The only attack vector we know about for Win9x, ME platforms is through printing. I'm afraid that "fixing" that would break some functionality. Greg ------------ This post is provided as is and confers no rights or whatever. -----Original Message----- From: Joe Polk [mailto:listuser.jav@xxxxxxxxx] Sent: Tuesday, January 10, 2006 6:21 AM To: Brett Glass Cc: bugtraq@xxxxxxxxxxxxxxxxx Subject: Re: Did MS pull an Ilfak? (MS patch bindiff results) Brett Glass wrote: >Question: Is Ilfak's patch still needed for Windows 95, 98, SE and ME >systems, for which Microsoft is refusing to provide a patch? To what >extent are these systems vulnerable if not patched? > >--Brett Glass > > > > Actually, Ilfak never tested his patch on a Win 9x machine. Steve Gibson, however, plans to write a patch for 95, 98, and ME if Microsoft doesn't. JP
