Microsoft to Make MSN Messenger Fixes Mandatory

TwistedMetal · Feb 11, 2005, 09:08 PM

Microsoft Corp. on Friday lashed out at two security research firms for publishing proof-of-concept exploit code for MSN Messenger hours after Microsoft released security patches for the product.

In one instance, the software giant said malicious hackers have modified the proof-of-concept code into an exploit that puts millions of users at risk of code execution attacks that require no user interaction.

Moving swiftly to blunt an attack, Microsoft has decided to push out patched versions of MSN Messenger as a mandatory update. As of Thursday evening, users of the popular instant messaging client must update to MSN Messenger version 6.2.0205 or the MSN Messenger 7.0 beta before they are allowed to log on.

"When the vulnerability was announced this week we initially introduced an optional upgrade and had plans to make the upgrade mandatory," a Microsoft spokesperson said. "But when we learned that detailed exploit code had been published on the Internet we felt the need to take decisive action."

Full Article: Microsoft to Make MSN Messenger Fixes Mandatory

MitchRapp · Feb 11, 2005, 09:35 PM

do they mean yesterday's thursday or next week's ? cuz it didn't update anything .... I'm still running the 0137 version and not the 0205

**MIG-31** · Feb 11, 2005, 09:44 PM

The article is dated today,so i would presume next thursday.

also the updates are here for 6.1 & 6.2.

MitchRapp · Feb 11, 2005, 09:50 PM

ah yup you can just click on "download and install later" or whatever .... cool cool .... I feel secure now ! (lol....)

MythicaL · Feb 12, 2005, 02:51 AM

Sounds like bad news for us Trillian users...

Feb 11, 2005, 09:08 PM	#1
TwistedMetal MC John-117 Join Date: Jul 2003 Location: Phoenix, Arizona Posts: 728 Rep Power: 0	Microsoft to Make MSN Messenger Fixes Mandatory Microsoft Corp. on Friday lashed out at two security research firms for publishing proof-of-concept exploit code for MSN Messenger hours after Microsoft released security patches for the product. In one instance, the software giant said malicious hackers have modified the proof-of-concept code into an exploit that puts millions of users at risk of code execution attacks that require no user interaction. Moving swiftly to blunt an attack, Microsoft has decided to push out patched versions of MSN Messenger as a mandatory update. As of Thursday evening, users of the popular instant messaging client must update to MSN Messenger version 6.2.0205 or the MSN Messenger 7.0 beta before they are allowed to log on. "When the vulnerability was announced this week we initially introduced an optional upgrade and had plans to make the upgrade mandatory," a Microsoft spokesperson said. "But when we learned that detailed exploit code had been published on the Internet we felt the need to take decisive action." Full Article: Microsoft to Make MSN Messenger Fixes Mandatory __________________ [color=red][/color]

Feb 11, 2005, 09:44 PM	#3
MIG-31 HardwareHeaven News Mod Join Date: Dec 2002 Location: Nottingham,UK Posts: 56,860 Rep Power: 471 System Specs	The article is dated today,so i would presume next thursday. also the updates are here for 6.1 & 6.2. __________________ Please Post Your News Submissions Here

Feb 12, 2005, 02:51 AM	#5
MythicaL I like computers. Join Date: Jan 2004 Location: In front of a monitor Posts: 3,399 Rep Power: 89 System Specs	Sounds like bad news for us Trillian users... __________________ Always knew I didn't belong in this world. I wasn't made for this. But I'll never forget those who betrayed me, and those who never failed my trust.

Feb 11, 2005, 09:35 PM	#2
MitchRapp a.k.a. pepiman Join Date: Dec 2004 Location: Montreal Posts: 998 Rep Power: 51 System Specs	do they mean yesterday's thursday or next week's ? cuz it didn't update anything .... I'm still running the 0137 version and not the 0205

Feb 11, 2005, 09:50 PM	#4
MitchRapp a.k.a. pepiman Join Date: Dec 2004 Location: Montreal Posts: 998 Rep Power: 51 System Specs	ah yup you can just click on "download and install later" or whatever .... cool cool .... I feel secure now ! (lol....)