Microsoft Affirms Releasing Flawed Update

Microsoft Affirms Releasing Flawed Update

MIcrosoft admitted releasing an incomplete version of MS08-051 update to its download center.  This the third time in the last two months that the company had to re-issue a security-related update.  The company has warned users who manually downloaded the update to immediately get the second version. 


MS08-051 is supposed to resolve three privately reported vulnerabilities in Microsoft Office PowerPoint and Microsoft Office PowerPoint Viewer that could allow remote code execution if a user opens a specially crafted PowerPoint file. An attacker who successfully exploited any of these vulnerabilities could take complete control of an affected system.  An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.  The security update addresses the vulnerabilities by modifying the way that Microsoft Office PowerPoint allocates memory when opening PowerPoint files.