OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Francis Favorini (francis.favoriniDUKE.EDU)
Date: Fri Apr 26 2002 - 14:25:54 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Folks,

    This bulletin says it doesn't supercede any other bulletins, but it seems to
    me that is must supercede the following bulletins that all replaced
    winword.exe in Office 2000 and/or Office XP.

    MS00-071 Word Mail Merge Vulnerability
    MS01-028 RTF document linked to template can run macros without warning
    MS01-034 Malformed Word Document Could Enable Macro to Run Automatically

    Am I missing something?

    I also not that if I do a search of bulletins pertaining to Office XP Gold
    or SP1, no results are returned in either case. I'm pretty sure there are
    at least 4 patches for Gold and 1 for SP1. This is using
    http://www.microsoft.com/technet/security/current.asp

    What ever happened to that great plan to improve security at Microsoft? I
    just don't understand why they can't set up a single, unified database that
    has all the hotfix and service pack info in it, so that all the hodge podge
    of security tools and queries can give the correct answers.

    -Francis