Internet Explorer 10's bundled Flash leaves users exploitable

Discussion in 'other security issues & news' started by Dermot7, Sep 7, 2012.

Thread Status:
Not open for further replies.
  1. Dermot7

    Dermot7 Registered Member

    Joined:
    Dec 20, 2009
    Posts:
    3,198
    Location:
    Surrey, England.
  2. ComputerSaysNo

    ComputerSaysNo Registered Member

    Joined:
    Aug 9, 2012
    Posts:
    1,428
    So now all browsers come with flash? Security risk right there.
     
  3. RJK3

    RJK3 Registered Member

    Joined:
    Apr 4, 2011
    Posts:
    855
    What about the Flash sandboxing, "protected mode"? I suppose I'll have to read more on this.
     
  4. funkydude

    funkydude Registered Member

    Joined:
    Apr 5, 2004
    Posts:
    6,856
    Not really. Security should be better when running plugins in the browser's sandboxed environment, the real advantage here though is the auto updating process and removing another thing for the user to worry/think about. Unfortunately the frequent updating isn't going to start until Windows 8 actually releases. Microsoft's version of flash is much more efficient, consuming less power, and is fully compatible with IE10's new Enhanced Protected Mode.

    They don't clarify if this is on standard protected mode or enhanced protected mode. I wouldn't expect standard protected mode to help much.
     
  5. Dermot7

    Dermot7 Registered Member

    Joined:
    Dec 20, 2009
    Posts:
    3,198
    Location:
    Surrey, England.
  6. SnowFlakes

    SnowFlakes Registered Member

    Joined:
    Jun 29, 2011
    Posts:
    194
    i would never use windows8, i am satisified with win7 and will not change in maybe 10 years from now on.
     
  7. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
    Flash vulnerabilities leave Windows 8 testers at risk.
     
  8. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
  9. TairikuOkami

    TairikuOkami Registered Member

    Joined:
    Oct 10, 2005
    Posts:
    2,509
    Location:
    Slovakia
    And here we go again, to keep IE secure, disable everything. And it is not just because 8 is not released yet, Microsoft never release updates ASAP. Fail. :cautious:
     
  10. funkydude

    funkydude Registered Member

    Joined:
    Apr 5, 2004
    Posts:
    6,856
    Yeah, because you know exactly what Microsoft is planning for flash updates, right? :argh: MS themselves have said the updates won't start until Windows 8 releases, but you know better?

    I'll also repeat the fact that it still isn't clear if this is even exploitable using Enhanced Protected Mode.
     
  11. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,802
    Location:
    Texas
    Microsoft to deliver Flash update to Windows 8 users 'shortly'
     
  12. funkydude

    funkydude Registered Member

    Joined:
    Apr 5, 2004
    Posts:
    6,856
    From that article, note:
    Whether they succeed or not is up to them and speculating on it with assumptions based on Microsoft's system patch history (patches which take a lot longer to test and can cause more issues than a simple plugin update) is pointless.
     
  13. JRViejo

    JRViejo Global Moderator

    Joined:
    Jul 9, 2008
    Posts:
    20,981
    Location:
    U.S.A.
     
  14. funkydude

    funkydude Registered Member

    Joined:
    Apr 5, 2004
    Posts:
    6,856
    Got the update on the release preview too :)
     
  15. Hungry Man

    Hungry Man Registered Member

    Joined:
    May 11, 2011
    Posts:
    9,148
    Was it ever confirmed to work with protected mode?
     
  16. funkydude

    funkydude Registered Member

    Joined:
    Apr 5, 2004
    Posts:
    6,856
    Unfortunately no, which is the only part I was really interesting in knowing!
     
  17. JRViejo

    JRViejo Global Moderator

    Joined:
    Jul 9, 2008
    Posts:
    20,981
    Location:
    U.S.A.
     
  18. Mman79

    Mman79 Registered Member

    Joined:
    Sep 19, 2012
    Posts:
    2,016
    Location:
    North America
    I'm not in the industry, so it's difficult to judge them. However, as a user, such information doesn't comfort me. Microsoft can't afford to look stupid with a new Windows release in the pipeline and competing browsers being as good as they currently are. Seven weeks seems to be an unnecessarily long time, and they were a bit foolish to ever even consider waiting until Windows 8 to be released to fix an issue like this. They already aren't doing themselves a favor, in my opinion of course, by shutting out Windows 7 users from the IE 10 testing process.
     
  19. siljaline

    siljaline Former Poster

    Joined:
    Jun 29, 2003
    Posts:
    6,619
Loading...
Thread Status:
Not open for further replies.