Windows 2000 and Windows NT source code leaked?

[muert0]

http://www.securitytracker.com/alerts/2004/Feb/1009067.html

IE exploit found with windows source code.

[j0k3r]

It is reported that a remote user can create a specially crafted bitmap file that, when loaded by IE, will trigger an integer overflow and execute arbitrary code.

The report indicates that IE 5 is affected but that IE 6 is not affected.

So it will only affect those that don't upgrade?

[muert0]

yeah its just the first thing ive seen that says it was found with the source.

[Hostile]

Thats the equivalent of saying, "New exploit found in Windows 2000 SP3, SP4 users are unaffected." With most home uses upgraded, with perhaps the acception of some 28.8k dialup'ers and some poorly maintained companies (all of the companies I've seen have IE6) then you're looking at a really poor audience. Half the time the exploit is only the tip of it, no matter how destructive its the amount of people it can actually effect that matters.

[muert0]

youd be surprised how many people still use win 98