Re: Yet another extremely serious OE bug

From: Torgeir Bakken (MVP) (Torgeir.Bakken-spam@hydro.com)
Date: 10/12/02 

From: "Torgeir Bakken (MVP)" <Torgeir.Bakken-spam@hydro.com>
Date: Sat, 12 Oct 2002 01:45:54 +0200

Shannon Jacobs wrote:

> Okay, so I just received the security email from Microsoft. Can't be a hoax,
> since it is properly linked to the Microsoft Web site. It says there is yet
> another extremely serious launch-arbitrary-code-on-preview bug in Outlook
> Express 6 and 5.5SP2. As someone who gets lots of email via Outlook Express,
> I have to regard this as extremely serious.
>
> Nothing available in WindowsUpdate, so I followed the link from the security
> email to the Microsoft Web site. It says the patch is on another
> microsoft.com page, so I go there. (Why can't Microsoft do ANYTHING in a
> straightforward manner?) On the new page there are buttons for two versions
> of this patch. But they don't work. The file downloads and announces that it
> needs OE6, which is what I have. (I finally tried the other button just for
> grins, but it properly announced it needed OE5.5, which is what I don't
> have.)
>
> Gee, if I had a nickel for every time I've been similarly frustrated in my
> dealings with Microsoft, I'd be WAY ahead on my dealings with them.

Hi

I guess you have IE 6.0 Service Pack 1 installed. It will not install on IE 6.0
SP1 because it is already installed there.

>From http://www.microsoft.com/technet/security/bulletin/MS02-058.asp

<qoute>
Notes:
The fix for this issue was included in Windows XP Service Pack 1, and in
Internet Explorer 6.0 Service Pack 1.
</qoute> 

--
torgeir
Microsoft MVP Scripting and WMI
Porsgrunn Norway