Frontpage
Forums
Tutorials
Members
Calendar
Subscription
Donate
Links
Contact 
Help
Latest Software News
Latest Hardware News
Latest Mobile
Latest Security News
Latest Forum Posts
Latest News Comments
-
Microsoft rebrands itself
By j7n, Apr 30 2013 05:00 AM
-
Microsoft rebrands itself
By j7n, Apr 30 2013 05:00 AM
-
Google releases Metro-style...
By gelapir, Apr 29 2013 04:59 AM
-
Microsoft rebrands itself
By bizzybody, Apr 27 2013 04:17 PM
-
Android 4.1 Jelly Bean Comi...
By famas, Apr 02 2013 11:27 PM
MSFN Statistics
- Total Posts 802048
- Total Members 102077
- Newest Member Francisco12
- Online At Once Record 17869
- Online Now: 2679
Recommended Sites
Microsoft fixes critical DLL hole in Office but not XP SP3
This month's fairly light Patch Tuesday included a critical patch for Microsoft Office that fixed a couple of dangerous issues, including Microsoft's first and only patch for the DLL hijacking vulnerability that made big news in August. The Office patch also included a fix for a scary drive-by exploit which could infect a PC if an evil e-mail showed up in the preview box of Outlook.Enterprise users may be pleased that Microsoft's patch for the DLL bug has arrived for Office, as several applications included in Office have been known to be vulnerable, including PowerPoint, Excel and Word. But there are other Microsoft applications including Windows XP SP3 and the new Microsoft Visual Studio 2010 that are hanging out waiting for a patch.
Microsoft has not released a list of its own Windows applications found to be affected by the DLL hole (which can't surprise anyone). But since the hole came to light about three months ago, others have created such lists.
Vupen Security keeps this running list of a couple of dozen applications it knows to be affected. Those marked with a red square are considered to be rated critical. Notice that the DLL hole affects a couple of applications that are part of Windows XP SP3 (the still supported version). It has also been confirmed with older apps like Visio 2003.
Full story: NetworkWorld
0 Comments
Page 1 of 1
Page 1 of 1