MS07-061 - does it apply to win-98?

[98 Guy]

http://www.microsoft.com/technet/security/...n/MS07-061.mspx

A patch released on Tuesday (Patch Tuesday) fixes this URI problem:

http://www.pcworld.com/article/id,139598-c...gs/article.html

See also this:

http://www.microsoft.com/technet/security/...n/MS07-061.mspx

Note the following:

"Microsoft has not identified a way to exploit this vulnerability on any Windows operating system that is running Internet Explorer 6"

Which explains why Win-2000 is not listed as vulnerable.

So I guess the vulnerability lies in IE7 files... ?

[eidenk]

What is an URI ?

[Chozo4]

URI = Unique Resource Identifier

URI = In http://msfn.org/board, '/board' is the URI.

Basically the part of web address after the domain is a URI. As for us being vulnerable, there is no real way to tell unless we had proof-of-concept code. Although systems with IE7 are the ones being affected I think we could safely say we're safe from it.

Edited November 14, 2007 by Chozo4