12 Jun 2006
Microsoft will not develop a patch for a critical security flaw in Windows 98, Windows 98 Second Edition and Windows Millennium Edition.
The Microsoft MS06-015 vulnerability affects Windows Explorer and could allow an attacker to take control of a system through a specially crafted website.
All Windows versions are vulnerable, but only Windows 2000, XP and Server 2003 have been patched.
"After extensive investigations we found that it is not feasible to make the extensive changes necessary to Windows Explorer on [the] older versions of Windows to eliminate the vulnerability," Christopher Budd, a security programme manager at the Microsoft Security Response Center, wrote on a company blog.
Fixing the issue on Windows 98 and ME would require a complete overhaul of critical operating system components, he explained, which could cause application compatibility issues.
Users can protect themselves against attacks by blocking all traffic on TCP Port 139 through a perimeter firewall, Microsoft suggested. Windows uses port 139 for file and printer sharing.
Budd added that support for Windows 98 and ME is set to expire on 11 July,
meaning that the company will end public support and stop issuing security
updates.
At that date users should have upgraded to a newer version of Windows to ensure
their online safety.
Data from Net Applications, a maker of site measurement tools, indicates that about three per cent of the world's computers run Windows 98 and about one per cent are still powered by Windows ME.
Latest stories from Security
Related articles
Related jobs
Poll
What is the most important IT priority for your company this year?
Hands on with the highly anticipated Android 4.0 Ice Cream Sandwich hybrid tablet
Connect with V3.co.uk
This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes
Why good data management at all levels is essential in the modern business (video, 6mins)
Salesforce.com Consultants, both Functional or Technical...
Enterprise Data Architect required by reputable Banking...
SSIS, SSAS, MDX, OLAP, OLTP, Data Warehousing, Data Modelling...
Specialist IT service provider is looking to recruit...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
WindowsME
I have a couple of of laptops but the most elderly was pre-installed at purchase with WindowsME. I would be very happy to upgrade it to XP but I want to see an upgrade PRICE & PACKAGE from Microsoft because it will require more memory to run XP.
Posted by: Jeff 14 Jun 2006
Support ends when?
Based on the decision not to issue a patch, I'd say their support for 98/ME ended on June 12th, not on July 11th as the article says.
Posted by: Klangford 13 Jun 2006
Microsoft leaves users with a few choices
Windows 98 and ME users have three choices as to what to do now Microsoft is refusing to write patches for their operating systems. The easiest choice is to forget the issue and carry on with using the system regardless of security problems. You will be targeted by hackers / crackers /and all things bad. The second choice is to go our and buy a new PC, paying money and especially more money to Microsoft once again for an XP/Vista license. This is regardless as to whether the PC currently is good enough for what the user wants to do. It is fair to say that if a PC was designed for 98/ME, it is not going to be powerful enough for XP, let alone Vista. So thats a few hundered pounds or dollars. The third choice is to replace the operating system, which is an upheaval, but will not cost a penny. Get to know your local Linux User Group (http://lugs.org.uk) and reinstall your old decaying Windows for a new version of Ubuntu Linux (http://www.Ubuntu.com) or SuSE Linux (http://www.opensuse.org). Your local Linux User Group usually meets every while, sometimes every week, month, or on request from the members, and will help guide you through the proccess of using it. If you only check your mail, surf the internet, and word proccess you probably won't notice much difference. You would even make some new friends along the way. Find your local Linux User Group, Make Some Friends, Install Linux, and don't pay for software again.
Posted by: Matthew Saunders 12 Jun 2006
Doesn't bother me
My last windows system is an old ME box that I use solely to play games which I havn't gotten moved to my Linux systems yet. There are very few that don't work either natively, or under wine or cedega. So for me, this news is anti-climatic, and non-impacting.
Posted by: Linux Only 12 Jun 2006
ME.. Think its time for a new OS
Much more amazing than the 3% who still use 98 is the 1% uses ME what a POS!
Posted by: tranceport 12 Jun 2006