From: "Geo" 

"James Adams"  wrote in message
news:43be6de3$1{at}w3.nls.net...
> >
> >
> >While Windows 2000, Windows XP and Windows Server 2003 are vulnerable,
> >Windows 98 and Windows Millennium Edition are not exposed to the same
> >threats that exploit the WMF flaw
> >
>  I guess my Win95 machine is safe.
>
> It's basically a file server now but it runs great.

That's NOT what MS said, read this carefully:

Are Windows 98, Windows 98 Second Edition, or Windows Millennium Edition
*critically* affected by one or more of the vulnerabilities that are
addressed in this security bulletin? No. Although Windows 98, Windows 98
Second Edition, and Windows Millennium Edition do contain the affected
component, the vulnerability is *not critical because* an exploitable
attack vector has not been identified that would yield a Critical severity
rating for these versions.

See how they used the word "Critically" in there, ok now read this:

How does the extended support for Windows 98, Windows 98 Second Edition,
and Windows Millennium Edition affect the release of security updates for
these operating systems?
For these versions of Windows, Microsoft will only release security updates
for critical security issues. Non-critical security issues are not offered
during this support period.

I don't know if that means they did a full evaluation on whether or not
it's possible to exploit 98 or if they are just saying they didn't bother
looking in depth and since the attack vector fails on 98 they aren't
providing a patch. It may be that they are just stalling and will provide a
patch in their own good time.

Geo.

--- BBBS/NT v4.01 Flag-5