BugBlog Home
BJK Research Home
BJK Research Home

Did the BugBlog help you? Donate via PayPal to say thanks.

Even better, subscribe to the BugBlog Plus for even more coverage of bugs and their fixes.

Jump to the BugBlog archives

Dec 06
Nov 06
Oct 06
Sept 06
Aug 06
July 06
June 06
May 06
Apr 06
Mar 06
Feb 06
Jan 06
Dec 05
Nov 05
Oct 05
Sept 05
Aug 05
July 05
Jun 05
May 05
Apr 05
Mar 05
Feb 05
Jan 05
Dec 04
Nov 04
Oct 04
Sep 04
Aug 04
Jul 04
June 04
May 04
Apr 04
Mar 04
Feb 04
Jan 04
Dec 03
Nov 03
Oct 03
Sept 03
Aug 03
July 03
June 03
May 03
April 03
Mar 03
Feb 03
Jan 03
Dec 02
Nov 02


View vintage BugNet coverage here

Cleveland-area blogs*:

Backup BugBlog

Economic Development Futures

Brewed Fresh Daily


Working with Words


Sardonic Views

Filtering Craig

Hotel Bruce


Up Yours

Kevin Holtsberry

Steve Goldberg

Red Wheelbarrow

Anita Campbell

Swerb's Blurbs

Rachel's Law

*there are more blogs in Cleveland, these are just from people I've met or know. Some of the above are actually farther away, but are bloggers I've met here.





Here is the daily bug, incompatibility or other computer problem from the BugBlog

The BugBlog is free- but if you want to help support its existence, subscribe to the BugBlog Plus. A three month subscription is only $5. XML The BugBlog uses monthly archives. All the current August bug are here. Use the links on the left or below to jump back to past months.

8/31/2005 Diagnostics Tool for DVD Problems in Windows

Having problems viewing a DVD on your Windows XP or Windows XP Media Center 2005 computer? The problem may be incompatibilities between your MPEG-2 video decoder and Windows Media Player. Microsoft has a diagnostics tool that will tell you whether you have a compatible MPEG-2 decoder. It will also tell you whether it is compatible with the recorded TV playback in Windows Media Center. Get it at http://www.microsoft.com/downloads/details.aspx?FamilyID=de1491ac-0ab6-4990-943d-627e6ade9fcb&displaylang=en.

Today's BugBlog Plus has twelve more bugs and fixes for Adobe, Apple, ATI, IBM, Microsoft, and Novell.

8/30/2005 Misleading Version in Adobe Acrobat

The Adobe Acrobat and Adobe Reader 7.0.3 update (which you need to patch a buffer oveflow described in the 8/17 BugBlog) doesn't update all the splash screens and menus that identify which version you are using. Even after a successful update to 7.0.3, you may still see a screen that says 7.0.2. According to Adobe, the only sure-fire way to see if the update is successful is to check the version of AcroForm.api. See http://www.adobe.com/support/techdocs/332112.html for details on how to do that.

8/29/2005 MS Says Don't Skip The Last Chapter of DVD

Not a fan of the closing credits? Too bad. If you are watching the last chapter of a recorded DVD in Windows XP Media Center Edition 2005, and you press and hold the SKIP button on the remote control, then the Media Center may lock up. Microsoft says you will need to go to the Task Manager via a CTL+ALT+DEL, end the Ehshell.exe process on the Processes tab, and then close Task Manager. You should be able to restart the Media Center by pressing the green Media Center button on the remote.

Today's BugBlog Plus has eight more bugs and fixes for Adobe, Apple, IBM, Microsoft, SPSS and Symantec.

8/27/2005 Photshop Image Wanders In Acrobat

Update an impage in Adobe Photoshop CS2 and then update the image in Adobe Acrobat 6.0 or later, and the image will move to the bottom left of the page, no matter where you positioned it. The workaround is simple, but not very satisfactory. You can use the TouchUp Object tool in Acrobat to edit the PDF and drag the image back to where you originally wanted it. A better fix would be to keep this from happening.

Today's BugBlog Plus has five more bugs and fixes for Apple and Microsoft.

8/26/2005 Polygot Worm On MSN IM

A new worm found on the Microsoft MSN IM network has a notable feature -- it's language skills. The Kelvir.hi worm checks the default language of the machine it infects, and if it is one of ten languages it knows, it switches to it. The languages are English, French, German, Greek, Italian, Portuguese, Swedish, Spanish, and Turkish. Most antivirus signatures have already been updated to catch this worm. If it wasn't for its language capabilities, it wouldn't be much of a threat.

