Critical Microsoft security bulletin revised to include Office for the Mac
230996
Blog: Microsoft revises one of its critical security bulletins from patch Tuesday, now including a fix for Microsoft Office 2004 for the Mac.
452953
Microsoft has released its last regular security update of the year which includes five new patches, all rated &#39;important&#39;, and the reissue of a &#39;critical&#39; patch after extensive revisions.
572456
InfoWorld - Microsoft has named the date on which Mac OS X users can get their hands on the latest version of its Office suite.
715397
(InfoWorld) - Microsoft Corp. has released its monthly set of security patches, fixing a critical flaw in Office. Attackers could exploit the bug by tricking Office users into opening a maliciously encoded .pub document, which would then allow attackers to run unauthorized software on a victim's PC. These .pub documents are created by Microsoft's Publisher software, an Office component used for designing print and online business publications. The flaw isÂ described here. Microsoft rates the bug as critical for Publisher 2000, but this warning has been downgraded to "important" for the Publisher 2002 and Publisher 2003 products. Some security experts expected Microsoft toÂ fix a similar bug in Word, which has been used by online attackers over the past few weeks, but that problem remains unfixed. Microsoft acknowledged the Word problem last week and probably did not have time to run a fix through its quality assurance tests, said Jonathan Bitle, a manager of technical accounts with Qualys Inc. "It's really late in their engineering cycle, so it's understandable that they wouldn't manage to get something out," he said. Both the Word and Publisher bugs rely on the same type of attack to work: an attacker e-mails a malicious document and somehow tricks the victim into clicking on the attachment. Security experts have been seeing more of these Office flaws exploited of late. "This is one of the trends that we have observed," said Amol Sarwate, director of the Qualys vulnerability research lab. "The growing number of client-side vulnerabilities where you have a malformed Publisher file or Word file or Excel file." Tuesday's patches also include less-critical fixes for two Windows components: the PGM (Pragmatic General Multicast) protocol used by Microsoft's Reliable Multicast Program software to transfer data, and the Windows Indexing service, which is used by the operating system's search engine. Microsoft's security bulletins offer more information. September may seem likeÂ a bit of a reprieve for harried system administrators who were given 19 updates to test and deploy over the past two months. Microsoft was forced toÂ reissue one of its August patches after it caused Internet Explorer to crash when working with a Web-based enterprise applications such as PeopleSoft and Siebel. But before Microsoft patchers get too relaxed, they should brace for the possibility of another patch later this month, Qualys said. Because attackers are actively exploiting the Word problem, Sarwate believes that Microsoft may issue an "out-of-cycle" patch for the problem, ahead of its next scheduled security updates, which are due Oct. 10. Â
746182
Most of the critical patches affect Microsoft Office, and include Office for Mac.
460436
Service Pack 1 for Office 2004 for Mac is now available via AutoUpdate, Microsoft announced Tuesday. The update delivers security and bug fixes, which were reported by customers since the suite's release last May. To this end, SP1 bundles the Microsoft Error Reporting Protocol (MERP) to allow users to send bug data anonymously to Microsoft. Office 2004 for Mac SP1 will also soon be available on Microsoft's Mactopia.
166796
Microsoft Corp. on Tuesday released 12 security fixes for its Windows operating system and Office business software.
507974
Microsoft Corp. released four critical patches Tuesday to plug security holes in several versions of its Windows operating system, Internet Explorer Web browser and other programs.
349146
Microsoft further detailed its plans for Office 2008 for Mac on Tuesday, saying that it plans to release three versions of the product including one with a Macintosh version of its Expression suite.
55085
Microsoft advised users of its Mac version of Microsoft Office that a security patch inadvertently issued through its software update service was not ready for release. It advised those that may have applied the patch to uninstall the update.
395498
NOVEMBER 04, 2004 (IDG NEWS SERVICE) - Microsoft Corp. will give customers advance notice of its monthly security updates in an effort to help them prepare to install related software patches, the company announced today.
541400
Microsoft today released a dozen security updates to fix a score of vulnerabilities in various products, including a "critical" patch for its own security software.
768081
Microsoft Corp. on Tuesday released several security fixes for its Windows operating system and Office software, and rereleased two previous patches.
530809
There&#8217;s now one more reason to be careful about opening Microsoft Office attachments.
91214
Microsoft began offering a few details of its upcoming release of the Office 2008 suite for the Mac platform, by first listing work to Entourage to further support Exchange services and features.
71719
As Redmond unwraps 'comments disabled' vuln research blog Microsoft plans to issue two security patches next Tuesday, one of which earns the dreaded rating of critical, in this year's first edition of its regular Patch Tuesday update cycle.â¦
654730
Software giant will publish advance notice of security bulletins.