Windows-Help.NET Newsletter 20 May 2000, Vol 3 No. 20
 Microsoft to "fix" Outlook, prevent virus spreading


by Arie Slob

Dear Windows-Help.NET Subscriber,

Microsoft announced that it is developing a significant security enhancement to the Microsoft Outlook messaging and collaboration client designed to thwart the spread and impact of many computer viruses - including those similar to the recent I Love You and Melissa viruses. This update limits certain functionality within Outlook to provide a significantly improved level of security for Outlook users. The new security enhancement will be available to download free of charge from the Office Update Web site the week of May 22, 2000. The patch will require a download of approx. 1MB.

"Given the global impact of the I Love You virus and the growing threat of malicious hackers, we strongly believe we must take the unprecedented step of limiting certain popular functionality in Outlook to provide a significant, additional security option for our customers," said Steven Sinofsky, senior vice president of Microsoft Office at Microsoft. "While this new security enhancement won't eliminate the threat of viruses, we believe it can greatly help eradicate the damaging class of viruses that have resulted in the I Love You and Melissa viruses. We strongly recommend that customers download this update to help safeguard against these types of viruses."

These security enhancements will be offered to Outlook 98 and Outlook 2000 customers. Changes made by the enhancements will make it harder for other programs to interact with the Outlook address book, one of the key areas which causes these latest viruses to spread so rapidly, because they access the Outlook address book, and mail copies to everyone listed. With the security update, a program other than Outlook itself will need permission from the user every time it needs access to the address book. This feature, cannot be turned off.

This will also mean that Palm or Windows CE handhelds will have to ask permission each time it syncs with Outlook. It will not be possible to sync remotely over a network. Mail merges from Word or other Office programs will also be affected.

When the Outlook Email Security Update is installed, some functionality in Outlook and other Office applications may be impaired. Microsoft has a list of this functionality impact on the Office Update Web site.


New version of LoveLetter (NewLove virus) not nearly as widespread as LoveLetter

Security firms are warning e-mail users of a new version of the VBS/LoveLetter virus. This new version is known as VBS.NewLove.A, and it carries much more dangerous payload than LoveLetter. However, NewLove is not widespread at present.

More...


Free* Software from our Freebate Center!


60 Second Smart: Screen-A-Day-Calendar


60 Second Smart: Screen-A-Day-Calendar

Downloadable
Normal price: $19.95
Our Price: $0.00

If you've got enough time to turn on your computer, then you've got enough time to get SMART! Each day you'll automatically increase your knowledge with a variety of entertaining and enlightening information on every subject imaginable.

* Free after Rebate - USA only

  Highlights  

Improve Performance; Check your BIOS Settings!

Is your system unstable? Perhaps a BIOS review could help?

More...


AMD Athlon Computer System

You've heard the rumors, AMD's Athlon Chip doesn't play well with others--but you can be successful!

More...


Microsoft Delivers "Fast Boot" Support for Partners in Windows Millennium Edition

Microsoft announced "fast boot" support for industry partners in the Microsoft® Windows® Millennium Edition (Me) operating system. Windows Me, combined with "fast boot"-optimized PC hardware like the Dell Dimension PC, will provide home users with faster access to their information, communications and entertainment any time.

More...


Restore Windows 95 like cascading menus to the Start Menu

I have updated this tip; you can also add Windows 2000-like functionality to Windows Explorer. With some registration settings, you will create a check box called Multi-Column Start Menu, which will let you change between the two styles "on the fly".

More...


ClipCache Plus

This award winning utility is like 3 powerful programs in one: a clipboard extender, a text editor featuring instant text cleanup, and a handy keyboard macro utility. If you're gonna clip it, cache it!

Web site




Tell a friend about this Newsletter!

Need Help with Windows? Ask questions here!

  Microsoft Security

Patch Available for "Frame Domain Verification", "Unauthorized Cookie Access", and "Malformed Component Attribute" Vulnerabilities

Microsoft has released a comprehensive patch that eliminates three security vulnerabilities in Microsoft® Internet Explorer 4 and 5:

  • The "Frame Domain Verification" vulnerability, which could allow a malicious web site operator to read, but not change or add, files on the computer of a visiting user.
  • The "Unauthorized Cookie Access" vulnerability, which could allow a malicious web site operator to access "cookies" belonging to a visiting user.
  • The "Malformed Component Attribute" vulnerability, which could allow a malicious web site operator to run code of his choice on the computer of a visiting user.

Affected Software Versions

  • Microsoft Internet Explorer 4.0
  • Microsoft Internet Explorer 4.01
  • Microsoft Internet Explorer 5.0
  • Microsoft Internet Explorer 5.01

More information


Patch Available for "Office 2000 UA Control" Vulnerability

Microsoft has released a patch that eliminates a security vulnerability in Microsoft® Office 2000 and Office 2000 family members. The vulnerability could allow a malicious web site operator to take inappropriate action on the computer of a user who visited his web site.

Affected Software Versions

  • Office 2000

Note: The products in the Office suite also are available for purchase separately. The control ships as part of the following such products:

Word 2000, Excel 2000, Powerpoint 2000, Access 2000, Photodraw 2000, FrontPage 2000, Project 2000, Publisher 2000, Outlook 2000, Works 2000 Suite

More information

  Web site updates

These pages were added/updated in the past week. Information on previously updated/added pages is available on the What's New? page for 1 month.


InfiniSource.com

Added: New version of LoveLetter (NewLove virus) not nearly as widespread as LoveLetter
Added: Improve Performance; Check your BIOS Settings!
Added: Patch Available for "Frame Domain Verification", "Unauthorized Cookie Access", and "Malformed Component Attribute" Vulnerabilities
Added: Microsoft Delivers "Fast Boot" Support for Partners in Windows Millennium Edition
Added: Microsoft to Deliver Major Outlook Security Solution To Help Protect Customers Against Computer Viruses
Added: AMD Athlon Computer System
Added: Patch Available for "Office 2000 UA Control" Vulnerability


RoseCitySoftware.com

Added: The Sleuthhound!


Windows-Help.NET

Windows 95

Updated: Internet Explorer 4: Security Patches

Windows 98

Updated: Restore Windows 95 like cascading menus to the Start Menu
Updated: Internet Explorer 5: Security Patches
Updated: Internet Explorer 4: Security Patches


Back Issues, unsubscribing etc.