**03-024Buffer Overrun in Windows Could Lead to Data Corruption [Wednesday again]

Title: Buffer Overrun in Windows Could Lead to Data Corruption (817606)
Date: July 09, 2003

Software: Microsoft Windows NT Server 4.0; Microsoft Windows NT Server
4.0;Terminal Server Edition; Microsoft Windows 2000;Windows XP
Impact: Allow an attacker to execute code of their choice
Maximum Severity Rating: IMPORTANT
Bulletin: MS03-024

The Microsoft Security Response Center has released Microsoft Security
Bulletin MS03-024

What Is It?
The Microsoft Security Response Center has released Microsoft Security
Bulletin MS03-024 which concerns a vulnerability in Windows.  Customers
are advised to review the information in the bulletin and test and
deploy the patch in their environments, if applicable.

More information is now available at

If you have any questions regarding the patch or its implementation
after reading the above listed bulletin you should contact Product
Support Services in the United States at 1-866-PCSafety
(1-866-727-2338).  International customers should contact their local

Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
7/9/2003, 6:40:31 PM

[Reminder for those of you running HfnetchkLT. It normally takes Shavlik a bit of time to test patches. They will research, update, test, and publish new XML files for these patches (they aim to release this data same business day as the patches are available) But dont' expect your HFnetchkLT to find these patches right now. Check the newsgroups at news.shavlik.com for a posting from Eric Schultze once this process is complete] Today Microsoft released the following Security Bulletins. Note: http://www.microsoft.com/technet/security and http://www.microsoft.com/security are authoritative in all matters concerning Microsoft Security Bulletins! ANY e-mail, web board or newsgroup posting (including this one) should be verified by visiting these sites for official information. Microsoft never sends security or other updates as attachments. These updates must be downloaded from the microsoft.com download center or Windows Update. See the individual bulletins for details. Because some malicious messages attempt to masquerade as official Microsoft security notices, it is recommended that you physically type the URLs into your web browser and not click on the hyperlinks provided. Bulletins Summaries: Windows - http://www.microsoft.com/technet/security/bulletin/winnov03.asp Office - http://www.microsoft.com/technet/security/bulletin/offnov03.asp Critical Bulletins: MS03-048 - Cumulative Security Update for Internet Explorer (824145) http://www.microsoft.com/technet/security/bulletin/MS03-048.asp MS03-049 - Buffer Overrun in the Workstation Service Could Allow Code Execution (828749) http://www.microsoft.com/technet/security/bulletin/MS03-049.asp MS03-051 - Buffer Overrun in Microsoft FrontPage Server Extensions Could Allow Code Execution (813360) http://www.microsoft.com/technet/security/bulletin/MS03-051.asp Important Bulletins: MS03-050 - Vulnerability in Microsoft Word and Microsoft Excel Could Allow Arbitrary Code to Run (831527) http://www.microsoft.com/technet/security/bulletin/MS03-050.asp In addition to the new bulletins above, the following Important bulletin was re-released: MS02-050 - Certificate Validation Flaw Could Enable Identity Spoofing (Q329115) http://www.microsoft.com/technet/security/bulletins/MS02-050.asp This represents our regularly scheduled monthly bulletin release (second Tuesday of each month). Please note that Microsoft may release bulletins out side of this schedule if we determine the need to do so. If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact Product Support Services in the United States at 1-866-PCSafety (1-866-727-2338). International customers should contact their local subsidiary. -- "Don't lose sight of security. Security is a state of being, not a state of budget. He with the most firewalls still does not win. Put down that honeypot and keep up to date on your patches. Demand better security from vendors and hold them responsible. Use what you have, and make sure you know how to use it properly and effectively." ~Rain Forest Puppy http://www.wiretrip.net/rfp/txt/evolution.txt

Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
VS '03 Bug?
2 replies , 1/29/2005, 1:27:02 AM
When inheriting forms in .net and viewing an inherited form in the disigner the designer calls the constructor from all the forms involved. Certain functions cannot be called during design time because variables are not set that require remote access to a server. This can be avoided by setting if(this.designmode){return;} statements above the code we do not want to run in the top most form. The problem occurs in the inherited forms, as the constructor is called, the "this.designmode" property is not being recursively defined as true. Therefore the statement is ignored and the designer trys to call the function any way which throws an "object reference not set to an instance of an object" error in the design view and will not allow editing of the form. Is this a bug, or is there a way around it? Thanks!

