new IE IFRAME vulnerability (secunia 2 Nov)

Hi

more knowledgable folks may know better but this doesn't look too good to me

details

I'm taking it that IE6SP1 on W98 is vulnerable? and that this cannot be defeated by disabling "launch programs in IFRAME" or similar - otherwise surely it would be suggested as a workaround either at SANS or secunia etc...

best wishes, HJ

 

patch available

...at WindowsUpdate

best wishes, HJ.

 

http://www.microsoft.com/technet/security/bulletin/ms04-040.mspx

Affected Software:
• Microsoft Windows NT Server 4.0 Service Pack 6a
• Microsoft Windows NT Server 4.0 Terminal Server Edition Service Pack 6
• Microsoft Windows 2000 Service Pack 3 and Microsoft Windows 2000 Service Pack 4
• Microsoft Windows XP Service Pack 1
• Microsoft Windows XP 64-Bit Edition Service Pack 1
• Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (Me) "“ Review the FAQ section of this bulletin for details about these operating systems.*


Non-Affected Software:
• Microsoft Windows XP Service Pack 2
• Microsoft Windows XP 64-Bit Edition Version 2003
• Microsoft Windows Server 2003
• Microsoft Windows Server 2003 64-Bit Edition



*Internet Explorer 6 Service Pack 1 on Microsoft Windows NT Server 4.0 Service Pack 6a, on Microsoft Windows NT Server 4.0 Terminal Service Edition Service Pack 6, on Microsoft Windows 98, on Microsoft Windows 98 SE, or on Microsoft Windows Me

 

There is also a IE6 Cumulative security patch for non-sp2 and 9x systems KB889293.

When I went to MS update with WinME, wasn't offered the Iframe patch.

Regads - Charles