Trend Micro notes that their researchers have found a very limited, targeted exploit for the Internet Explorer 7 hole patched last Tuesday by MS09-002
[See the full post at: MS-DEFCON 2: Problems with the patches – and an exploit]
![]() |
Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don't do it. |
SIGN IN | Not a member? | REGISTER | PLUS MEMBERSHIP |
-
MS-DEFCON 2: Problems with the patches – and an exploit
Home » Forums » Newsletter and Homepage topics » MS-DEFCON 2: Problems with the patches – and an exploit
- This topic has 10 replies, 2 voices, and was last updated 15 years, 12 months ago.
AuthorTopicViewing 9 reply threadsAuthorReplies-
sanda
Guest -
Hans Peter Guttmann
GuestFebruary 22, 2009 at 12:21 pm #60172Among the programs toasted by the Killbit patch, KB 960715 is ‘Enveloper’ in WOPR 2003.
Uninstalling the patch restored 100% functionality to Enveloper on Vista Ultimate SP1 32 + 64-bit systems.
Yeah, I know — 2003: time and times move on, but Enveloper remains a component of Word I use almost daily.
-
Paul
Guest -
Yuhong Bao
GuestFebruary 25, 2009 at 12:46 pm #60174“Susan Bradley at Windows Secrets Newsletter has discovered that installing last Tuesday’s Killbit patch, KB 960715 can make some Visual Basic programs toast. ”
Do you know what a killbit is? If you don’t know, a killbit prevent execution of an ActiveX control in IE. The reason MS pushed out kill-bits in an update is that older versions of the killed ActiveX controls have security vulnerablities. Usually by the time MS releases a kill-bit update, the vendor already has released the security update for the control that fixes the vulerablity, which uses a Phoenix-bit to redirect attempts to load the old version to the new version. For example, one of the ActiveX controls that was killed by this kill-bit update was old versions of the ActiveX controls that shipped with VB6, which already was patched in MS08-070. So the remedy for this one is for the developer to install MS08-070 or KB957924 on their development machine, then redistibute the new version of the ActiveX control.
More at:
http://blogs.msdn.com/askie/archive/2009/02/20/certain-vb-controls-no-longer-display-on-web-pages-after-installing-kb960715.aspx -
Yuhong Bao
GuestFebruary 25, 2009 at 12:50 pm #60175MS have a FAQ on the kill bits and phoenix bits:
http://blogs.technet.com/swi/archive/2008/02/06/The-Kill_2D00_Bit-FAQ_3A00_-Part-1-of-3.aspx
http://blogs.technet.com/swi/archive/2008/02/07/The-Kill_2D00_Bit-FAQ_3A00_-Post-2-of-3.aspx
http://blogs.technet.com/swi/archive/2008/02/08/The-Kill_2D00_Bit-FAQ_3A00_-Part-3-of-3.aspx -
woody
Manager -
Yuhong Bao
Guest -
vpone
Guest -
vpone
GuestJune 16, 2009 at 10:31 pm #60179more info from your link
“Typically, you can use the LPK Tool to create a license package. Unfortunately, you cannot do so in this case because the new CLSIDs for the kill-bit/phoenix bit are hidden on your development machine. Only the legacy CLSIDs are available. In this case, you would need to contact Microsoft Support to generate an LPK file for you.”
typically microsoft support costs $259/incident
-
woody
Manager
Viewing 9 reply threads -

Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
Get Plus!
Welcome to our unique respite from the madness.
It's easy to post questions about Windows 11, Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.
Search Newsletters
Search Forums
View the Forum
Search for Topics
Recent Topics
-
Mozilla shutting Deep Fake Detector
by
Alex5723
18 minutes ago -
Windows-Maintenance-Tool (.bat)
by
Alex5723
21 minutes ago -
Windows 11 Insider Preview build 26200.5641 released to DEV
by
joep517
2 hours, 50 minutes ago -
Windows 11 Insider Preview build 26120.4250 (24H2) released to BETA
by
joep517
2 hours, 51 minutes ago -
Install Office 365 Outlook classic on new Win11 machine
by
WSrcull999
2 hours, 49 minutes ago -
win 10 to win 11 with cpu/mb replacement
by
aquatarkus
43 minutes ago -
re-install Windows Security
by
CWBillow
6 hours, 6 minutes ago -
WWDC 2025 Recap: All of Apple’s NEW Features in 10 Minutes!
by
Alex5723
9 hours, 47 minutes ago -
macOS Tahoe 26
by
Alex5723
4 hours ago -
Migrating from win10 to win11, instructions coming?
by
astro46
10 hours, 59 minutes ago -
Device Eligibility for Apple 2026 Operating Systems due this Fall
by
PKCano
10 hours, 34 minutes ago -
Recommended watching : Mountainhead movie
by
Alex5723
23 hours, 19 minutes ago -
End of support for Windows 10
by
Old enough to know better
8 hours, 41 minutes ago -
What goes on inside an LLM
by
Michael Covington
7 hours, 45 minutes ago -
The risk of remote access
by
Susan Bradley
5 minutes ago -
The cruelest month for many Office users
by
Peter Deegan
1 hour, 29 minutes ago -
Tracking protection and trade-offs in Edge
by
Mary Branscombe
1 day, 1 hour ago -
Supreme Court grants DOGE access to confidential Social Security records
by
Alex5723
1 day, 8 hours ago -
EaseUS Partition Master free 19.6
by
Alex5723
8 hours, 48 minutes ago -
Microsoft : Edge is better than Chrome
by
Alex5723
1 day, 21 hours ago -
The EU launched DNS4EU
by
Alex5723
2 days, 10 hours ago -
Cell Phone vs. Traditional Touchtone Phone over POTS
by
280park
2 days ago -
Lost access to all my networked drives (shares) listed in My Computer
by
lwerman
2 days, 15 hours ago -
Set default size for pasted photo to word
by
Cyn
2 days, 21 hours ago -
Dedoimedo tries 24H2…
by
Cybertooth
2 days, 9 hours ago -
Windows 11 Insider Preview build 27871 released to Canary
by
joep517
3 days, 20 hours ago -
Windows 11 ad from Campaign Manager in Windows 10
by
Jim McKenna
1 day, 13 hours ago -
Small desktops
by
Susan Bradley
1 hour, 2 minutes ago -
Totally disable Bitlocker
by
CWBillow
2 days, 14 hours ago -
Phishers extract Millions from HMRC accounts..
by
Microfix
3 days, 18 hours ago
Recent blog posts
Key Links
Want to Advertise in the free newsletter? How about a gift subscription in honor of a birthday? Send an email to sb@askwoody.com to ask how.
Mastodon profile for DefConPatch
Mastodon profile for AskWoody
Home • About • FAQ • Posts & Privacy • Forums • My Account
Register • Free Newsletter • Plus Membership • Gift Certificates • MS-DEFCON Alerts
Copyright ©2004-2025 by AskWoody Tech LLC. All Rights Reserved.