MSO.DLL update

[Guest]

I found vulnerability MS07-25, MS04-28, MS05-05 in Windows2000 and Office2000
that requires to update MSO.DLL from version 10.0.3501.0 to 10.0.6830.0. None
of the hotfix could solve. Where can I go for help ?

 

[Meinolf Weber]

Hello yiemy,

Which verison of windows and office do you run? And which of the KBxxxxxx
do you install?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

 

[Guest]

Hello Meinolf
Thanks for your response. My PC is running Windows 2000 SP4 and Office 2000
SP3. For this case I installed KB934526, KB833989, KB830348, KB867460,
KB873354. Did I miss any ?

Gratefully
yiemy

 

[Meinolf Weber]

Hello yiemy,

KB934526 2000 sp4, not affected office 2000 sp3, only Excel,
Frontpage and Publisher effected
http://www.microsoft.com/technet/security/bulletin/ms07-025.mspx


KB833989 2000 sp4, not affected office 2000 sp3, not effected
http://www.microsoft.com/technet/security/bulletin/MS04-028.mspx

KB830348 2000 sp4, not affected office 2000 sp3, not effected

http://support.microsoft.com/default.aspx?scid=kb;en-us;830348

KB867460 2000 sp4, it is a service pack for Microsoft .NET Framework 1.1,
if you do not have it installed no changes to find.
office 2000 sp3, not effected

KB873354 2000 sp4, not affected office 2000 sp3, not
effected, ONLY for VISIO 2002
http://www.microsoft.com/technet/security/bulletin/ms05-005.mspx

So if you not use Excel, Frontpage and Publisher and Visio you will have
no effect on your machine. All this infos here i got from the KB/MS articles
that you provide with the numbers. It will not fix a complete office only
the parts from this articles. If you don't use it nothing will change. So
what part from office 2000 have you installed?


Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

 

[Guest]

Hello Meinolf,

Thanks for your info. It took me some time to go over the case to answer
you, since Retina scan did not correctly pin down the root cause of this
vulnerability. I worked around to find the fix but not very successfully. I
think MSO.DLL was installed by Visual Studio 2003 but all of its security
patches did not update the file to the required version. other patches for
Office 2000, updated MSO9.DLL instead. Beside Visual studio and Dotnet 1.1
SP. The Office 2000 Premium was installed with the four 4 basic elements
Word, Excel, Access, Power Point. I cleaned up all other related
vulnerabilities but this one. Because Retina reported vulnerability on
OfficeXP which is not on the system. I temporarily removed MSO.DLL to fix
this while finding the better solution.

Thanka again,
yiemy

 

[Guest]

I found vulnerability MS07-25, MS04-28, MS05-05 in Windows2000 and Office2000
that requires to update MSO.DLL from version 10.0.3501.0 to 10.0.6830.0. None
of the hotfix could solve. Where can I go for help ?