MS02-064 fix time

From: David Litchfield (david@ngssoftware.com)
Date: 11/14/02


From: "David Litchfield" <david@ngssoftware.com>
To: <bugtraq@securityfocus.com>
Date: Thu, 14 Nov 2002 13:41:53 -0000

MS02-064 discusses a vulnerability where clicking on start->run can lead to
an unsuspecting user running another (malicious) user's trojan.

I warned MS of this back in on September 6th 1999 whilst 2k was still in
BETA (See the bottom of the following mail)
http://security-archive.merton.ox.ac.uk/bugtraq-199909/0145.html

I wonder if this is the longest time it has taken for a "fix" to be made
public after disclosure?

David Litchfield



Relevant Pages

  • Re: SQL Express 2005 beta - OleDB/ADO works, ODBC / dbExpress - impossible
    ... there's a newsgroup dedicated to SQL Express 2005 Beta. ... Directions for access are at a link at the bottom of ...
    (microsoft.public.sqlserver.msde)
  • Re: Microsoft beta anti-spyware locks up trying to remove a specific i
    ... > My reply is at the bottom of your sent message: ... does anyone know how to get rid of ... > to remove this trojan but I understand that it does remove some. ... > Some general malware cleaning tools and processes. ...
    (microsoft.public.security.virus)
  • Re: beta?
    ... MS does have a x64 OS. ... Whether yours is beta or not is difficult to say. ... Does it have a version number in the bottom right hand corner of the ... Beta versions usually display the version number in this way and ...
    (microsoft.public.windowsxp.basics)
  • Re: DOCX in Word 2004
    ... Microsoft Office Open XML File Format Converter for Mac 0.2.1 (Beta) ... Just so happens that's the one you want:-) Scroll to the bottom of the third ...
    (microsoft.public.mac.office.word)
  • Re: Firefox1.0.8 Doesnt work in Delphiforums chat
    ... Or get camino, if you don't need ... all your extensions. ... Didn't know it had changed from Beta... ... it's best to bottom post to Usenet - place your new text *below* quoted text so that others can read from top to bottom to follow the conversation in chronological order. ...
    (comp.sys.mac.system)