Unpatched Windows Vunerabilities

Unpatched Windows Vunerabilities

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Unpatched Windows Vunerabilities Pat 07-01-2004
Posted by Pat on July 1, 2004, 8:48 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi,

Hypothetically, if I am using an unpatched Windows XP computer behind
a router/firewall. I do not use Internet Explorer or Outlook Express
and I disable messenger. Are there any viruses/worms out there that
could infect me? (assuming I don't do anything really stupid like
clicking on .exe/.com/.pif/.scr attachments)

Thanks


Posted by Leythos on July 1, 2004, 3:55 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
@yahoo.co.uk says...
> Hi,
>
> Hypothetically, if I am using an unpatched Windows XP computer behind
> a router/firewall. I do not use Internet Explorer or Outlook Express
> and I disable messenger. Are there any viruses/worms out there that
> could infect me? (assuming I don't do anything really stupid like
> clicking on .exe/.com/.pif/.scr attachments)

Yes, there are always chances that some web browser you are using will
permit you to click on something and install it (even if not IE).

being behind a router (which is NOT a firewall) means you should have
enough internet speed to download and install all of the free updates
from MS.

Are you running any AV software?

Now, if you had asked, if I'm not connected to the internet - at all, do
I need the updates/patches, then I would have said only the ones that
directly effect your applications and devices for stability/performance.

--
--
spamfree999@rrohio.com
(Remove 999 to reply to me)


Posted by Bit Twister on July 1, 2004, 4:01 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
On 1 Jul 2004 08:48:17 -0700, Pat wrote:
> Hi,
>
> Hypothetically, if I am using an unpatched Windows XP computer behind
> a router/firewall. I do not use Internet Explorer or Outlook Express
> and I disable messenger. Are there any viruses/worms out there that
> could infect me? (assuming I don't do anything really stupid like
> clicking on .exe/.com/.pif/.scr attachments)

Since we do not know what other prgrams you have used there is no way
to guess if you are infected.

Reading http://www.theregister.co.uk/2004/07/01/june_virus_chart/
which indicated that june was a slow month with only 950 new viruses
I would be impressed if you had no infections.

Hypothetically speaking. :)



Posted by Walter Roberson on July 1, 2004, 6:10 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
:Hypothetically, if I am using an unpatched Windows XP computer behind
:a router/firewall. I do not use Internet Explorer or Outlook Express
:and I disable messenger. Are there any viruses/worms out there that
:could infect me? (assuming I don't do anything really stupid like
:clicking on .exe/.com/.pif/.scr attachments)

I do not know about XP specifically, but if your firewall is allowing
unrestricted access to your system, then Yes, there are vulnerabilities
in some Windows that can get you even if you aren't "doing anything".
The unpatched versions of some Windows releases are vulnerable to
active attacks, capable of being infected in seconds if the attacker
can get data through to the right port. And the list of vulnerable
ports is fairly large for some of the attacks, including, if I recall
correctly, dynamically allocated udp ports under some circumstances.

Saying that you have a "firewall" doesn't really give us much
information about how well protected you are. There are attacks that
can slip by programs such as Zone Alarm or Black Ice Defender. There
are attacks that can slip by "router/firewall" hardware units
that don't keep enough state information (or don't really keep
any state information at all.)
--
Cottleston, Cottleston, Cottleston pie.
A bird can't whistle and neither can I. -- Pooh


Posted by Bill Unruh on July 1, 2004, 6:56 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
patkay_156@yahoo.co.uk (Pat) writes:

]Hi,

]Hypothetically, if I am using an unpatched Windows XP computer behind
]a router/firewall. I do not use Internet Explorer or Outlook Express
]and I disable messenger. Are there any viruses/worms out there that
]could infect me? (assuming I don't do anything really stupid like
]clicking on .exe/.com/.pif/.scr attachments)


Yes.
If you are connected to the internet, you could be comprimised. We have no
idea about your firewall or what it lets through in either direction, not
how vulnerable it is. email viruses still exist even on other readers. etc.

Your question is like someone in Medieaval times saying
I have a moat and a drawbridge, but no walls to my castle. Could I be
attacked?



Similar ThreadsPosted
Unpatched Powerpoint Flaw Exploited July 17, 2006, 12:27 am
Exploit released for unpatched ActiveX flaw September 15, 2006, 5:46 pm
PGP 8.1 for Windows & Mac October 24, 2005, 11:10 am
What are your impressions about Windows XP SP2 August 24, 2004, 2:50 pm
Windows XP: Trying to make a ISC January 25, 2005, 1:19 pm
PCI-X cards for windows xp May 4, 2005, 5:57 pm
Does Windows still have NSA backdoor? January 14, 2007, 8:50 am
does Windows XP have a hosts.deny? March 12, 2005, 5:56 am
Windows 2000 hacked? June 25, 2005, 3:20 pm
Intel DEP vulnerability and windows.......??? July 11, 2005, 3:58 pm

The site map in XML format XML site map

Contact Us | Privacy Policy