quote:
Originally posted by lopardo
quote:
Originally posted by Demandred
Might wanna read this
http://www.infoworld.com/article/04/08/18/HNholesinsp2_1.html
the URL says that Researches Found 2 Holes in XP SP2 already
Don't know what that has to do with the languages 
, but, I wouldn't say those are "holes", they are just bugs, and very small ones I think (if it could allow an attacker to remotely execute code, then it would be a big one...)
Security firm Secunia has detailed a new flaw in Internet Explorer that affects users running Windows XP Service Pack 2. The vulnerability involves drag-and-drop, which can be used within a Web page to place a malicious program in the Windows startup folder.
Secunia has branded the issue "highly critical" and says it comes from "insufficient validation of drag and drop events issued from the 'Internet' zone." Users are advised to disable Active Scripting, or use a Web browser other than Internet Explorer.
The security researcher who discovered the flaw has posted proof-of-conccept code, which involves dragging an image across a Web page. But Secunia says it could be simplified to require just one mouse click.
Microsoft, however, brushed off concerns over the potential issue. "Given the significant amount of user action required to execute an attack, Microsoft does not consider this to be a high risk for customers," the company said.
URL to read it.
http://www.betanews.com/article/1093035994
another Post
Microsoft has released the first hotfix for SP2, even before it's long-awaited massive upgrade patch has fully been distributed to all users. The new hotfix is aimed at an IP address connection issue which surfaced shortly after SP2 had made it's debut.
Rob Enderle, principal analyst for technology analysis firm The Enderle Group, stated, "Writing software is a complicated endeavor done by humans, [and] we don't see SP2 as the be-all and end-all, that there will no longer be a need for future patches."
The new hotfix for SP2 patches a problem that the service pack created for some users of virtual private networks (VPN). Though the problem pertains to only a small amount of XP and SP2 users, Microsoft was quick to release the first of what is sure to be several more hotfixes
