Secunia SmallBusiness
Overview
Advisories
Research
Forums
Create Profile
Our Commitment
All Threads
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: [js] BUG Microsoft Word 2003

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
johnski [js] BUG Microsoft Word 2003
Member 19th Apr, 2009 12:41
Ranking: 0
Posts: 10
User Since: 19th Apr, 2009
System Score: N/A
Location: N/A
Last edited on 19th Apr, 2009 12:45

PSI detects insecure application Microsoft Word 2003, 11.0.8227.0

So Download the solution...
Security Update for Microsoft Office Word 2003 (KB956357)

Install the solution...
@ office2003-KB956357-FullFile-ENU.exe

Dialog box is displayed
- The expected version of the product was not found on your system.

So Microsoft will not patch this program, and PSI still thinks its insecure.

What's going on here?


trombone_dude RE: [js] BUG Microsoft Word 2003
Member 19th Apr, 2009 20:28
Score: 0
Posts: 49
User Since: 3rd Jan 2009
System Score: 100%
Location: US
Skip the download link for now. go to windows update, and find the link towards the top that offers to upgrade to Microsoft update. Follow the steps on screen and use microsoft update to patch your office install. If the office updates fail after that let me know and I will provide more help.

--
Asus P5QC, 2.4Ghz Intel Quad Core, 2Gb Ram, XP Pro

Asus EeePC 4G Surf, 2Gb Ram, XP Pro
Was this reply relevant?
+0
-0
johnski RE: [js] BUG Microsoft Word 2003
Member 20th Apr, 2009 07:47
Score: 0
Posts: 10
User Since: 19th Apr 2009
System Score: N/A
Location: N/A
Thanks for suggestion.

Office 2003 SP3 has already been installed from file downloaded from Ms

Check current versions of Ms Office 2003 programs
Excel 2003 (11.8231.8221) SP3
Word 2003 (11.8227.8221) SP3

Run Ms Update (which is already installed)
- says Office 2003 SP3 is available

OK, so let Ms Update download and reinstall SP3

Recheck current versions of Ms Office 2003 programs
Excel 2003 (11.8231.8221) SP3
Word 2003 (11.8227.8221) SP3

As expected, version numbers have not changed as programs were already at SP3 revision level.

Secunia PSI re-scan, says programs have not changed, still Insecure.

Appears to be a Secunia BUG to me!

Was this reply relevant?
+0
-0
trombone_dude RE: [js] BUG Microsoft Word 2003
Member 20th Apr, 2009 17:06
Score: 0
Posts: 49
User Since: 3rd Jan 2009
System Score: 100%
Location: US
There are many updates to office on top of Office SP3. Go visit the site until there are no more updates, and then rescan and let us know what you find

--
Asus P5QC, 2.4Ghz Intel Quad Core, 2Gb Ram, XP Pro

Asus EeePC 4G Surf, 2Gb Ram, XP Pro
Was this reply relevant?
+0
-0
johnski RE: [js] BUG Microsoft Word 2003
Member 21st Apr, 2009 09:40
Score: 0
Posts: 10
User Since: 19th Apr 2009
System Score: N/A
Location: N/A
Thanks for assistance. Problem fixed

Ms Update was not recognising that Word 2003 was already at SP3 revision.

Reinstalled Office 2003 SP3

Auto Updates, Ms Update, then installed required patches.

Thanks Secunia for highlighting problem!
Was this reply relevant?
+0
-0
trombone_dude RE: [js] BUG Microsoft Word 2003
Member 21st Apr, 2009 16:49
Score: 0
Posts: 49
User Since: 3rd Jan 2009
System Score: 100%
Location: US
excellent work for an inherently flawed, insecure program,huh?

--
Asus P5QC, 2.4Ghz Intel Quad Core, 2Gb Ram, XP Pro

Asus EeePC 4G Surf, 2Gb Ram, XP Pro
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Factsheets
Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability