Trend Micro notes that their researchers have found a very limited, targeted exploit for the Internet Explorer 7 hole patched last Tuesday by MS09-002
[See the full post at: MS-DEFCON 2: Problems with the patches – and an exploit]
![]() |
There are isolated problems with current patches, but they are well-known and documented on this site. |
SIGN IN | Not a member? | REGISTER | PLUS MEMBERSHIP |
-
MS-DEFCON 2: Problems with the patches – and an exploit
Home » Forums » Newsletter and Homepage topics » MS-DEFCON 2: Problems with the patches – and an exploit
- This topic has 10 replies, 2 voices, and was last updated 15 years, 11 months ago.
AuthorTopicViewing 9 reply threadsAuthorReplies-
sanda
Guest -
Hans Peter Guttmann
GuestFebruary 22, 2009 at 12:21 pm #60172Among the programs toasted by the Killbit patch, KB 960715 is ‘Enveloper’ in WOPR 2003.
Uninstalling the patch restored 100% functionality to Enveloper on Vista Ultimate SP1 32 + 64-bit systems.
Yeah, I know — 2003: time and times move on, but Enveloper remains a component of Word I use almost daily.
-
Paul
Guest -
Yuhong Bao
GuestFebruary 25, 2009 at 12:46 pm #60174“Susan Bradley at Windows Secrets Newsletter has discovered that installing last Tuesday’s Killbit patch, KB 960715 can make some Visual Basic programs toast. ”
Do you know what a killbit is? If you don’t know, a killbit prevent execution of an ActiveX control in IE. The reason MS pushed out kill-bits in an update is that older versions of the killed ActiveX controls have security vulnerablities. Usually by the time MS releases a kill-bit update, the vendor already has released the security update for the control that fixes the vulerablity, which uses a Phoenix-bit to redirect attempts to load the old version to the new version. For example, one of the ActiveX controls that was killed by this kill-bit update was old versions of the ActiveX controls that shipped with VB6, which already was patched in MS08-070. So the remedy for this one is for the developer to install MS08-070 or KB957924 on their development machine, then redistibute the new version of the ActiveX control.
More at:
http://blogs.msdn.com/askie/archive/2009/02/20/certain-vb-controls-no-longer-display-on-web-pages-after-installing-kb960715.aspx -
Yuhong Bao
GuestFebruary 25, 2009 at 12:50 pm #60175MS have a FAQ on the kill bits and phoenix bits:
http://blogs.technet.com/swi/archive/2008/02/06/The-Kill_2D00_Bit-FAQ_3A00_-Part-1-of-3.aspx
http://blogs.technet.com/swi/archive/2008/02/07/The-Kill_2D00_Bit-FAQ_3A00_-Post-2-of-3.aspx
http://blogs.technet.com/swi/archive/2008/02/08/The-Kill_2D00_Bit-FAQ_3A00_-Part-3-of-3.aspx -
woody
Manager -
Yuhong Bao
Guest -
vpone
Guest -
vpone
GuestJune 16, 2009 at 10:31 pm #60179more info from your link
“Typically, you can use the LPK Tool to create a license package. Unfortunately, you cannot do so in this case because the new CLSIDs for the kill-bit/phoenix bit are hidden on your development machine. Only the legacy CLSIDs are available. In this case, you would need to contact Microsoft Support to generate an LPK file for you.”
typically microsoft support costs $259/incident
-
woody
Manager
Viewing 9 reply threads -

Plus Membership
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
Get Plus!
Welcome to our unique respite from the madness.
It's easy to post questions about Windows 11, Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.
Search Newsletters
Search Forums
View the Forum
Search for Topics
Recent Topics
-
KB5058405 might fail to install with recovery error 0xc0000098 in ACPI.sys
by
Susan Bradley
5 hours, 29 minutes ago -
T-Mobile’s T-Life App has a “Screen Recording Tool” Turned on
by
Alex5723
8 hours, 10 minutes ago -
Windows 11 Insider Preview Build 26100.4202 (24H2) released to Release Preview
by
joep517
2 hours, 45 minutes ago -
Windows Update orchestration platform to update all software
by
Alex5723
15 hours, 30 minutes ago -
May preview updates
by
Susan Bradley
2 hours, 53 minutes ago -
Microsoft releases KB5061977 Windows 11 24H2, Server 2025 emergency out of band
by
Alex5723
5 hours, 4 minutes ago -
Just got this pop-up page while browsing
by
Alex5723
7 hours, 41 minutes ago -
KB5058379 / KB 5061768 Failures
by
crown
4 hours, 45 minutes ago -
Windows 10 23H2 Good to Update to ?
by
jkitc
1 hour, 55 minutes ago -
At last – installation of 24H2
by
Botswana12
1 day, 7 hours ago -
MS-DEFCON 4: As good as it gets
by
Susan Bradley
2 hours, 7 minutes ago -
RyTuneX optimize Windows 10/11 tool
by
Alex5723
1 day, 19 hours ago -
Can I just update from Win11 22H2 to 23H2?
by
Dave Easley
1 day, 12 hours ago -
Limited account permission error related to Windows Update
by
gtd12345
2 days, 8 hours ago -
Another test post
by
gtd12345
2 days, 8 hours ago -
Connect to someone else computer
by
wadeer
2 days, 3 hours ago -
Limit on User names?
by
CWBillow
2 days, 6 hours ago -
Choose the right apps for traveling
by
Peter Deegan
1 day, 20 hours ago -
BitLocker rears its head
by
Susan Bradley
1 day, 4 hours ago -
Who are you? (2025 edition)
by
Will Fastie
1 day, 3 hours ago -
AskWoody at the computer museum, round two
by
Will Fastie
1 day, 22 hours ago -
A smarter, simpler Firefox address bar
by
Alex5723
2 days, 19 hours ago -
Woody
by
Scott
3 days, 4 hours ago -
24H2 has suppressed my favoured spider
by
Davidhs
1 day, 3 hours ago -
GeForce RTX 5060 in certain motherboards could experience blank screens
by
Alex5723
3 days, 18 hours ago -
MS Office 365 Home on MAC
by
MickIver
3 days, 12 hours ago -
Google’s Veo3 video generator. Before you ask: yes, everything is AI here
by
Alex5723
4 days, 8 hours ago -
Flash Drive Eject Error for Still In Use
by
J9438
1 day, 3 hours ago -
Windows 11 Insider Preview build 27863 released to Canary
by
joep517
5 days, 3 hours ago -
Windows 11 Insider Preview build 26120.4161 (24H2) released to BETA
by
joep517
5 days, 3 hours ago
Recent blog posts
Key Links
Want to Advertise in the free newsletter? How about a gift subscription in honor of a birthday? Send an email to sb@askwoody.com to ask how.
Mastodon profile for DefConPatch
Mastodon profile for AskWoody
Home • About • FAQ • Posts & Privacy • Forums • My Account
Register • Free Newsletter • Plus Membership • Gift Certificates • MS-DEFCON Alerts
Copyright ©2004-2025 by AskWoody Tech LLC. All Rights Reserved.