
Microsoft's dominant Internet Explorer browser has undergone a major security makeover to plug 10 vulnerabilities that puts millions at risk of PC takeover, address bar spoofing and information disclosure attacks. The monster IE update includes a fix for the 'createTextRange()' code execution flaw that caused zero-day drive-by downloads and a significant modification to the way the browser renders certain ActiveX controls. In all, Microsoft shipped five bulletins with patches for 14 different vulnerabilities in a
range of Windows products. At the same time Microsoft has begun requesting that users upgrade their ME/98 machines because
support ends July 11th, 2006.
Member since:
2005-11-10
If you look at all the flaws that are listed in the article above you will see that they apply to all versions back to Windows 98 (And would apply to older versions of Windows also if those versions were still supported)
Some of that comes from MS trying to support older versions of Windows with new software. But to do that they wind up writing flaws to support the old OS's and then rolling those flaws up into Windows XP and 2003
The rest of the problems come from MS sometimes just pushing old software and techneques forward. For instance the way Windows handles meta files has been the same in Windows for ages so when there was a problem with meta files last year it applied to almost every version of Windows ever created.
For instance I have seen Dr Watson errors pop up in Windows XP! ??? How old is that crap! (Back from Windows NT 3.5)