All the latest UK technology news, reviews and analysis

Microsoft declines to patch Windows 98 and ME flaw

by Tom Sanders in California

12 Jun 2006

Comments: 5

  • Tweet this
Microsoft will not develop a patch for a critical security flaw in Windows 98, Windows 98 Second Edition and Windows Millennium Edition
MS06-015 flaw affects Windows Explorer and could allow an attacker to take control

Microsoft will not develop a patch for a critical security flaw in Windows 98, Windows 98 Second Edition and Windows Millennium Edition. 

The Microsoft MS06-015 vulnerability affects Windows Explorer and could allow an attacker to take control of a system through a specially crafted website. 

All Windows versions are vulnerable, but only Windows 2000, XP and Server 2003 have been patched.

"After extensive investigations we found that it is not feasible to make the extensive changes necessary to Windows Explorer on [the] older versions of Windows to eliminate the vulnerability," Christopher Budd, a security programme manager at the Microsoft Security Response Center, wrote on a company blog. 

Fixing the issue on Windows 98 and ME would require a complete overhaul of critical operating system components, he explained, which could cause application compatibility issues.

Users can protect themselves against attacks by blocking all traffic on TCP Port 139 through a perimeter firewall, Microsoft suggested. Windows uses port 139 for file and printer sharing.

Budd added that support for Windows 98 and ME is set to expire on 11 July, meaning that the company will end public support and stop issuing security updates.
At that date users should have upgraded to a newer version of Windows to ensure their online safety.

Data from Net Applications, a maker of site measurement tools, indicates that about three per cent of the world's computers run Windows 98 and about one per cent are still powered by Windows ME. 

Do you agree?

 

Add your comment

We won't publish your address
By submitting a comment you agree to abide by our Terms & Conditions. Your comment will be moderated before publication.

Poll

IT priorities for 2012

What is the most important IT priority for your company this year?

99%

0%

1%

0%

0%

Connect with V3.co.uk

Sign up to our daily or weekly newsletters

Accurev

Top 5 software development challenges

This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes

Talend

Rubbish in, rubbish enterprise

Why good data management at all levels is essential in the modern business (video, 6mins)

Salesforce.com Tech/Func Consultants, £50-70K + Bens, UK

Salesforce.com Consultants, both Functional or Technical...

Enterprise Data Architect - £95k

Enterprise Data Architect required by reputable Banking...

BI Developer / Data warehousing Developer - SSAS, SSRS

SSIS, SSAS, MDX, OLAP, OLTP, Data Warehousing, Data Modelling...

Senior Network Engineer

Specialist IT service provider is looking to recruit...

To send to more than one email address, simply separate each address with a comma.