Config VS.Net '03 for PPC '03 Emulator?
0 replies , 12/2/2003, 8:22:24 AM
Probably a simple question, but how do I config VS.Net 2003 to use the PPC 2003 Emulator instead of the '02 emulator?? :) Thanks! Jack

Jack Black
Visio '07 with Office '03
2 replies , 9/25/2007, 2:32:05 AM
Since you cannot buy 2003 anymore, I had to purchase Visio 2007 for school. After putting it on my XP machine (with all updates to the OS) and running Windows Update to check for the latest and greatest (it wanted to update the Office '07 components, too), I'm having a problem with Word '03. Opening the first document of the session by double-clicking it on the desktop pulls up the application, but with a "hole" in the upper left, presumably where the ribbon goes in '07, and the menus are scrunched. It fixes itself eventually (after a very long time), but sometimes doesn't pull up the document. Does this mean they cannot coexist? Have I been duped into upgrading my Office suite, too? Jon

Outlook 03 and hotmail.com
1 replies , 2/3/2008, 10:50:49 PM
Hello, can someone help me learn how to set up a hotmail account within Outlook 03? I can't seem to determine what the incoming and outgoing servers are. thank you

On other versions of office I have ordered some files in name sorting to display date order using last 2 digits of year, one digit for month 1 - 9 then a b c; and if required two digits for day. Now in directory folders the years are scattered, because alpha characters after two digits seem to have preference over a numeric third digit. Help!

template downloads think I have '03 std, have xp '02
1 replies , 1/8/2006, 1:02:01 PM
I'm having a problem downloading Office templates; the site immediately assumes I'm using 2003 standard and asks for my product key - I'm running on XP 2002. Any help? Thanks, Andy

import .wmf->excel 03?
0 replies , 3/2/2006, 3:25:56 PM
Help = You don't need a separate graphics filter installed to insert the following ... .. Windows Metafile (.wmf) graph; In CAD = created .wmf image; Now what?

hi! I have microsoft word/powerpopint/excel 03 (it was bought and installed with the key), and now I have office 07. Do I need to unistall 03 softwear before innstalling Officee 07 on my laptop?

Posters on the full disclosure list are discussing possible exploit code for 03-039. Again, determine your threat vector. Last time home users were hit the worst. Ensure that your "non-controlled" workstations [those NOT behind ISA] get the most patching attention. Susan

Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
Metadata\Data remnant removal Excel 03 and Access 03
1 replies , 3/17/2009, 8:20:07 AM
Hi does anyone know if there is a function or bit of VBA script I can apply to remove private\restorable data from both an Excel flat spreadsheet and a 3D access database? We have visually removed all data but I'm not convinced everything is gone. I guess similar to Word 07's function in file properties or somewhere which I thought not only removed metadata but everything. In Australia and trying to find out tonight - today America time. Any direction appreciated. Have some Level 2 help desk\applications support expertise so steering in the right direction is OK. Else I"m thinking export as a .csv and maybe pass thru notepad then back into a new Excel document, and a quick rebuild of as much as I can of the Access db with key relationships and properties replicated. Thanks! Christine

upgrade from 00 to 03 questions
4 replies , 4/23/2004, 9:46:15 AM
I am going to be doing my first 00 to 03 upgrade. Anything specific to look out for? Does anyone know if norton corporate works on windows 03? thanks

Word '02 mail merge with Access '03 dde error
0 replies , 5/1/2006, 9:39:02 PM
I realize that my problem has been previously discussed, however I have not come across a solution in the postings that fixes my problem. I am trying to perform a mail merge betwenn MS Word 2002 and Access 2003 (or Word 2003). I am receiving the following error: “Word could re-establish a DDE connection to MS ACcess to complete the current action”. I have tried the instructions contained in Microsoft’s article ID #: 813989; ticking convert at open, enabling shared access to database, and setting security levels to low. And although I believe that I need to connect to the database via DDE, because I need to merge a query, I have tried to connect to the data source via ODBC method. When doing this I then receive the error “Word was unable to open the data source”. I have tried both methods (DDE and ODBC) while having the Access database open, but this results in the same error messages as well. Any ideas?

Converting 20010321 to 03/21
5 replies , 8/23/2007, 6:00:02 PM
I've tried every type of format available and tried to custom make one. Please help! I have a whole column of birthdates listed as 20010321 (yyyymmdd) and I need them to read only the mm/dd. General steps appreciated. thx!

Title: Flaw in ISA Server Error Pages Could Allow Cross-Site Scripting Attack (816456) Date: July 16, 2003 Software: Microsoft Internet Security and Acceleration (ISA) Server 2000 Impact: Allows an attacker to execute code of their choice Maximum Severity Rating: Important Bulletin: MS03-028 The Microsoft Security Response Center has released Microsoft Security Bulletin MS03-028 What Is It? The Microsoft Security Response Center has released Microsoft Security Bulletin MS03-028 which concerns a vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000. Customers are advised to review the information in the bulletin and test and deploy the patch in their environments, if applicable. More information is now available at http://www.microsoft.com/technet/security/bulletin/MS03-028.asp If you have any questions regarding the patch or its implementation after reading the above listed bulletin you should contact Product Support Services in the United States at 1-866-PCSafety (1-866-727-2338). International customers should contact their local subsidiary.

Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
XP or '03?
5 replies , 10/24/2003, 4:50:11 PM
I'm thinking of upgrading my Office 2000 Standard to XP or '03 Standard. I'm running XP Pro for my O/S. Which version would be best? RR

champ mananger 03/04
1 replies , 11/23/2003, 6:34:41 PM
Please please help. I cannot load this game.It starts of fine and goes through setup but then the error "error 1311.source file not found D:Data1.cab.Verify that the file exsists and that you can access it" What the hell is this all about.Please someone help.

Office 03 install on Vista64
0 replies , 4/10/2007, 2:10:02 AM
I have installed this before but never seen this: Error 1913, Setup cannot update file C:\Windows\SysWOW64\mapisvc.inf. Verify that the file exist in your system and that you have sufficient permissions to update it. I looked and trusted installers have full control, I'm logged on with admin priv and the file is there so WTF??

Will MS Sm Bus 03 accept Access 03 in upgrade form?
2 replies , 9/2/2006, 2:45:01 AM
Will MS Small Business 2003 accept Access 2003 in an upgrade form? Access was not part of the program.


Updating 03 office with 07
1 replies , 5/13/2009, 11:34:01 PM
My laptop has 03 office. During the installation of 07, I chose to update existing office with the newer version. It worked well for about a week. (I work a lot with excel and use memory sticks that have both office 03 and 07 files). Then all of a sudden I got this message - "The setup controller has encountered a problem during install. Please review the log files for further information on the error". I press the "OK" button and can do nothing on excel. Needless to say I have no idea what "log files" are. I tried reinstalling 07 and it has made no difference. I have the same problem when I use Word. Any suggestion on how to fix this problem would be appreciated. Thanks, M

Office 07B with Office 03
1 replies , 5/24/2006, 7:49:01 AM
Hi. Does any know if it would better to use virtual PC to creat another pc and intsall Office 2007 on that pc. Whould there be a problem with that. -- Thomas G.

1 replies , 9/8/2005, 10:34:11 PM
Can u make MSN messenger appear in a 2x3 window in any office'03. on the upper right corner under the Minimize,Maximise and closed Button. Messenger should be running with the programs when they are started. Is this possible? ---------------- This post is a suggestion for Microsoft, and Microsoft responds to the suggestions with the most votes. To vote for this suggestion, click the "I Agree" button in the message pane. If you do not see the button, follow this link to open the suggestion in the Microsoft Web-based Newsreader and then click "I Agree" in the message pane. http://www.microsoft.com/office/community/en-us/default.mspx?mid=cada88f9-849c-492f-b875-89b3bc154684&dg=microsoft.public.officeupdate

Macros in Office '03
0 replies , 11/6/2004, 2:27:01 PM
I have just loaded Office '03. Now when I open word or other apps, I get a warning that macros are disabled. Do I need these and how do I enable them?

I have two worksheets (Summary and Detail) in my workbook. On the summary tab I have two columns (Priority 1-2) and (Priority 3-5). For each column I need to count on the detail tab, the number of times the numbers 1 or 2 appear in Prioirty column when the dates in column B are 03/02/08 and 03/09/08, and then I need the count for when the Priority is 3-5 for the same dates. Priority Date 1 02/28/08 1 03/02/08 5 03/08/08 2 03/08/08 3 03/08/08 2 03/09/08 2 03/15/08 1 03/15/08

Installation of 03
1 replies , 2/19/2004, 10:04:27 PM
How can I run both 03 and 2k side by side so I can road test 03 and compare whats different. It seems like you have to upgrade Outlook but the others you either choose to upgrade or not to.

Office 03 won't update
1 replies , 7/18/2010, 1:46:34 AM
> There should be some code like 0x12345678 somewhere too. > Google for that code. Ok, I did and found that the code was generic error code. But a search led me to a page that told me to turn on verbose logging, which I did. But the only log I found, at c:\windows\softwaredistribution \reportingevents.log said this: 102 80070643 MicrosoftUpdate Failure Content Install Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft Office Outlook 2003 (KB980373). That's simply the generic error code again, so nothing new there. Maybe an Office repair is the way to go.

