More info about the email "long name buffer overflow" security hole

A couple of important updates regarding the email long name buffer overflow security hole, first mentioned here last time:

Outlook Express patch is out Microsoft has released the Macintosh Security Update of Outlook Express 4.01. However, a Microsoft Web page now states that, while the patch "provides a fix against a potential problem involving file attachments that have long names, a similar issue was found that is not fixed by the current patch. We will issue an update to this patch shortly." They do not specifically mention that this applies to the Mac, but I assume it does.

Update: Scott Knaster of Microsoft writes: "This does not apply to the Mac. The patch that is now available handles the additional "similar issue" mentioned here. So use the patch that's now available -- no updated patch will be required for Macintosh. Sorry our site isn't clear about this right now."

Eudora safe As stated on the Eudora web site, "Eudora email products are not susceptible to these attacks." (Thanks, Ronald Regensburg). Other Mac email applications are apparently immune as well. For Mac users, Outlook Express remains the prime problem.