8/25/2005 One DVD Standard Rule Them All -- NOT

This is probably bad news for consumers, and ensures quite a few future BugBlog reports about incompatibilities. Talks have broken down between the two factions promoting different future standards for DVD. One group, led by Sony, want to use Blu-ray. Another group, led by Toshiba, backs the HD DVD. For now, they will go their separate ways, which means in the future consumers will be checking labels to make sure the disks they are buying match their hardware.

8/24/2005 Check Your Clock Before Validating Windows XP

If you use the Windows Genuine Advantage Validation Tool, which checks to make sure you don't have a pirated copy of Windows XP, and your computer's date and time are wrong, you may see this error message
Validation Incomplete: Online Validation Failure.
Error code

Microsoft says to set the date and time correctly. See http://support.microsoft.com/kb/906533 if you don't know how to do this correctly. It appears you only need to be approximately correct on the time, and don't need to synchronize with an atomic clock, or anything like that.

Today's BugBlog Plus has seven more bugs and fixes for Adobe, Apple, ATI, and Microsoft.

8/23/2005 Outlook Misfiles a Second Address

Some imports of address information into Microsoft Outlook 2003 won't work correctly, and address information may wind up in the wrong field. This will happen if the source for the address data contains more than one field for an address, for instance a home address and a business address. Outlook 2003 can't handle that (Microsoft programmers must be so busy they live in their office and only have one address) and so the extra data may go astray.

Today's BugBlog Plus has five more bugs and fixes for Apple, ATI, Cisco, IBM, and Red Hat.

8/22/2005 Apple Security Update Breaks 64-bit Applications

It appears that Apple's Security Update 2005-007 broke any 64-bit-native applications from running, after the update was applied. One third-party developer, Wolfram Research, said that its Mathematica 5.2 was disabled after the update, and informed its users via email that it was due to an error on Apple's part. Apple now has Security Update 2005-007 v 1.1 available for Mac OS X 10.4.2 users, who should install this one instead. If they installed the earlier one, install this one on top.

Today's BugBlog Plus has eight more bugs and fixes for Apple, ATI, EA, IBM, Microsoft and Novell.

8/21/2005 Another Problem for MS Internet Explorer

Microsoft says that a COM object, MSDDS.DLL, that does not ship with Windows but does ship with other Microsoft products, may open up a security hole in Internet Explorer. It could cause IE to crash, and attackers may be able to exploit this on a webpage to run their code on your computer. The file is the Microsoft DDS Library Shape Control and is probably on systems that have the initial release of Microsoft Visual Studio 2002, and possibly Office XP Service Pack 3. See http://www.microsoft.com/technet/security/advisory/906267.mspx for the versions to search for, to see if you are affected. Details of this bug have been released by others, so exploits may not be far behind.

Today's BugBlog Plus has seven more bugs and fixes for Apple, ATI, HP, and Microsoft.

8/18/2005 Time for a Bug Safari

Apple's Security Update 2005-007 takes care of a number of bugs in the Safari web browser. One bug may let an attacker to run their code on your Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.2, or Mac OS X Server v10.4.2 if you click on a link in a maliciously designed rich text file. It also fixes a bug on XSL formatted pages, where information could get submitted to the wrong site. Apple credits Bill Kuker for finding this bug.

There will be no BugBlog on 8/19, but full coverage over the weekend.

8/17/2005 Adobe Acrobat Has Cross-Platform Bug

There is a bug in the Adobe Acrobat Reader as well as in Adobe Acrobat. This is a cross-platform bug covering Windows, Mac OS X, Linux, and Solaris, and covers all versions of the products from 5.x to 7.x. There is a buffer overflow which could be triggered when you opened a maliciously designed PDF file. At the very least, Acrobat would crash. There is also a chance that the attacker could run their code on your computer. Get the links to updates at http://www.adobe.com/support/techdocs/321644.html.

Today's BugBlog Plus has eight more bugs and fixes for Apple, ATI, Microsoft, Nokia and Ubisoft.

Zotob Worm is Old News

The Zotob worm that is getting lots of publicity because it has hit CNN, ABC, and the New York Times, is old news to BugBlog readers. On 8/4, the BugBlog had the warning of a possible worm hole in Windows 2000. Then on 8/9, the Microsoft Security bulletin warning of a critical bug in the Plug and Play service of Windows 2000 (and other versions of Windows) was on the BugBlog Plus. Then on 8/12, the BugBlog said that exploits against this were circulating. Well I guess it's symmetrical -- I don't read/watch the New York Times or CNN, and they don't read me. Read more about Zotob at http://securityresponse.symantec.com/avcenter/venc/data/w32.zotob.d.htm or http://www.microsoft.com/security/incident/zotob.mspx.

8/16/2005 Office Update Halted By Cryptic Error Message

Try to update Microsoft Office 2003 via Microsoft's Software Update Services, and you may only get this rather cryptic error message
Error 80070643
Microsoft says that this error is usually triggered by the Microsoft Office Source Engine, Ose.exe, being either disabled or corrupted. Fix this by first determining what's wrong with Ose.exe, and then either repair the file, or uninstall and then reinstall Office 2003. See http://support.microsoft.com/kb/903772 for details.

Today's BugBlog Plus has five more bugs and fixes for Google, Microsoft, Novell, and Red Hat.

8/15/2005 No Hot Coffee For You!

It's been well-publicized: a patch called Hot Coffee, when installed on Rockstar Games Grand Theft Auto: San Andreas, will unlock some hidden sex scenes. If you want to make sure that doesn't happen, so that you are just stuck with the violence in Grand Theft Auto but not the sex, download and install the patch from this very long URL: http://techsupport.rockstargames.com/rockstarsupport/req_support_patches_detail.php?

Note that Hillary Clinton probably thinks you should have this patch.

Today's BugBlog Plus has six more bugs and fixes for Apple, Adobe, Google, and Microsoft.

8/13/2005 Expect Some Scrolling Distortions in Safari

Apple says that if your Mac OS X computer has an ATI video card, you may see some distortions when you scroll through some application windows. Applications like Safari might turn off the Coalesced Updates feature to give better performance, which may show up as ripples or waves on screen. There is no fix or workaround at this time. Check at http://docs.info.apple.com/article.html?artnum=86823 to see if Apple has more information later.

8/12/2005 Attacks May Be Coming Against Windows Plug and Play Bug

If you haven't yet installed the patch from Microsoft's MS05-039 security bulletin, you might want to add it on your To-Do list. That's because eEye Digital Security says they have evidence that exploit code for this bug is now circulating on the Internet. This will target the unchecked buffer in the Windows Plug and Play Service that may give a worm access to your system. The patch is at http://www.microsoft.com/technet/security/bulletin/MS05-039.mspx.

Today's BugBlog Plus has five more bugs and fixes for EA Games, Microsoft, Novell, Sun Microsystems and Symantec.

8/11/2005 Some Glitches in IE Patch Download

If you tried to download the Cumulative Microsoft Internet Explorer update discussed in the 8/9 BugBlog from the Microsoft Download Center, you may have run into problems. Microsoft seems to have posted corrupted versions of the update which broke digital signatures and couldn't be installed. On the other hand, the versions at Microsoft Update and Windows Update seem to be OK. Microsoft's IE Blog has a brief mention of this at http://blogs.msdn.com/ie/archive/2005/08/09/449640.aspx.

Today's BugBlog Plus has five more bugs and fixes for Adobe, Linksys, Microsoft, and Red Hat.

8/10/2005 Organized ID Theft Ring

A computer security company, Sunbelt Software, says they have found an identity theft ring that has installed keystroke logging software on thousands of computers. This software can record things like credit card numbers, Social Security numbers, usernames and passwords for online banking. Some of the data then gets sent to "a U.S.-based server that has an offshore-registered domain." According to the story, which you can read at
http://news.zdnet.com/2100-1009_22-5823591.html, the FBI is now on the case.

Today's BugBlog Plus has eleven more bugs and fixes for Adobe, AOL, Apple, EA Games, Microsoft, and Red Hat.

8/9/2005 Another Big Fix for Internet Explorer

Microsoft has released a new Cumulative Security Update for Internet Explorer. The MS05-038 update, released 8/9/05, includes all the previous fixes for Microsoft Internet Explorer 5.01 and 6, for all currently supported versions of Windows, including Windows 2000, XP, and Server 2003. There are also three new fixes in this update, with two of them being critical. One of the critical new bugs is a JPEG Image Rendering Memory Corruption Vulnerability, and the other is a COM Object Instantiation Memory Corruption bug. There is also a new fix for a Web Folder Behaviors Cross-Domain bug. You can get links to the updates at http://www.microsoft.com/technet/security/Bulletin/MS05-038.mspx. As a workaround, switch to Mozilla Firefox. Microsoft credits Bernhard Mueller and Martin Eiszner of SEC Consult and the NSFOCUS Security Team for finding some of these bugs.

Today's BugBlog Plus has five more bugs and fixes for Microsoft's Patch Tuesday.

8/8/2005 Too Many Revisions Printed in Word 2002

When two or more people are editing a Microsoft Word 2002 document, with Revision Tracking turned on, you can select one of the reviewers and see only their revisions on-screen. Go to print the document, with only one set of revisions showing, and Print Preview will show the document with only one set of revisions. However, when it gets sent to the printer, all the revisions from all the reviewers get printed. Fix this by installing two packages: Office XP Service Pack 3, and the Word 2002 post-Service Pack 3 hotfix package from 6/29/2005 described in Knowledge Base article 899519. This latter package is not yet freely available -- you need to contact Microsoft Tech Support and ask for it, and you may get charged for that call.

Today's BugBlog Plus has six more bugs and fixes for Apple, Microsoft, Novell, and SSH

8/6/2005 No Help from Adobe Creative Suite

Click on a help topic in Adobe Creative Suite 2, and you may see this rather unhelpful help message
The topic you want to view applies to a CS2 product you have not installed.
Adobe says there are three ways to be able to actually see the Help. First you can delete the Adobe Help Center database and cache files and then delete the adobeassistance folder. The second way, in Windows, is to copy the Help package for the application that's missing. The third way is to reinstall the application.

Today's BugBlog Plus has five more bugs and fixes for Apple, Cisco, Computer Associates, and Microsoft.

8/5/2005 Six Security Bulletins Coming From Microsoft

Tuesday, August 9 is Patch Tuesday. Microsoft says they will be releasing six security bulletins, and at least one of them will be Critical. They will also require a system restart. Also coming are updates to the Windows Malicious Software Removal Tool, and one non-security related but high-priority update to Windows Update (WU), Microsoft Update (MU), Software Update Services (SUS), and Windows Server Update Services (WSUS).

8/4/2005 Worm Hole in Windows 2000?

Security researchers at eEye Digital Security have announced, in general terms, that there is a serious bug in Windows 2000, that may allow an attacker to gain access to your computer via the IP (Internet Protocol) address. Apparently, the victim does not need to take any actions for this to happen. They will not release the details to the public. Microsoft says they will closely study the report from eEye. So far, there is no actual security alert at eEye, but you can read a news story at http://news.com.com/2100-1002_3-5817400.html.

8/3/2005 Adobe Activation Doesn't Like Some Paths

Adobe's activation scheme will have problems if you install the software onto a path that has extended characters in its name. The default location, Program Files\Adobe is not a problem, but a custom location may cause problems. This affects Adobe Acrobat 7.0 Professional or Standard, Adobe GoLive CS2, Adobe InCopy CS2, Adobe InDesign CS2, Adobe Illustrator CS2, and Adobe Photoshop CS-CS2. It may result in this error message the first time you start one of the programs
"An Error has been detected with a required application library and the product cannot continue. Please reinstall the application."
Renaming the folder may work, but that can cause problems with other applications or shortcuts.

Today's BugBlog Plus has twelve more bugs and fixes for Adobe, Apple, Cisco, IBM, Microsoft, Mozilla, and Sun Microsystems.

8/2/2005 ZoneAlarm Fixes Network Detect Bug

Zone Labs has released the latest version of ZoneAlarm Pro Antivirus. The updated version 6.0.631.003 is supposed to fix a bug or two in the way that ZoneAlarm detects networks. Get the update at http://download.zonelabs.com/bin/free/information/zap/releaseHistory.html.

Today's BugBlog Plus has five more bugs and fixes for Microsoft, Novell and Red Hat.

8/1/2005 Cisco Wins The Bug of the Month

A serious bug, and some serious legal action, lets Cisco claim the August prize.

8/1/2005 Budget Problems in Microsoft Money

If you try to switch from the Essential Budget page to the Advnaced Budget page in Microsoft Money 2005 or 2006, you may get taken right back to the Essential Budget page. Microsoft says this is probably due to a damanged bill or entry in the budget. There is no error message or explanation, and you probably won't be too thrilled about the fix, either. Microsoft says to erase all the income and expense entries from the budget (that way, you are sure to throw out the damaged entry) and then start over.

Today's BugBlog Plus has six more bugs and fixes for Apple, Microsoft, and Sophos.

7/31/2005 Grand Theft Worm, Not Grand Theft Auto

A new worm is circulating on both peer-to-peer networks and instant messaging (IM) networks, disguised as Grand Theft Auto: San Andreas. Instead of the game, you will get the worm called Hagbard.A, which will install itself on your computer, and maybe even install a web server on the computer. This would give the bad guys even more ways to control your computer. The workaround, of course, is to avoid pirated software.





| June 05 | May 05 | Apr 05 | Mar 05 | Feb 05 | Jan 05 | Dec 04 | Nov 04 | Oct 04 | Sept 04 | Aug | July 04| June 04 | May 04 | April 04 | Mar 04 | Feb 04| Jan 04 | Dec 03 | Nov 03 | Oct 03 | Sept 03 | August 03 | July 03 | June 03 | May 03 | April 03 | March 03 | February 03 | January 03 | December 02 | November 02

Home | Contact | Writing | Online | News | Tips | CABE |

© 2005 BJK Research LLC