Full Disclosure mailing list archives

Office XP Update: March 23, 2004


From: insecure <insecure () ameritech net>
Date: Fri, 16 Apr 2004 16:10:33 -0500

I guess Microsoft is getting in to the habit of releasing security updates without a security bulletin. That should help them in their public relations, oops I mean security, campaign.

This update won't show up on Windows Update. If you do a scan on Office Update you'll be offered the patch. How many people do that on a regular basis?

http://support.microsoft.com/?kbid=833858

Release Date: March 23, 2004

SUMMARY
Microsoft has released an update to Microsoft Office XP. This update contains important security and stability enhancements in the Microsoft Script Editor and may require that you restart your computer

List of issues fixed by the update
The Office XP Update: KB833858 fixes the following issues that were previously not documented in the Microsoft Knowledge Base.

Default debugging permissions have been enhanced
Changes have been made to the Microsoft Visual Studio .NET debugger that is included in Microsoft Office XP to make debugging permissions more restrictive. As a security enhancement, users who are not part of the Administrators group or the Debugger Users group will no longer be able to debug scripts with the Microsoft Script Editor.


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: