Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Zero-day WMF flaw underscores patch problems
Robert Lemos, SecurityFocus 2006-01-12

For four days in January, network administrators and security-savvy home users had a choice: Download and install an unofficial open-source fix for the critical flaw in the Windows Meta File (WMF) format or wait an estimated week for an official patch from Microsoft.

Comments Mode:
What Microsoft needs to be doing... 2006-01-12
Eric (2 replies)
Re: What Microsoft needs to be doing... 2006-01-13
Matthew Murphy (1 replies)
Alternative solution 2006-01-13
mxb (2 replies)
Re: Alternative solution 2006-01-13
DSMatthews
Re: Alternative solution 2006-01-13
Anonymous
Make'em pay! 2006-01-13
assurbanipal
It's time to make these big corporations liable for their errors, and pay!

Of course it's impossible to guarantee software to be bug-free, but at least one should demonstrate enough "due diligence" in designing and writing stuff. Something these alleged software giants, and particularly Micro$oft, are not showing.

Enough of zero-liability EULAs! (zero-liability vendor wise, of course). If you sell a product which contains faults that may lead to compromise or other severe incidents (like these BOFs), you should be held liable against damages.

What do you think would happen if a car is sold with a defective air bag system? Nothing?

Do you remember the Firestone case and all their tires? It's time software houses take their responsibilities too!!!

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11368/32955#32955
The Squander of MS Admins && Users 2006-01-13
Anonymous (1 replies)
Re: The Squander of MS Admins && Users 2006-01-16
Anonymous (1 replies)
Does any one see this 2006-01-13
Anonymous
Patch from Guilfanov was not the only one 2006-01-16
Juha-Matti Laurio







 

Privacy Statement
Copyright 2009, SecurityFocus