July 27 2000-
An
Excel 97/2000 security hole.
June 14 2000-Word
2000: Error Message: "Word Cannot Print. There Is No Printer Installed." |
Internet Explorer Microsoft has issued a
security patch for both Internet Explorer 4 and 5 that fixes a number
of security vulnerabilities. These include the "Frame Domain Verification",
the "Unauthorized Cookie Access", and the "Malformed Component Attribute"
vulnerability. You can get the patch at http://www.microsoft.com/windows/ie/download/critical/patch7.htm.
To install the patch, you need to be running IE 4.01 Service Pack
2 or IE 5.01. If you have older versions, Windows Update may say
you don't need the patch. Microsoft says this is wrong. You need
to update, and then patch.
Windows Microsoft has fixed a bug that affects all 32-bit
versions of Windows, including Windows 95, 98, NT, and 2000. Because
of a flaw in the way that IP fragments are reassembled by Windows,
someone can launch a temporary denial of service attack against
a computer. The attack will only last as long as specially constructed
fragments are sent to the computer. It should not cause data loss,
nor should it crash the computer. To find the fix for your version
of Windows, see http://www.microsoft.com/technet/security/bulletin/ms00-029.asp.
This security hole was discovered by Dmitri Netes of BindView, a
network security research firm.
Photoshop 5.5 Look out! On Intel Pentium 3 computers, Photoshop
5.5 may crash or freeze, says Adobe. Visit http://www.adobe.com/support/techdocs/2256a.htm
for an array of workarounds.
Office 2000 A patch that squashes a security vulnerability
in Microsoft Office 2000, and the following Office Family of Suites
can be downloaded at http://officeupdate.microsoft.com/info/ocx.htm:
Word 2000, Excel 2000, PowerPoint 2000, Access 2000, Photodraw 2000,
FrontPage 2000, Project 2000, Publisher 2000, Outlook 2000, and
Works 2000 Suite. The culprit is the ActiveX control that ships
with Office 2000. It's marked "safe for scripting" when it shouldn't
be. It allows the "Show Me" function in Office Help to script Office
functions. This creates a perfect environment for a malicious Web
operator to use the control to take advantage of the Office functions
on the machine of a user who visited the site.
|