Re: Microsoft Security Bulletin for October released

From: Michael Pruefer (tech_at_hspeed.net)
Date: 10/16/04


Date: Sat, 16 Oct 2004 20:16:59 +0200

Hello,

is there any workaround for "trusted computers" ?

Our content management system based on IE6 is not working
more because drag & drop is not working....

Best regrads
Michael Pruefer
------------------
After you install the MS04-038 security updates for Microsoft Internet
Explorer, you may experience the following symptoms: . DHTML drag-and-drop
operations are blocked for image elements if the image is not valid.
      . DHTML drag-and-drop operations are blocked for anchor elements that
include non-HTTP or HTTPS URLs.

"Donna Buenaventura (MVP]" <dbuenaventura@mvps.org> schrieb im Newsbeitrag
news:OnZufRIsEHA.2580@TK2MSFTNGP15.phx.gbl...
> Today Microsoft released the following Security Bulletins.
>
> Note: www.microsoft.com/technet/security and www.microsoft.com/security
are
> authoritative in all matters concerning Microsoft Security Bulletins! ANY
> e-mail, web board or newsgroup posting (including this one) should be
> verified by visiting these sites for official information. Microsoft never
> sends security or other updates as attachments. These updates must be
> downloaded from the microsoft.com download center or Windows Update. See
the
> individual bulletins for details.
>
> Because some malicious messages attempt to masquerade as official
Microsoft
> security notices, it is recommended that you physically type the URLs into
> your web browser and not click on the hyperlinks provided.
>
> Bulletin Summaries:
>
> October Summary
> http://www.microsoft.com/technet/security/Bulletin/ms04-oct.mspx
>
> Critical Bulletins:
>
> MS04-032 &#8211; Security Update for Microsoft Windows (840987)
> http://www.microsoft.com/technet/security/Bulletin/ms04-032.mspx
>
> MS04-033 &#8211; Vulnerability in Microsoft Excel Could Allow Code
Execution
> (886836)
> http://www.microsoft.com/technet/security/Bulletin/ms04-033.mspx
>
> MS04-034 &#8211; Vulnerability in Compressed (zipped) Folders Could Allow
> Code Execution (873376)
> http://www.microsoft.com/technet/security/Bulletin/ms04-034.mspx
>
> MS04-035 - Vulnerability in SMTP Could Allow Remote Code Execution
(885881)
> http://www.microsoft.com/technet/security/Bulletin/ms04-035.mspx
>
> MS04-036 - Vulnerability in NNTP Could Allow Code Execution (883935)
> http://www.microsoft.com/technet/security/Bulletin/ms04-036.mspx
>
> MS04-037 - Vulnerability in Windows Shell Could Allow Remote Code
Execution
> (841356)
> http://www.microsoft.com/technet/security/Bulletin/ms04-037.mspx
>
> MS04-038 - Cumulative Security Update for Internet Explorer (834707)
> http://www.microsoft.com/technet/security/Bulletin/ms04-038.mspx
>
>
> Important Bulletins:
>
> MS04-029 &#8211; Vulnerability in RPC Runtime Library Could Allow
> Information Disclosure and Denial of Service (873350)
> http://www.microsoft.com/technet/security/Bulletin/ms04-029.mspx
>
> MS04-030 &#8211; Bulletin Title Vulnerability in WebDAV XML Message
Handler
> Could Lead to a Denial of Service (824151)
> http://www.microsoft.com/technet/security/Bulletin/ms04-030.mspx
>
> MS04-031 &#8211; Vulnerability in NetDDE Could Allow Remote Code Execution
> (841533)
> http://www.microsoft.com/technet/security/Bulletin/ms04-031.mspx
>
> Re-Released Bulletins:
>
> MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code
> Execution (833987)
> http://www.microsoft.com/technet/security/Bulletin/ms04-028.mspx
>
> This represents our regularly scheduled monthly bulletin release (second
> Tuesday of each month). Please note that Microsoft may release bulletins
out
> side of this schedule if we determine the need to do so.
>
> If you have any questions regarding the patch or its implementation after
> reading the above listed bulletin you should contact Product Support
> Services in the United States at 1-866-PCSafety (1-866-727-2338).
> International customers should contact their local subsidiary.
>
> --
> Donna Buenaventura
>
> Microsoft MVP/Windows Security
> Keep Your Security Software Current With Upgrades, Updates & Definitions.
> Visit Calendar of Updates - http://cou.dozleng.com
>
>



Relevant Pages

  • <>
    ... > Microsoft Security Bulletin Advance Notification issued: ... > Microsoft also provides information to help customers prioritize monthly security updates with any non-security, high-priority updates that are being released on the same day as the monthly security updates. ...
    (microsoft.public.windows.server.sbs)
  • Re: Microsoft Security Bulletin for July 30, 2004
    ... > authoritative in all matters concerning Microsoft Security Bulletins! ... > sends security or other updates as attachments. ...
    (microsoft.public.windowsxp.general)
  • Security Bulletins for July 04
    ... Today Microsoft released the following Security Bulletins. ... sends security or other updates as attachments. ...
    (microsoft.public.security)
  • RE: Microsoft Security Bulletin(s) for 4/11/2006
    ... Today Microsoft released the following Security Bulletin. ... authoritative in all matters concerning Microsoft Security Bulletins! ... Cumulative Security Update for Internet Explorer ...
    (microsoft.public.security)
  • Re: Does Microsoft take Security Seriously? - Internet Bank hacked - it could happen to you!
    ... take security seriously. ... I have used Microsoft products for year without ... while downloading those updates. ... As soon as I connected to the Internet, I did a Windows Update - I ...
    (microsoft.public.windowsxp.security_admin)