Heads up re upcoming Sept M$ patches
Looks like Microsoft plays favorites here. They have alerted their Premium partners about the upcoming September patches due out today 9/14/2004.
http://arstechnica.com/news/posts/20040913-4179.html
Quote:
A known but undisclosed security flaw in Microsoft Windows and Office is receiving special attention from the Redmond Giant, who notified its Premium customers of the flaws before the general public. The flaw, the details of which are not yet known, apparently affects Windows, Microsoft Office, Microsoft Visual Studio, and Microsoft .NET Framework. The flaw is rated as critical and the patch is to be released as early as tomorrow. A second patch with a less severe rating of "important" will also be released for Office customers. According to the private notice:
"At this time no additional information on these internal bulletins such as details regarding severity or details regarding the vulnerability will be made available until 14 September 2004."
2 M$ security bulletins released!!!
Here are Microsoft's September security bulletins. The JPEG processing vulnerability is scary: it affects a TON of stuff, pretty much everything (see list below)...
Microsoft Security Bulletin MS04-028:
Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987)
http://www.microsoft.com/technet/sec.../MS04-028.mspx
****SEE LIST OF AFFECTED SOFTWARE****
Microsoft Security Bulletin MS04-027:
Vulnerability in WordPerfect Converter Could Allow Code Execution (884933)
http://www.microsoft.com/technet/sec.../MS04-027.mspx
Quote:
Microsoft Security Bulletin MS04-028:
Affected Software:
* Microsoft Windows XP and Microsoft Windows XP Service Pack 1
* Microsoft Windows XP 64-Bit Edition Service Pack 1
* Microsoft Windows XP 64-Bit Edition Version 2003
* Microsoft Windows Server(tm) 2003
* Microsoft Windows Server 2003 64-Bit Edition
* Microsoft Office XP Service Pack 3 Microsoft Office XP Service Pack 3 Software:
- Outlook. 2002
- Word 2002
- Excel 2002
- PowerPoint. 2002
- FrontPage. 2002
- Publisher 2002
* Microsoft Office 2003 Microsoft Office 2003 Software:
- Outlook. 2003
- Word 2003
- Excel 2003
- PowerPoint. 2003
- FrontPage. 2003
- Publisher 2003
- InfoPath(tm) 2003
- OneNote(tm) 2003
* Microsoft Project 2002 Service Pack 1 (all versions)
* Microsoft Project 2003 (all versions)
* Microsoft Visio 2002 Service Pack 2 (all versions)
* Microsoft Visio 2003 (all versions)
* Microsoft Visual Studio .NET 2002 Microsoft Visual Studio .NET 2002 Software:
- Visual Basic .NET Standard 2002
- Visual C# .NET Standard 2002
- Visual C++ .NET Standard 2002
* Microsoft Visual Studio .NET 2003 Microsoft Visual Studio .NET 2003 Software:
- Visual Basic .NET Standard 2003
- Visual C# .NET Standard 2003
- Visual C++ .NET Standard 2003
- Visual J# .NET Standard 2003
* The Microsoft .NET Framework version 1.0 SDK Service Pack 2
* Microsoft Picture It!. 2002 (all versions)
* Microsoft Greetings 2002
* Microsoft Picture It! version 7.0 (all versions)
* Microsoft Digital Image Pro version 7.0
* Microsoft Picture It! version 9 (All Versions, including Picture It! Library)
* Microsoft Digital Image Pro version 9
* Microsoft Digital Image Suite version 9
* Microsoft Producer for Microsoft Office PowerPoint (all versions) Microsoft Platform SDK Redistributable: GDI+ - Download the update
* Internet Explorer 6 Service Pack 1
* The Microsoft .NET Framework version 1.0 Service Pack 2
* The Microsoft .NET Framework version 1.1
Re: Heads up re upcoming Sept M$ patches
Quote:
Originally posted here by ric-o
Looks like Microsoft plays favorites here. They have alerted their Premium partners about the upcoming September patches due out today 9/14/2004.
<sarcasm>I did not realize that they show the same great spirit in their communication as the do in their customer service for the little guy</sarcasm>. Do they put any restrictions on communicating the "Premium partner alerts" to the general public?. It would be nice to see them posted whenever they come out.