Latest Version of MyDoom Exploits New IE Flaw

techentin writes " CNN Money is reporting a new and improved MyDoom variant which is spread by a hyperlink in email. Clicking the link connects the user to an infected machine, which exploits a recently discovered buffer overflow in Internet Explorer. McAfee has a more detailed description. Is this yet another good reason for running Firefox?" CNET also has a story.

Awww, Microsoft is so sweet

[Anonymous Coward]

Give Firefox [mozilla.org] such a big present for their 1.0 release.

LIES

[Anonymous Coward]

A bug in IE? I won't believe it till I see i--

In other news...

[simdude585]

Microsoft today announced that it was going to leave IE users to fix their own patches...

teach kids that IE is dangerous

[t_allardyce]

Can they start teaching in school that using IE is like having un-protected sex with 15 donkeys? or would Microsoft complain?

Wow!

[mindaktiviti]

People still use IE?

big deal

[Anonymous Coward]

ok so they accidently leave one bug in their browser and everybody jumps all over them. big deal!

You Microsoft poeple are getting old...

[vettemph]

Is this yet another good reason for running Firefox?

No, It's a good reason for switching to linux so I don't have to hear you bitch anymore.

Could be a trick

[SlayerofGods]

How do we know the link to the story isn't just a trick to get us infected?

Good timing

[Anonymous Coward]

A patch has just been released:

http://www.mozilla.org/products/firefox/ [mozilla.org]

Re:teach kids that IE is dangerous

[Ayaress]

I used a simmilar metaphor (using IE without a firewall is like having unprotected group sex blindfolded was the one I used). One person I told this two actually STOPPED using Mozilla, though, so I tend to stay away from the sex metaphors now.

Re:Awww, Microsoft is so sweet

[Anonymous Coward]

I would agree with you, except it seems that IE exploits are found pretty much every day that ends in "y".

Re:Awww, Microsoft is so sweet

[Dr Caleb]

Release? It wasn't 'released', it 'escaped' . . . ;)

If only

[fluxrad]

Man, if only there were some browser we could use instead of IE...

Oh well.

Microsoft should be praised for IE.

[Anonymous Coward]

A seemingly infinite number of flaws in a finite piece of code, this is quite an achievement.

Re:In other news...

[Zonnald]

Source?

Or are you just trying to be fawnnee?

Re:CNN Story

[w1r3sp33d]

Now show him http://slackware.com/ [slackware.com] and he shall become more powerful than you can possibly imagine.

Sorry? IE?...

[Anonymous Coward]

Oh yes... that's that web browser that people used to use before FireFox came along isn't it...

How quaint, people are still using it...

Another reason Windows isn't ready for the desktop

[coupland]

I've been running Linux on my main desktop for years, and recently I've really been considering switching to Windows. After all, it's got some cool apps, and while I wouldn't call it "feature complete", I say they've done a good job of implementing many of the best features of Linux and OSX. However it's articles like this that convince me it's still a bit early to switch to Windows.

All told they've made some real inroads in servers, and the desktop experience is improving with each release (the current unstable branch -- AKA "XP" -- has implemented the theme concept long popular in KDE and Gnome!) however I think it's still premature to declare Windows ready for prime time on the desktop.

Re:CNN Story

[mind21_98]

It's not the most popular browser till mozilla.org gets Slashdotted! :)

Comment removed

[account_deleted]

Comment removed based on user account deletion

Will microsoft release a knowledge base article

[xutopia]

telling us to stop clicking on hyperlinks?

Re:Awww, Microsoft is so sweet

[superpulpsicle]

Despite what mozilla marketing said, the "PR" was the biggest reason why so many weren't ready to try it. Some people said it stood for...

public-release

pre-release

post-ready

potentially-redhot

protected-by-raven

pissed-on-redmond

Re:Better the losing side.

[lateralus_1024]

Which is pretty pointless because barrels are usually wooden, and bullets go right thru them.

Re:Software without security issues:

[trentblase]

The compiler automagically builds in the vulnerability. They all do that nowadays.

What?

[imemyself]

An exploit affecting IE?! That's something you don't hear everyday.

Oh, wait...

Re:Awww, Microsoft is so sweet

[Fortran IV]

Does 'Y' count as a vowel? What about 'W'?

Y can be a vowel or a consonant. W seems to be mainly an expletive, these days.

Re:Awww, Microsoft is so sweet

[Airconditioning]

So there wont be an exploit released Tomorrow? :D

BPS

[tepples]

No software is bulletproof.

You've never played Hatris for NES, Pipe Dream for NES, Faceball 2000 for Game Boy or Super NES, or Yoshi's Cookie for Super NES. All were published by a Japanese company called BPS, for Bullet Proof Software.

what does a nonexecutable flag fix for 1000 alex?

[sholde4]

need i say more?

Re:[Oblig] Trek?

[Neoncow]

We are the Borg. Lower your trust levels and apply our patches. We will add your financial and technological distinctiveness to our own. Your culture will adapt to service us.

Re:Awww, Microsoft is so sweet

[cerberusss]

Appropriate Klingon-programmer quote: "What is this talk of 'release'? Klingons do not make software 'releases'. Our software 'escapes' leaving a bloody trail of designers and quality assurance people in its wake."