Trend Micro notes that their researchers have found a very limited, targeted exploit for the Internet Explorer 7 hole patched last Tuesday by MS09-002
[See the full post at: MS-DEFCON 2: Problems with the patches – and an exploit]
![]() |
Patch reliability is unclear, but widespread attacks make patching prudent. Go ahead and patch, but watch out for potential problems. |
SIGN IN | Not a member? | REGISTER | PLUS MEMBERSHIP |
-
MS-DEFCON 2: Problems with the patches – and an exploit
Home » Forums » Newsletter and Homepage topics » MS-DEFCON 2: Problems with the patches – and an exploit
- This topic has 10 replies, 2 voices, and was last updated 16 years ago.
AuthorTopicViewing 9 reply threadsAuthorReplies-
sanda
Guest -
Hans Peter Guttmann
GuestFebruary 22, 2009 at 12:21 pm #60172Among the programs toasted by the Killbit patch, KB 960715 is ‘Enveloper’ in WOPR 2003.
Uninstalling the patch restored 100% functionality to Enveloper on Vista Ultimate SP1 32 + 64-bit systems.
Yeah, I know — 2003: time and times move on, but Enveloper remains a component of Word I use almost daily.
-
Paul
Guest -
Yuhong Bao
GuestFebruary 25, 2009 at 12:46 pm #60174“Susan Bradley at Windows Secrets Newsletter has discovered that installing last Tuesday’s Killbit patch, KB 960715 can make some Visual Basic programs toast. ”
Do you know what a killbit is? If you don’t know, a killbit prevent execution of an ActiveX control in IE. The reason MS pushed out kill-bits in an update is that older versions of the killed ActiveX controls have security vulnerablities. Usually by the time MS releases a kill-bit update, the vendor already has released the security update for the control that fixes the vulerablity, which uses a Phoenix-bit to redirect attempts to load the old version to the new version. For example, one of the ActiveX controls that was killed by this kill-bit update was old versions of the ActiveX controls that shipped with VB6, which already was patched in MS08-070. So the remedy for this one is for the developer to install MS08-070 or KB957924 on their development machine, then redistibute the new version of the ActiveX control.
More at:
http://blogs.msdn.com/askie/archive/2009/02/20/certain-vb-controls-no-longer-display-on-web-pages-after-installing-kb960715.aspx -
Yuhong Bao
GuestFebruary 25, 2009 at 12:50 pm #60175MS have a FAQ on the kill bits and phoenix bits:
http://blogs.technet.com/swi/archive/2008/02/06/The-Kill_2D00_Bit-FAQ_3A00_-Part-1-of-3.aspx
http://blogs.technet.com/swi/archive/2008/02/07/The-Kill_2D00_Bit-FAQ_3A00_-Post-2-of-3.aspx
http://blogs.technet.com/swi/archive/2008/02/08/The-Kill_2D00_Bit-FAQ_3A00_-Part-3-of-3.aspx -
woody
Manager -
Yuhong Bao
Guest -
vpone
Guest -
vpone
GuestJune 16, 2009 at 10:31 pm #60179more info from your link
“Typically, you can use the LPK Tool to create a license package. Unfortunately, you cannot do so in this case because the new CLSIDs for the kill-bit/phoenix bit are hidden on your development machine. Only the legacy CLSIDs are available. In this case, you would need to contact Microsoft Support to generate an LPK file for you.”
typically microsoft support costs $259/incident
-
woody
Manager
Viewing 9 reply threads -

Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
Get Plus!
Welcome to our unique respite from the madness.
It's easy to post questions about Windows 11, Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.
Search Newsletters
Search Forums
View the Forum
Search for Topics
Recent Topics
-
MS-DEFCON 3: Businesses must tread carefully
by
Susan Bradley
2 hours, 25 minutes ago -
McLaren Health Care says data breach impacts 743,000 patients
by
Nibbled To Death By Ducks
2 hours, 57 minutes ago -
WhatsApp banned on House staffers’ devices
by
Alex5723
4 hours, 12 minutes ago -
Is your device eligible?
by
Susan Bradley
5 hours, 57 minutes ago -
Windows 11 Insider Preview build 26200.5661 released to DEV
by
joep517
12 hours, 8 minutes ago -
Windows 11 Insider Preview build 26120.4452 (24H2) released to BETA
by
joep517
12 hours, 9 minutes ago -
Hello Windows…My Problem is Windows Hello…
by
rdleib
13 hours, 25 minutes ago -
New Canon Printer Wants Data Sent
by
Win7and10
13 hours, 43 minutes ago -
I set up passkeys for my Microsoft account
by
Lance Whitney
3 hours, 13 minutes ago -
AI is for everyone
by
Peter Deegan
13 hours, 16 minutes ago -
Terabyte update 2025
by
Will Fastie
7 hours, 19 minutes ago -
Migrating from Windows 10 to Windows 11
by
Susan Bradley
2 hours, 52 minutes ago -
Lost sound after the upgrade to 24H2?
by
Susan Bradley
1 day, 12 hours ago -
How to move 10GB of data in C:\ProgramData\Package Cache ?
by
Alex5723
2 hours, 21 minutes ago -
Plugged in 24-7
by
CWBillow
22 hours, 27 minutes ago -
Netflix, Apple, BofA websites hijacked with fake help-desk numbers
by
Nibbled To Death By Ducks
2 days, 1 hour ago -
Have Copilot there but not taking over the screen in Word
by
CWBillow
1 day, 22 hours ago -
Windows 11 blocks Chrome 137.0.7151.68, 137.0.7151.69
by
Alex5723
3 days, 16 hours ago -
Are Macs immune?
by
Susan Bradley
8 hours, 18 minutes ago -
HP Envy and the Function keys
by
CWBillow
3 days ago -
Microsoft : Removal of unwanted drivers from Windows Update
by
Alex5723
17 hours, 47 minutes ago -
MacOS 26 beta 1 dropped support for Firewire 400/800
by
Alex5723
4 days, 4 hours ago -
Unable to update to version 22h2
by
04om
1 day, 12 hours ago -
Windows 11 Insider Preview Build 26100.4482 (24H2) released to Release Preview
by
joep517
4 days, 11 hours ago -
Windows 11 Insider Preview build 27881 released to Canary
by
joep517
4 days, 11 hours ago -
Very Quarrelsome Taskbar!
by
CWBillow
3 days, 21 hours ago -
Move OneNote Notebook OFF OneDrive and make it local
by
CWBillow
5 days ago -
Microsoft 365 to block file access via legacy auth protocols by default
by
Alex5723
4 days, 13 hours ago -
Is your battery draining?
by
Susan Bradley
19 hours, 26 minutes ago -
The 16-billion-record data breach that no one’s ever heard of
by
Alex5723
1 day, 13 hours ago
Recent blog posts
Key Links
Want to Advertise in the free newsletter? How about a gift subscription in honor of a birthday? Send an email to sb@askwoody.com to ask how.
Mastodon profile for DefConPatch
Mastodon profile for AskWoody
Home • About • FAQ • Posts & Privacy • Forums • My Account
Register • Free Newsletter • Plus Membership • Gift Certificates • MS-DEFCON Alerts
Copyright ©2004-2025 by AskWoody Tech LLC. All Rights Reserved.