bugtraq - Office XP Update: March 23, 2004

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <40804BC9.7020103@ameritech.net>
Date: Fri, 16 Apr 2004 16:10:33 -0500
From: insecure <insecure@...ritech.net>
To: full-disclosure@...ts.netsys.com, bugtraq@...urityfocus.com,
   NTBUGTRAQ@...TSERV.NTBUGTRAQ.COM
Subject: Office XP Update: March 23, 2004

I guess Microsoft is getting in to the habit of releasing security 
updates without a security bulletin. That should help them in their 
public relations, oops I mean security, campaign.

This update won't show up on Windows Update. If you do a scan on Office 
Update you'll be offered the patch. How many people do that on a regular 
basis?

http://support.microsoft.com/?kbid=833858

Release Date: March 23, 2004

SUMMARY
Microsoft has released an update to Microsoft Office XP. This update 
contains important security and stability enhancements in the Microsoft 
Script Editor and may require that you restart your computer

List of issues fixed by the update
The Office XP Update: KB833858 fixes the following issues that were 
previously not documented in the Microsoft Knowledge Base.

Default debugging permissions have been enhanced
Changes have been made to the Microsoft Visual Studio .NET debugger that 
is included in Microsoft Office XP to make debugging permissions more 
restrictive. As a security enhancement, users who are not part of the 
Administrators group or the Debugger Users group will no longer be able 
to debug scripts with the Microsoft Script Editor.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html