Paul B.
Where did Ofs '03 go?
3 replies , 3/26/2009, 4:57:01 PM
I had Ofs '03, but my college student dau uses my pc for school work back-up and needed Ofs '07. So we loaded her school issued CD of Ofs '07 onto my laptop. Because of pc upgrades she had already used that CD 3 times and didn't know that was all the uses it was good for. A pop-up informed us that I would be allowed approximately 20 uses in order to decide whether I wanted to make an upgrade purchase. Soon thereafter my husband experienced a medical emergency. I took my pc to access his medical records for the doctors & staff. During his hospital stay the allowed '07 uses expired! I don't think I was ever given an option to purchase, only that access was now denied. I could open existing docs created in Ofs '03, but I could not edit them, and I could no longer create new docs! After my husband's return home I couldn't find a way to make the purchase of Ofs '07, via the CD where we'd loaded it. Hoping to just return to Ofs '03 for the time being, I uninstalled '07 thinking '03 would still be there and operational. Apparently, however, '07 disabled '03, and now I am without either! Next I tried "System Restore" attempting to "go back" to before I'd loaded MS Office '07, but this didn't solve my problem! I am left wondering if I've done damage to the registry, but if that were the case I thought that nothing at all would work, and even though MS Office isn't working, in any version, MS Works is still available, and I can still surf the net, use Yahoo e-mail, Facebook, Favorites, etc. I can also still save digital pictures to "My Pictures" and view them in thumbnail or filmstrip. But, when I attempt to open them I get a pop-up that reads, "Windows, preparing to install". This pop-up flashes quickly then disappears. It is followed by the picture actually opening to a larger size, but with a message across it that reads, "Picture Manager: You have not entered a valid product key..." BUT AT NO TIME have I been given the opportunity to enter any product key. (Note, I can view all the pictures in Picasa 3.) At this stage, even though I would much prefer to return to my previously loaded MS Ofs '03, I am willing to purchase '07. Anything to get Ofs/Word back. But am reluctant to purchase '07 without knowing it will solve my current problem. Can someone please advise me? S. Lee The emergency is now past, but I'm still unable to use Ofs. In an effort to return to my '03 version I uninstalled '07 only to discover that apparently '07 disabled '03! This leaves me frustrated with '07 and perfectly willing to return to '03, but it won't reload! I can still access folders created in '03, but files won't open, and I get a pop-up that says "Windows -- S. Lee

Need Excel 03 download after auto MS updates?
0 replies , 8/15/2008, 6:20:04 PM
MS auto downloads/updates delete excel 2003. How can I find a download of the program (not pages of irrelevant stuff), Don't need or want Office 07 or 8. -- Woods

03 vs 07
0 replies , 2/20/2009, 1:22:03 AM
Our agency has forms we created in 03 and they are locked so that people use them but can't edit them. When we use these forms now in 07 we can't 'unlock' them for editing. Does any one know hos to do this? -- Confused!

Icons in Office 03
4 replies , 2/16/2005, 8:23:08 PM
I am trying to locate the Office 03 icon in office 03 pro.. Want to make some desktop shortcuts..... I have found loads of icons but not the logo icon of office 03. Can anyone point me to it?? Thanks. Johnshandy

Office 03, 07 and VISTA
4 replies , 4/23/2008, 10:18:01 PM
I have a brand new laptop with Vista Ultimate. My business computer has XP Pro and Office 2003. Looking through the previous threads I would be confident trying to install 2003 on the laptop, however I have just noted that my install CD is licenced for 1 computer. Can this be upgraded? I use the laptop when working away and create Word and Excell documents. Alternatively if I install Office 2007 on my laptop will the main business computer with Office 2003 have any probs reading them? Or would I have to convert them to a 2003 format before trying to open them? Thanks in advance.

Office 03 install limits?
1 replies , 9/12/2008, 3:23:04 PM
Can someone clarify this for me?? You can only install on 3 separate pc's....BUT you can install as many times as you like on the same pc! Is that correct?

Year formatting in Excel '03
2 replies , 12/4/2007, 2:13:36 PM
I have an interesting situation where a client is interested in only entering the year in the field but the a date format. The unfortunate year result is 1905. Even with a custom value such as yyyy Excel still returns the 1905 "year". Now after some reading on the google, I have found that the reason why this happens but not how to make it work. ref. http://groups.google.com/group/microsoft.public.excel.programming/browse_thread/thread/fe25baef9f57e8c7/39c5922c86bc01bf Any ideas? Thanks, g-