Re: MS02-023 does not patch actual issue!

[Tom Gilder <tom () tom me uk>]

On Thursday, May 16, 2002, 4:46:18 PM, you wrote:
> I was unable to run the demonstration code on
> http://sec.greymagic.com/adv/gm001-ax/.
> I get the following error:
> "An error has occurred in this dialog."
> ...
> I am running Windows XP Professional 32bit with the latest patches.

GreyMagic software stated that:

> As a result of that incomplete "patch" IE5 and IE5.5 are still very much
> vulnerable to this attack in other resources. For a demonstration see
> http://sec.greymagic.com/adv/gm001-ax/.

If you have Windows XP, you will have IE6.


-- 
Tom Gilder
tom () tom me uk