New bug "critical," Microsoft says

Now that we've got the WMF issue patched, there's another threat looming: the
TNEF (Transport Neutral Encapsulation Format) vulnerability. According to this
article by InformationWeek, the potentially huge vulnerability is a flaw in the
way the Outlook client and older versions of Exchange server decode MIME
attachments. TNEF is used when users send messages in RTF format. All that's
needed to take over an Exchange server is a "single, simple e-mail
message," according to the security expert quoted in the article.

Microsoft detailed the TNEF vulnerability in this security bulletin. In the
bulletin, you'll find update links for your version of Outlook and Exchange
Server.

Fortunately I use MailWasher, which not only flags spam and virii but also lets
me view the "raw" text of the email. This feature has come in handy in
the past...

Dana

Thanks for the heads up on this!

We posted it HERE and I gave credit to The Hive with a link.

Isn't this kind of patch something distributed through Windows Update, since it
now covers OS *and* Office applications?

Hmmm. Reading the file download page it says it's distributed through Windows
Update. Should be all good here then...