You are here: silicon.com > Software > Security Strategy

Microsoft patch fails to plug holes

Holy software Batman...

By Graham Hayday

Published: 17 May 2002 15:00 BST

Microsoft's latest patch for IE 6 has failed to plug at least one of the holes it was meant to fix, and leaves 12 reported bugs un-patched.

The software giant's latest cumulative patch promises to eliminate "six newly discovered vulnerabilities", according to an advisory issued earlier this week, but fails to do so, according to a posting on security mailing list BugTraq.

According to Danish security expert Thor Larholm, Microsoft is guilty of issuing "misinformation" and is "not actively keeping up with the security community and its publications".

Larholm lists the 12 un-patched vulnerabilities here: http://jscript.dk/unpatched/

For more information, see http://online.securityfocus.com/archive/1/272695/2002-05-13/2002-05-19/0

Add comment

Print story with

Email story

Security management is the new black

Outlook flaws could give virus writers a field day

Microsoft security hole enables Mac hacks

Mozilla rebuts Firefox 2.0 bug claims

Oracle patch is holey, says security researcher

In silicon.com

Commentary

Peter Cochrane Peter Cochrane's Blog: Is convergence a fiction? Or could it finally be happening…

Clive Longbottom Quocirca's Straight Talking: A game of two halves Microsoft Virtualisation scores while its SOA bores...

Latest News

Viacom vs Google: YouTube privacy fears

Google Talk finds a home on iPhone

ePassport upgrade scaled back

Barclays gives online users free security software

Probe into loss of 21,000 hospital patient details

Zittrain: Android holds the key to free future

Jobs

Technical Audit Contract 6 months London

I am currently looking for a candidte who is able to Audit and Verify, making wsure that all documentation is correct : Asset List Patch Schedule ...

Websphere IT Specialist / Architect

Trouble shoot and fix technical problems, liaising with product management and technical support to organise a patch if necessary. Websphere IT ...

Security Consultant Ethical Hacking / Penetration Testing - London

Responsibilities: - Deliver security assessment services including network scanning, vulnerability testing, penetration testing, search engine ...

Special Report Focus

CIO50 2008
The silicon.com CIO50 2008 profiles the most influential and innovative tech chiefs in the UK across all industries and organisation size, from the biggest FTSE100 companies to high growth dot-com start ups and the public sector. The list was voted on by the UK CIO community and a panel of experts. Find out more in our latest special report.