RE: more Internet explorer problems: IE 6, 7, 8 & 9.
Expert Contributor 20th Sep, 2012 15:57
Score: 2445
Posts: 3,336
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 20th Sep, 2012 16:05
Hello again ,

I can confirm that , in the past - I think Mogs' had this problem at one time - simply copying a link :eg: one in another post to this Forum when it has been truncated gives you an error . This applies to some of Maurice's links in this thread . You can click the link and it works , but copy it into your browser address bar and it doesn't .EDIT See this link in Maurice's second post :-

http://technet.microsoft.com/en-us/security/adviso...

The only really sure fire method is to follow the link to the website or whatever and then copy/paste the "full" url which appears in your browser address bar to your post .

In addition , i normally recheck my actual post and link validity after replying .

Hope that helps .

Anthony


--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
Maurice Joyce RE: more Internet explorer problems: IE 6, 7, 8 & 9.
Handling Contributor 20th Sep, 2012 16:58
Score: 11786
Posts: 9,035
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Anthony,
Just testing this link:

https://secunia.com/community/forum/thread/show/13...

Looks like your presence is required for round three before there are more DEMANDS to comply with!

Have fun.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
Anthony Wells RE: more Internet explorer problems: IE 6, 7, 8 & 9.
Expert Contributor 20th Sep, 2012 17:13
Score: 2445
Posts: 3,336
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hi Maurice ,

Link's working fine .

Not sure I can do much more other than sit in front of his PC with him and show him how to do research - at his cost of course . I certainly do not have the time here on the FOrum to construct a detailed research programme for someone who does not seem to read what I have written so far.

I mean load PSI 2 , set auto-update/prompt , make sure only JDK 7 U 7 is loaded and confirm with the PSI . Reload LO (if necessary) and run a scan with the PSI then and as often as possible thereafter to narrow down the time/place as and when the old JDK rolls in .

I'll wait and see what he comes up with next .

Will catch up with my emails sometime in the next 12 months :))

Take care

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
Websafe RE: more Internet explorer problems: IE 6, 7, 8 & 9.
Member 21st Sep, 2012 21:46
Score: 79
Posts: 105
User Since: 24th May 2009
System Score: 100%
Location: NL
Hello all,

Microsoft has (just) released an update which also addresses the vulnerability mentioned in the first post of this thread. info-link:
https://technet.microsoft.com/en-us/security/bulle...

The update can be downloaded from:
http://update.microsoft.com/microsoftupdate

Websafe.
Was this reply relevant?
+0
-0
taffy078 RE: more Internet explorer problems: IE 6, 7, 8 & 9.
Contributor 23rd Sep, 2012 08:45
Score: 408
Posts: 1,340
User Since: 26th Feb 2009
System Score: 100%
Location: UK
Thanks all for your helpful comments.

One final note: I've just checked out my wife's laptop (win7 Home Premium - IE9) and found that the Microsoft Automatic Updater hadn't picked up yesterday's security updates.

Has anyone else had this?




--
taffy078, West Yorkshire, UK

Desktop: Compaq Presario (OEM) 32 bit / AMD Athlon / 2 GB RAM
XP Home - SP3/ IE8/ Norton IS - Secunia PSI v2.0.0.3003

Laptop: Win 7 / IE11 / PSI v2.0.0.3003
Was this reply relevant?
+0
-0
Maurice Joyce RE: more Internet explorer problems: IE 6, 7, 8 & 9.
Handling Contributor 23rd Sep, 2012 10:06
Score: 11786
Posts: 9,035
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Was/is this set up correctly - is the PC on 24/7 or it may have missed your schedule?

https://akkkug.bay.livefilestore.com/y1pXZMJunQsyo...

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
taffy078 RE: more Internet explorer problems: IE 6, 7, 8 & 9.
Contributor 27th Sep, 2012 11:03
Score: 408
Posts: 1,340
User Since: 26th Feb 2009
System Score: 100%
Location: UK
thanks for jogging my memory in the 'printer trojan' thread, Maurice.

The laptop MS updates are set to automatic. My wife had unplugged the laptop and put it away while we were away a few days. I would have thought that when she next set it up and powered it on, the delayed auto aupdates would have kicked in straightaway, but it didn't. I'll check the settings again as you suggest.

This can be locked now.

Thanks

--
taffy078, West Yorkshire, UK

Desktop: Compaq Presario (OEM) 32 bit / AMD Athlon / 2 GB RAM
XP Home - SP3/ IE8/ Norton IS - Secunia PSI v2.0.0.3003

Laptop: Win 7 / IE11 / PSI v2.0.0.3003
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer