Silicon Investor (SI) -- The First Internet Community

STOCKTALK

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor. We ask that you disable ad blocking while on Silicon Investor in the best interests of our community. If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.

Pastimes : Computer Learning -- Ignore unavailable to you. Want to Upgrade?

To: mr.mark who wrote (10830)	7/20/2000 9:12:52 AM
From: CatLady	Read Replies (1) \| Respond to of 110603

It's hard to catch mr.mark snoozing. <G> From this morning's LangaList email, Another significant MS security hole patched. 4) Patch Available for the "Office HTML Script Vulnerability" The news went out from Microsoft a couple days ago: "Two vulnerabilities have recently been discovered, one affecting Microsoft Office 2000, and PowerPoint 97, and the other Internet Explorer 4.01 SP2 and higher. We will refer to these issues as the "Office script" and "IE script" vulnerabilities. The names refer to the product where the vulnerability is present, but not necessarily how the vulnerability is exploited. "The Office HTML Script vulnerability, allows malicious script code on a web page to reference an Excel 2000 or PowerPoint file in such a way as to cause a remotely hosted file to be saved to a visiting user's hard drive. This vulnerability can only be exploited by a reference to an Excel 2000 or PowerPoint file; it cannot be exploited using Excel 97, Microsoft Word or a Microsoft Access file. "The IE Script vulnerability, can allow malicious script code on a web page to reference a remotely hosted Microsoft Access file. The Microsoft Access file can in turn causes a VBA macro code in the file to be executed." The affected software versions are: Microsoft Excel 2000 Microsoft PowerPoint 97 and 2000 Microsoft Internet Explorer 5.5, 5.01 SP1, 5.01, 4.01 SP2 Patch Availability: Microsoft Excel 2000 and PowerPoint 2000 officeupdate.microsoft.com Microsoft PowerPoint 97 officeupdate.microsoft.com FAQ (and workaround for the IE problem) microsoft.com