Microsoft Security Bulletin Release for 10/15/2003

[Jerry Bryant [MSFT]]

NOTE: http://www.microsoft.com/technet/security and
http://microsoft.com/security are authoritative in all matters concerning
Microsoft Security Bulletins! ANY email, web board or newsgroup posting
should be verified by visiting these sites for official information.
Microsoft never sends security updates as email attachments!

Today Microsoft released the following Security Bulletins. This represents
the first release under our new monthly release schedule and Security
Bulletin format.

Microsoft Windows Security Bulletin Summary for October, 2003
http://www.microsoft.com/technet/security/bulletin/winoct03.asp

Microsoft Exchange Server Security Bulletin Summary for October, 2003
http://www.microsoft.com/technet/security/bulletin/excoct03.asp

Links to individual Bulletins:

MS03-041 - Flaw in Authentication Verification Could Allow Remote Code
Execution - Severity Rating: Critical
http://www.microsoft.com/technet/security/bulletin/MS03-041.asp

MS03-042 - Buffer Overflow in Windows Troubleshooter ActiveX Control Could
Allow Code Execution - Rating: Important
http://www.microsoft.com/technet/security/bulletin/MS03-042.asp

MS03-043 - Buffer Overrun in Messenger Service Could Allow Code Execution -
Severity Rating: Critical, Severity Rating for Trustworthy Computing
Initiative Products: Moderate
http://www.microsoft.com/technet/security/bulletin/MS03-043.asp

MS03-044 - Flaw in Windows Help and Support Center Could Lead to System
Compromise - Severity Rating: Critical
http://www.microsoft.com/technet/security/bulletin/MS03-044.asp

MS03-045 - Buffer Overrun in the ListBox and in the ComboBox Control Could
Allow Code Execution - Severity Rating: Important
http://www.microsoft.com/technet/security/bulletin/MS03-045.asp

MS03-046 - Flaw in Exchange Server Could Allow Arbitrary Code Execution -
Severity Rating: Critical
http://www.microsoft.com/technet/security/bulletin/MS03-047.asp


MS03-047 - Flaw in Exchange Server 5.5 Outlook Web Access Could Allow
Cross-Site Scripting Attack - Severity Rating: Moderate
http://www.microsoft.com/technet/security/bulletin/MS03-046.asp

--
Regards,

Jerry Bryant - MCSE, MCDBA
Microsoft IT Communities

Get Secure! www.microsoft.com/security


This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Mike]

Why are there two versions of these updates? There is one install
package for SP2 and a separate one for SP3&SP4. As far as I can tell
they are identical. I have extracted their contents and they have the
same file sizes and dates. The reason this concerns me is that the
package for SP2 will install successfully on a system with SP4.
Thanks.

Mike