http://www.microsoft.com/technet/security/...n/MS07-061.mspx

A patch released on Tuesday (Patch Tuesday) fixes this URI problem:

http://www.pcworld.com/article/id,139598-c...gs/article.html

See also this:

http://www.microsoft.com/technet/security/...n/MS07-061.mspx

Note the following:

"Microsoft has not identified a way to exploit this vulnerability on any Windows operating system that is running Internet Explorer 6"

Which explains why Win-2000 is not listed as vulnerable.

So I guess the vulnerability lies in IE7 files... ?

What is an URI ?

URI = Unique Resource Identifier

URI = In http://msfn.org/board, '/board' is the URI.

Basically the part of web address after the domain is a URI. As for us being vulnerable, there is no real way to tell unless we had proof-of-concept code. Although systems with IE7 are the ones being affected I think we could safely say we're safe from it.

Edited November 14, 200718 yr by Chozo4