Drag-and-drop Flaw in Internet Explorer Reported

[Brett_Tabke]

[pcworld.com...]

Websense, which also issued a warning Monday, wrote that a specially crafted Web site could trick a user into dragging and dropping an item from one window to the other. After the user released the mouse in the newly focused window, code could run without consent, Websense said.

Microsoft said it wouldn't issue an immediate patch, but will instead wait to issue a fix in Service Pack 2 for Windows Server 2003 and Windows XP Service Pack 3, Rathaus said. Microsoft officials were not immediately available for comment.

Related:
[pcworld.com...]

All of the updates will be detectable with Microsoft's Baseline Security Analyzer tool, and the Windows Media Player patch can be detected through Microsoft's Enterprise Scanning Tool, the company says.

Also on Tuesday, the company plans to release an updated version of its Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services, and the Download Center.

[edited by: encyclo at 5:00 pm (utc) on Feb. 15, 2006]
[edit reason] fixed link [/edit]

[DrDoc]

It never ends, does it?

[Brett_Tabke]

Just ran windows update and it found 4 recent patches.

Please update your systems....

[DrDoc]

... and don't forget your Office updates.

[appi2]

Just ran windows update, one of the security updates [Windows XP (KB913446)] keeps failing. Rebooted tried again
Anybody any ideas on what you do if they fail?
Never happened before.

[rj87uk]

Downloading Security Update for Windows XP (KB913446) (update 2 of 6)... failed!

Same here - Failed....

[swones]

Here too, had to download and install it manually.

Simon.

[travelin cat]

Makes me love my Mac more and more.... proud to be a Mac snob since 1984.

[Dijkgraaf]

See [isc.sans.org...] about the problem with that patch.
However I didn't have a problem with it and it installed correctly, so either it is specific to certain configurations, or they have fixed the problem.

[drhowarddrfine]

Makes me love my Mac more and more.... proud to be a Mac snob since 1984.

And Camino is out!

[Vespasian]

Thanks Dijkgraaf for that link. I tried everything until using that, and it worked...

[mattglet]

And Camino is out!

I've seen you mention this about 5 times in other threads. If you want to make it known, make your own post.

[drhowarddrfine]

Only two times and relevant in both cases.

[willybfriendly]

Cute. Downloaded patches, including Office updates, and it crashed Outlook. Too late tonight, but I guess I know what I will be doing tomorrow.

ARRRGH! Thanks Bill.

WBF