IE6 was unsecured for 284 days in 2006

Slashdot posted a link to a washingtonpost article compiling the number of days IE6 had open exploit code with no fixes from Microsoft. The result is more than 9 months (284 days) of the year, the IE6 browser had known unpatched security flaws. There was also another 98 days without fixes to IE flaws that criminals were using to gain personal and financial data.

Could a customer sue Microsoft over his losses because of the lack of support for the browser? While Microsoft enforces Internet Explorer as the default browser in all it's operating systems, this causes the majority of people to go with the crowd and use what's already there. And with the results given from the article, I think Microsoft should be held legally accountable for the loss of millions of user data, and in the future, they have a choice of either removing IE from their system, or showing one of those scary warning signs they have to the user saying "We do not guarantee the confidentiality of the information you send and receive over the internet if you use our Internet Explorer" Just like what they did when they lost the lawsuit against Sun for licensing their own modified JRE.

Again, MS Word Code Execution Exploit

A third MS Word code execution exploit has been posted that allows code execution on the victim PC by opening the infected word document. While Microsoft have not yet publicly confirmed the vulnerability, the United States Computer Emergency Readiness Team issued a warning in this regard. More on the story comes from eWeek.

Another day, another zero day flaw in Microsoft

Just one day after the zero day flaw in Word was announced, another zero day flaw has been discovered in Windows Media Player. The flaw resides in the WMVCORE.DLL library that handles .ASX files. Microsoft have not yet released a fix for the problem, and did not even report it.

Click here for the source and some details on how this flaw works, and how to protect yourself against it.