MS04-028 - Trend PC Cillin Internet Security 2007 report vulnerabi

[Guest]

Problem Description : I have reinstalled Windows XP on my pc, due to virus
infection. I have SP2 and run all the patches from Microsoft, I got the
message that there are no more patches to install.
I have also upgraded PC-cillin Internet Security 2007. When I run scan on my
pc for Microsoft vulnerabilities, I get a result telling that I got MS04-028
vulnerability on my pc.
I have run several check's on Windows Update, but there are no new patches.
I have also manually installed Office XP Security Update KB832332 (for XP
Office)sucessfully.

I have checked Trend online support, the answer I find there is to follow
the instruction to update Windows with patches.

Do anyone you have any suggestions what to do to get rid of this ?

Regards
Olav

 

[MowGreen [MVP]]

KB832332 updated mso.dll to Version 10.0.6714.0. Since then it's been
updated more than once. I *think* the latest update for mso.dll was:

Vulnerability in Microsoft Office Could Allow Remote Code Execution
(934873): MS07-025
http://www.microsoft.com/technet/security/Bulletin/MS07-025.mspx

mso.dll should now be at Version 10.0.6830.0 for Office XP
Do a Search of the system for mso.dll. It should be located in an Office
folder at Program Files\Microsoft Shared
When you locate it, right click, choose Properties, then click the
Version tab.

If you find that mso.dll is at Version 10.0.6830.0, then the warning
from Trend is a False Positive. Ignore it.

MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============

 

[Guest]

I have checked mso.dll and it is version is 10.0.6830.0.
So you think I can just ignore the message from Trend ?

KB832332 updated mso.dll to Version 10.0.6714.0. Since then it's been
updated more than once. I *think* the latest update for mso.dll was:

Vulnerability in Microsoft Office Could Allow Remote Code Execution
(934873): MS07-025
http://www.microsoft.com/technet/security/Bulletin/MS07-025.mspx

mso.dll should now be at Version 10.0.6830.0 for Office XP
Do a Search of the system for mso.dll. It should be located in an Office
folder at Program Files\Microsoft Shared
When you locate it, right click, choose Properties, then click the
Version tab.

If you find that mso.dll is at Version 10.0.6830.0, then the warning
from Trend is a False Positive. Ignore it.

MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============

Problem Description : I have reinstalled Windows XP on my pc, due to virus
infection. I have SP2 and run all the patches from Microsoft, I got the
message that there are no more patches to install.
I have also upgraded PC-cillin Internet Security 2007. When I run scan on my
pc for Microsoft vulnerabilities, I get a result telling that I got MS04-028
vulnerability on my pc.
I have run several check's on Windows Update, but there are no new patches.
I have also manually installed Office XP Security Update KB832332 (for XP
Office)sucessfully.

I have checked Trend online support, the answer I find there is to follow
the instruction to update Windows with patches.

Do anyone you have any suggestions what to do to get rid of this ?

Regards
Olav

 

[MowGreen [MVP]]

If it were my system, YES. The decision is yours, Olav.

MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============

I have checked mso.dll and it is version is 10.0.6830.0.
So you think I can just ignore the message from Trend ?

:

KB832332 updated mso.dll to Version 10.0.6714.0. Since then it's been
updated more than once. I *think* the latest update for mso.dll was:

Vulnerability in Microsoft Office Could Allow Remote Code Execution
(934873): MS07-025
http://www.microsoft.com/technet/security/Bulletin/MS07-025.mspx

mso.dll should now be at Version 10.0.6830.0 for Office XP
Do a Search of the system for mso.dll. It should be located in an Office
folder at Program Files\Microsoft Shared
When you locate it, right click, choose Properties, then click the
Version tab.

If you find that mso.dll is at Version 10.0.6830.0, then the warning
from Trend is a False Positive. Ignore it.

MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============


olav wrote:

Problem Description : I have reinstalled Windows XP on my pc, due to virus
infection. I have SP2 and run all the patches from Microsoft, I got the
message that there are no more patches to install.
I have also upgraded PC-cillin Internet Security 2007. When I run scan on my
pc for Microsoft vulnerabilities, I get a result telling that I got MS04-028
vulnerability on my pc.
I have run several check's on Windows Update, but there are no new patches.
I have also manually installed Office XP Security Update KB832332 (for XP
Office)sucessfully.

I have checked Trend online support, the answer I find there is to follow
the instruction to update Windows with patches.

Do anyone you have any suggestions what to do to get rid of this ?

Regards
Olav

 

[Guest]

KB832332 updated mso.dll to Version 10.0.6714.0. Since then it's been
updated more than once. I *think* the latest update for mso.dll was:

Vulnerability in Microsoft Office Could Allow Remote Code Execution
(934873): MS07-025
http://www.microsoft.com/technet/security/Bulletin/MS07-025.mspx

mso.dll should now be at Version 10.0.6830.0 for Office XP
Do a Search of the system for mso.dll. It should be located in an Office
folder at Program Files\Microsoft Shared
When you locate it, right click, choose Properties, then click the
Version tab.

If you find that mso.dll is at Version 10.0.6830.0, then the warning
from Trend is a False Positive. Ignore it.

MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============

Problem Description : I have reinstalled Windows XP on my pc, due to virus
infection. I have SP2 and run all the patches from Microsoft, I got the
message that there are no more patches to install.
I have also upgraded PC-cillin Internet Security 2007. When I run scan on my
pc for Microsoft vulnerabilities, I get a result telling that I got MS04-028
vulnerability on my pc.
I have run several check's on Windows Update, but there are no new patches.
I have also manually installed Office XP Security Update KB832332 (for XP
Office)sucessfully.

I have checked Trend online support, the answer I find there is to follow
the instruction to update Windows with patches.

Do anyone you have any suggestions what to do to get rid of this ?

Regards
Olav

 

[Guest]

I found vulnerability MS07-25, MS04-28, MS05-05 in Windows2000 and Office2000
that requires to update MSO.DLL from version 10.0.3501.0 to 10.0.6830.0. None
of the hotfix could solve. Can you help ?

KB832332 updated mso.dll to Version 10.0.6714.0. Since then it's been
updated more than once. I *think* the latest update for mso.dll was:

Vulnerability in Microsoft Office Could Allow Remote Code Execution
(934873): MS07-025
http://www.microsoft.com/technet/security/Bulletin/MS07-025.mspx

mso.dll should now be at Version 10.0.6830.0 for Office XP
Do a Search of the system for mso.dll. It should be located in an Office
folder at Program Files\Microsoft Shared
When you locate it, right click, choose Properties, then click the
Version tab.

If you find that mso.dll is at Version 10.0.6830.0, then the warning
from Trend is a False Positive. Ignore it.

MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============

Problem Description : I have reinstalled Windows XP on my pc, due to virus
infection. I have SP2 and run all the patches from Microsoft, I got the
message that there are no more patches to install.
I have also upgraded PC-cillin Internet Security 2007. When I run scan on my
pc for Microsoft vulnerabilities, I get a result telling that I got MS04-028
vulnerability on my pc.
I have run several check's on Windows Update, but there are no new patches.
I have also manually installed Office XP Security Update KB832332 (for XP
Office)sucessfully.

I have checked Trend online support, the answer I find there is to follow
the instruction to update Windows with patches.

Do anyone you have any suggestions what to do to get rid of this ?

Regards
Olav