The Register® — Biting the hand that feeds IT

Comments on: WordPad zero-day adds to MS security woes

Honk-honk! 

Posted Thursday 11th December 2008 10:52 GMT

Your failboat has arrived.

Good way to get people to move to Vista or Linux though. Make all the old Windows security risks again.

So... 

Posted Thursday 11th December 2008 11:33 GMT

They *have* released a patch for the majority already? (SP3 of course!)

Oh for heavens sake! 

Posted Thursday 11th December 2008 12:34 GMT

Linux

"In addition, an unpatched vulnerability in WordPad has also become fodder for malicious hackers. The issue affects the Wordpad text converter for Word 97."

Look I don't want to get all on the MS bashing train but FFS! It's fecking text editor with a few tweaks for colour and font, HTF does it give "malicious hackers" something to work on? WTF is in that O/S? Oh yes, sorry we can't tell you 'cos it's proprietry IP!

I know the cock-up with SSL certs was a bit of an unmitigated disaster for Debian, but for crying out loud, a text editor?!

Yes... 

Posted Thursday 11th December 2008 20:44 GMT

...but what about mspaint?

WordPad Zero-Day Flaw to Servers??? 

Posted Thursday 11th December 2008 21:15 GMT

Stop

Only a stupid admin would check his/her e-mail on a Windows server and then open an attachment with WordPad. So why is this a server zero-day flaw?

Wordpad has been around for ages... 

Posted Friday 19th December 2008 15:48 GMT

So surely this Wordpad flaw has been around for many years now? Would they have ever had to change the code for the Wordpad program very much over the years? I'd guess not so it must have been around for quite a while now?

Webcast: Jumpstart your Application Security initiatives