Microsoft weist auf eine Sicherheitslücke in allen Versionen seiner Multimedia-Schnittstelle DirectX hin. Aus einem Fehler in der Komponente DirectShow kann ein als "kritisch" eingestuftes Problem für Windows-Nutzer resultieren, schreibt der Hersteller. DirectShow prüft unter anderem die Parameter einer MIDI-Datei. Einem Angreifer soll es möglich sein, mit Hilfe eines entsprechenden Sound-Files einen "Buffer Overrun"-Fehler in der Prüfroutine der DirectX-Komponente auszulösen. Microsoft zufolge ist ein Hacker so in der Lage, beliebigen Code auf dem angegriffenen PC mit den Rechten des angemeldeten Nutzers zu starten. Mehr Infos und download des Patches bei Chip

Microsoft is forcing people to upgrade to newer versions of its instant messenger application and is shutting its doors to third-party IM products such as Trillian.

As of Oct. 15, users of Microsoft's free Web-based MSN Messenger and its Windows XP-based Windows Messenger will need to upgrade their software to a newer version or be shut out of the service, the software giant said Wednesday. MSN Messenger users will need to upgrade to version 5.0 of higher; Windows Messengers customers will need to upgrade to version 4.7.2009 or higher; and consumers with MSN Messenger for Mac OS X will have to use version 3.5 or higher. The last MSN Messenger to be released was version 6.

According to Microsoft spokesman Sean Sundwall, "Security issues that could be posed (on older versions) require us to force an upgrade." He declined to detail the security issue, saying disclosure would "put customers at undue risk."

A security issue has been identified in Microsoft® DirectX® that could allow an attacker to run programs on a computer running Microsoft Windows®. The attacker would first have to send you an e-mail message or entice you into visiting a malicious Web site. You can help protect your computer by installing this update from Microsoft. Affected Versions: DirectX® 5.2 on Windows 98 DirectX 6.1 on Windows 98 SE DirectX 7.1 on Windows Millennium Edition DirectX 7.0 on Windows 2000 DirectX 8.0, 8.0a, 8.1, 8.1a, and 8.1b DirectX 9.0a Windows NT 4 Read more

Am 15 Oktober 2003 wird Microsoft aus Sicherheitsgründen den Support für Windows Messenger Versionen, die kleiner als Version 5 sind, einstellen und den Programmen den Login in den Messengerdienst verwehren.
Das berichtet Heise heute morgen.

Anscheinend werden davon auch Trillian Programme betroffen sein, die auf die 4er Technologie aufsetzen. Aktuelle Messengerversionen gibt es hier

A number of security issues have been identified in Microsoft® Internet Explorer that could allow an attacker to compromise your Microsoft Windows®-based systems and then take a variety of actions. For example, an attacker could run programs on a computer used to view the attacker's Web site. This vulnerability affects computers that have Microsoft® Internet Explorer installed. (You do not have to be using Internet Explorer as your Web browser to be affected by this issue.) You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Microsoft has released a new build of Windows Media Player 9 - 9.0.0.3054.

When you add multimedia files that have custom file extensions to the Media Library, Windows Media Player 9 Series categorizes these media files as Other Media, instead of as All Music or as All Video.

Computerbase berichtet, das Microsoft als Konsequenz der W32.Blaster Wurm Attacke und diversen anderen Sicherheitslöchern plant, das zukünftige Software eine Autoupdatefunktion integriert bekommen, die ohne explizite Aufforderung des Users Updates auf den heimischen Rechner downloadet.
Damit wolle man solchen Vorfällen, wie z.B. dem W32.Blaster-Wurm, präventiv entgegenwirken, so Mike Nash, Microsoft-Vizepräsident der Abteilung für Computersicherheit.

Today Flexbeta brings it's members and visitors the download of the day, Windows Server 2003 SP1 Build 1039-2. This build was released yesterday to a few beta testers. Special thanx to our very own One of the twelve for making this possible, and Benwalburg for hosting the file. This release weights in at a hefty 123 MB so we don't know how long we can hold the links up.

Microsoft Corp. today announced the completion of the core products in the new Microsoft® Office System and has released all products to manufacturing, marking a critical step in the delivery of the company's most powerful and valuable release of Office.

The Microsoft Office System is composed of industry-leading productivity programs, servers and services, and includes programs such as the Microsoft Office 2003 editions, and the 2003 versions of Microsoft Office programs such as Word, Excel, PowerPoint®, Access, Outlook®, Visio®, FrontPage® and Publisher.

According to the Washington Post, Microsoft is contemplating the use of automatic upgrades to its software in order to reduce the likelihood of people getting hit by worms, viruses and the like.

The difference between that and the scheme currently being used, according to the Post, is that people will be able to opt out of the auto-upgrades.

