Interesting that this is not a part of Windows 98's Windows Update. If it was a serious enough vulnerability to fix you would think that it would also be easy to download and install without subscribing to any security related lists. :> _John On Mon, 17 Jan 2000, Microsoft Product Security wrote: > The following is a Security Bulletin from the Microsoft Product Security > Notification Service. > > Please do not reply to this message, as it was sent from an unattended > mailbox. > ******************************** > > Microsoft Security Bulletin (MS00-005) > -------------------------------------- > > Patch Available for "Malformed RTF Control Word" Vulnerability > Originally Posted: January 17, 2000 > > Summary > ======= > Microsoft has released a patch that eliminates a security vulnerability in > the Rich Text Format (RTF) reader that ships as part of Microsoft(r) > Windows(r) 95 and 98, and Windows NT(r) 4.0. Under certain conditions, the > vulnerability could be used to cause email programs to crash. > > Frequently asked questions regarding this vulnerability can be found at > http://www.microsoft.com/security/bulletins/MS00-005faq.asp. > {SNIP} > > Affected Software Versions > ========================== > - Microsoft Windows 95 > - Microsoft Windows 98 > - Microsoft Windows 98 Second Edition > - Microsoft Windows NT 4.0 Workstation > - Microsoft Windows NT 4.0 Server > - Microsoft Windows NT 4.0 Server, Enterprise Edition > - Microsoft Windows NT 4.0 Server, Terminal Server Edition > > NOTE: Windows 2000 is not affected by this vulnerability. > > Patch Availability > ================== > - Windows 95: > http://www.microsoft.com/windows95/downloads/contents/ > WUCritical/rtfcontrol/default.asp > - Window 98: > http://www.microsoft.com/windows98/downloads/contents/ > WUCritical/rtfcontrol/default.asp > - Windows NT 4.0 Workstation, Windows NT 4.0 Server, and > Windows NT 4.0 Server, Enterprise Edition: > Intel: > http://www.microsoft.com/Downloads/Release.asp?ReleaseID=17510 > Alpha: > http://www.microsoft.com/Downloads/Release.asp?ReleaseID=17511 > - Windows NT 4.0 Server, Terminal Server Edition: > To be released shortly. {SNIP}
This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:29:06 PDT