General 8065 Published by

Patch Available for "Money Password" Vulnerability
Originally posted: August 25, 2000

Summary
=======

Microsoft has released a patch that eliminates a security
vulnerability in Microsoft(r) Money. The vulnerability could allow a
malicious user to obtain the password of a Money data file.

Frequently asked questions regarding this vulnerability and the
patch can be found at
http://www.microsoft.com/technet/security/bulletin/fq00-061.asp.

Affected Software Versions
==========================
- Microsoft Money 2001
- Microsoft Money 2000

Patch Availability
==================

This patch is available for automatic download using the "Update
Internet Information" feature in Money.
1. On the Tools menu, click Update Internet Information.
2. Follow the instructions on the screen to install the patch.
3. Microsoft recommends users change their password after applying
this fix as a best practice.