Re: MS04-027 and MS04-028 not detected

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Mike Chan [MSFT] (mchan_at_online.microsoft.com)
Date: 09/21/04


Date: Mon, 20 Sep 2004 19:17:44 -0700

MBSA only has local detection capability for those 6 office products through its
use of the Office Detection Tool - Visio and Project are supported through that
tool. You would go to office updates to get the patches if you are vulnerable.

-- 
Mike Chan
Technical Product Manager (MBSA)
Security Business Unit
Microsoft Corporation
This posting is provided "AS IS" with no warranties, and confers no rights.
--
"Kim Oppalfens" <kim@computacenter.nospam> wrote in message 
news:MPG.1bb3fb5f37ceadac98980b@msnews.microsoft.com...
>
> Will the office scanning tools help?
> Do they support visio & project?
>
> Kim Oppalfens
> In article <#awcu$zmEHA.2340@TK2MSFTNGP11.phx.gbl>,
> dugn@online.microsoft.com says...
>>
>> MBSA does not support either of these patches for patch detection, so SMS
>> will not be able to detect any case except for caes where the Office
>> Detection Engine will identify some of these issues.  Cross-posting to SMS
>> Tools newsgroup for a more exact answer regarding the SMS case and SMS
>> support...
>>
>> From the MSSECURE.XML Announcement mail sent out yesterday:
>>
>>   a.. MS04-027 (WordPerfect Converter) - 884933.  This bulletin is not
>> supported for detection in MBSA.  See KB306460 for more details on supported
>> products.
>>   b.. MS04-028 (GDI+) - 833987.  This bulletin will generate a Note message
>> on the applicable platforms indicated in the MS04-028 bulletin.  This is
>> critical to understand since even though some operating systems may be
>> affected by having a vulnerable Microsoft product installed on an otherwise
>> unaffected operating system, the only platforms that will show a Note
>> message are the Affected Operating Systems (Windows Server 2003 and Windows
>> XP RTM and SP1) and Affected Components (Internet Explorer 6 SP1) as called
>> out in the MSRC bulletin.  See KB306460 for more details on supported
>> products.
>>
>>
>
> -- 
> Check out the SMS Technical FAQ:
> http://www.microsoft.com/technet/prodtechnol/sms/sms2003/techfaq/default
> .mspx 


Relevant Pages

  • New MSSecure.XML Version 2005.04.12.0 Now Available
    ... release contains 8 new bulletins, 7 of which are fully supported by MBSA. ... Windows Server 2003 Small Business Server Detection: ... provide detection support based on the specifics of each release. ...
    (microsoft.public.security)
  • Re: New MSSecure.XML Version 2005.10.11.0 Now Available
    ... feel free to contact PSS for support on the Microsoft ... Security Analyzer (MBSA). ... >> regarding MBSA 2.0 patch detection for this month's release should by ... This bulletin replaces all previous versions of MS05-039. ...
    (microsoft.public.security)
  • Re: MS04-027 and MS04-028 not detected
    ... MBSA does not support either of these patches for patch detection, so SMS ...
    (microsoft.public.sms.tools)
  • New MSSecure.XML Version 2005.07.12.0 Now Available
    ... MSSECURE.XML Data Version 2005.07.12.0 (for use by MBSA 1.2 and SMS SUS ... There is also a single re-release for previously released bulletins listed ... Full support in SMS. ... As part of an ongoing commitment to provide detection tools for complex ...
    (microsoft.public.security)
  • Re: New MSSecure.XML Version 2005.07.12.0 Now Available
    ... feel free to contact PSS for support on the Microsoft ... Security Analyzer (MBSA). ... >> release contains 3 new bulletins, all 3 of which are fully supported by ... >> As part of an ongoing commitment to provide detection tools for complex ...
    (microsoft.public.security)