Full Disclosure mailing list archives

Re: MS-02-052


From: full-disclosure () lists netsys com (full-disclosure () lists netsys com)
Date: 19 Sep 2002 14:34:41 -0000

Does anybody else find it disturbing that today's JVM patch can only be installed through Windows Update, and the 
Windows Update site now attempts to install an unsigned control 
(http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.cab) after informing the user to "click Yes on any 
Security Warnings that pop up"?

--
This message has been sent via an anonymous mail relay at www.no-id.com.



Current thread: