Microsoft KB Archive/813380

= Description of the FrontPage 2002 Server Extensions Security Patch: November 11, 2003 =

Article ID: 813380

Article Last Modified on 7/11/2005

-

APPLIES TO


 * Microsoft FrontPage 2002 Server Extensions

-



SUMMARY
Microsoft has released a security patch to Microsoft FrontPage 2002 Server Extensions from Microsoft. This security patch offers the highest level of stability and the highest level of enhanced security that is available for FrontPage 2002 Server Extensions. This security patch fixes an issue in FrontPage 2002 Server Extensions that could allow an attacker to send a specially-formed request that could cause a temporary denial of service.

This article describes how to download and how to install the FrontPage 2002 Server Extensions Security Patch: KB813380.

This security patch was first included in Office XP Service Pack 3 (SP3) for SharePoint Team Services.

For more information about the latest service pack for Office XP Service Pack 3 (SP3) for SharePoint Team Services, click the following article number to view the article in the Microsoft Knowledge Base:

833845 Overview of Office XP Service Pack 3 for SharePoint Team Services



How to download and how to install the security patch
Note Before you install the security patch, make sure that you meet both of the following conditions:
 * Log on to your computer with an account that has administrative permissions.
 * Stop all services that are related to FrontPage 2002 Server Extensions.

Note If you do not stop all services that are related to the FrontPage 2002 Server Extensions, or if the file that you want to update is in use, you are prompted to restart your computer after you install the security patch.

The following file is available for download from the Microsoft Download Center:

Download the FrontPage 2002 Server Extensions Security Patch: KB813380 package now.

Release Date: November 11, 2003

For more information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to obtain Microsoft support files from online services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

When you are prompted to download or to save the file, click Save this Program to Disk, and then save the file to your desktop. To install the security patch, double-click the file that you downloaded to your desktop, and then follow the instructions for the installation.

Note After you install the security patch, you cannot remove it.

How to determine whether the security patch is installed
The security patch contains updated versions of the following files:   File name       Version ---  Eula.txt           0.00.00.0000 Fp30reg.dll    10.00.4205.0000 FPcheck1003.exe   0.00.00.0000 Fp5amsft.dll   10.00.4803.0000 Fp5Areg.dll    10.00.4205.0000 Fp5Awel.dll    10.00.4803.0000

List of issues that are fixed by the security patch
The FrontPage 2002 Server Extensions Security Patch: KB813380 fixes the following issues:
 * Specially-formed request could cause a temporary denial of service.
 * Pagehits XML file is not generated on the server that has usage analysis configured.
 * Application error when you upgrade to Windows Server 2003 if SharePoint Team Server is pre-installed.
 * List tag attribute is removed when a page is an included page.
 * File with no relevance to any Office product exists.

Specially-formed request could cause a temporary denial of service
An attacker may be able to send a specially formed request that could cause a temporary denial of service.

Note This fix is also included in Microsoft Office XP Service Pack 2 (SP-2). The steps that are described in this article permit users to install this fix without having to install Office XP SP-2.

Pagehits XML file is not generated on the server that has Usage Analysis configured
When you set up Usage Analysis on your server, and when you run the command-line tool to generate the report, the _x_pagehits.xml file may not be generated as you expect.

Application error when you upgrade to Windows Server 2003 if SharePoint Team Server is pre-installed
You install SharePoint Team Server on Windows Server 2003, or you install upgrades from Windows 2000 Server with SharePoint Team Server, and then you install FrontPage 2002 Server Extensions from Windows Server 2003. As a result, the baseline of the Fp5awel.dll file is not correct, and the SharePoint Team Server functionality is disrupted.

List tag attribute is removed when a page is an Included Page
When you include a page that contains attributes inside the  tag, and the page is inserted as an Included Page in another Web page, FrontPage may remove all the attributes in the  tags.

File with no relevance to any Office product exists
The Fp5areg.dll file exists in the 50\bin directory. The Fp5areg.dll file has no relevance to any Office product.

Additional query words: security_patch security_update update security bug context flaw vulnerability malicious attacker exploit registry unauthenticated specially-formed scope specially-crafted affected

Keywords: kbinfo kbdownload kbsecurity kbupdate KB813380

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.