Late last week, Microsoft posted an interesting document outlining its release plans for various Windows version service packs, prompting reports that Windows XP Service Pack 2 (SP2), originally due late this year, was being delayed until late 2004. That's because the page lists "Q3 2004" as the XP SP2 release date. A little fact checking goes a long way, however, and after conferring with various Microsoft representatives, WinInformant confirmed that the Q3 2004 date is, indeed a typo. That's the good news. The bad news is that the service pack is still shipping a lot later than originally expected: It won't be out until the first half of 2004.

Just saw this at OSBetas.com. MSN Messenger's site os touting about some new features in the to-be-released Messenger 6.1. Some features it highlights are :-
Study online with classmates. Hold group discussions, pass files to each other, and even Whiteboard solutions. Homework is easier and a lot more fun with MSN Messenger! Stay in touch with friends and family. Share photos, play games, and use a Web camera to talk face to face with anyone.

The rumour is that Microsoft has got into such a flap about the Blaster worm that it's readying a small service pack called SP1a for Windows XP, which might emerge within the next two weeks.

Windows Messenger is the instant messaging client of choice for businesses in managed environments with connectivity to Exchange IM servers and SIP (Session Initiation Protocol) based IM servers, along with connectivity to the MSN Messenger service.

In a surprising turn of events, Microsoft has pushed back the release date for the second Windows XP service pack to the third quarter of 2004. SP2 was long expected to debut before the end of 2003, a year after SP1 made the rounds.

The change in plans came to light by way of Microsoft's Product Lifecycle Web site, which details future support timelines for the company's products.

Internet.de: Der Software-Konzern Microsoft hat einen Bericht dementiert, nach dem die Einstellung der Entwicklung des E-Mail- und Newsclients Outlook Express geplant ist. Wie de.internet.com heute von einer Unternehmenssprecherin erfahren hat, seien entsprechende Medienberichte falsch.
[...]Die Entwicklung von Outlook Express geht weiter," heißt es in einem E-Mail von Microsoft USA an unsere de.internet.com. Der Outlook Express-Client ist als Teil der Standardinstallation des Betriebssystems Windows weit verbreitet.

Microsoft says support for its stripped-down e-mail client will continue, but as part of future Windows clients. Outlook Express, Microsoft Corp.'s free, stripped-down version of Outlook, is not on its last legs, contrary to reports published reports this week, Microsoft said. But exactly how Microsoft will continue to support OE remains a bit murky. OE currently ships as part of Internet Explorer. And Microsoft has admitted begrudgingly that it has no plans to continue to support a standalone version of IE going forward. The current and seemingly final version of IE for Windows is Service Pack 1 for IE 6. Future IE releases will be bundled into future versions of Windows only. It seems the same is true of OE, although Microsoft isn't stating the situation as plainly as that. "The word is that Microsoft will continue to ship Outlook Express code in Windows and will support it as needs of customers arise," according to a company spokeswoman, asked for comment on a published report on OE's demise.

Just spotted this bit of Info at the BatCave WinOsCentral .... Office pricing the Microsoft way! Leak the info and let them get used to it (this avoids sticker shock).

Prices for Microsoft Office 2003, together with a range of other upcoming products from the company, have been released on online retailer Amazon.com's UK site. See prices @ ZDNet

ZdNet Australien berichtet, das Microsoft zukünftig die Entwicklung von Outlook Express einstellen wird. Microsoft hat dieses bestätigt.
"Die Technik bleibt wie sie ist, sie wird aber nicht mehr weiterentwickelt," so Microsoft Sprecher Dan Leach.
Microsoft will seine Resourcen zukünftig in Hotmail oder MSN Angebote stecken, um dort die Entwicklung voranzutreiben.

Outlook Express ist bisher der populärste Emailclient für Endanwender, Microsoft hofft allerdings, das die User auf kostenpflichtige Outlook Version umsteigen werden. Die neue 2003er Outlook Version soll deutlich schlanker und Resourcenschonender sein, um den Umstieg attraktiver zu machen.
"Viele Leute haben sich gescheut Outlook einzusetzen,weil sie die LAN-Fähigkeit von Outlook nicht benötigt haben und es einfach zu umfangreich für den Anwender war," so Steve Conn, Exchange Server Produkt Manager.

Just saw the information over @ NeoWin that ZdNet reports, that Microsoft stops developing / publishing Outlook Express.

"Outlook Express just sits where it is," said Dan Leach, lead product manager for Microsoft's information worker product management group. "The technology doesn't go away, but no new work is being done. It is consumer e-mail in an early iteration, and our investment in the consumer space is now focused around Hotmail and MSN. That's where we're putting the emphasis in terms of new investment and new development work."