HOTFIXES: Windows XP SP2 & Windows 2000 SP4

[muiz]

Windows WMF Metafile Vulnerability HotFix

This week a new vulnerability was found in Windows:

http://www.microsoft.com/technet/security/advisory/912840.mspx

Browsing the web was not safe anymore, regardless of the browser. Microsoft will certainly come up with a thouroughly tested fix for it in the future, but meanwhile I developed a temporary fix - I badly needed it.

The fix does not remove any functionality from the system, all pictures will continue to be visible. You can download it here:

http://www.hexblog.com/security/files/wmffix_hexblog13.exe

It should work for Windows 2000, XP 32-bit, XP 64-bit, and Windows Server 2003.

The fix can be applied in the automatic mode using the following command line:

wmffix_hexblog13.exe /VERYSILENT /SUPPRESSMSGBOXES

edit :

new site :

http://www.hexblog.com/2005/12/wmf_vuln.html

Edited January 4, 2006 by muiz

[tempuser]

Hello everyone. Here is my list of hotfixes

Am i missing something or do u notice something that should not be included?

KB873333.exe

KB873339.exe

KB885222.exe

KB885250.exe

KB885626.exe

KB885835.exe

KB885836.exe

KB886185.exe

KB886677.exe

KB887742.exe

KB887797.exe

KB888113.exe

KB888240.exe

KB888302.exe

KB890046.exe

KB890859.exe

KB891781.exe

KB893066.exe

KB893756.exe

KB893803.exe

KB894391.exe

KB896358.exe

KB896422.exe

KB896423.exe

KB896424.exe

KB896428.exe

KB896688.exe

KB897338-v2.exe

KB898461.exe

KB899587.exe

KB899589.exe

KB899591.exe

KB900725.exe

KB901017.exe

KB901214.exe

KB902400.exe

KB904706.exe

KB905414.exe

KB905749.exe

KB905915.exe

KB910437.exe

---------------------------------------------------

Files: 43

[HPeron]

Hello tempuser,

let's see:

KB885222 is related to a hardware issue - "Firewire" (IEEE1394) devices work slowly after installing XP SP2. Do you really need that?

KB888240 is an update for IE6 SP2. It's language dependant. Don't bother trying to install it if you don't have an ENU (English, United States) Windows XP SP2.

It seems that KB873333 and 896688 have been superceded.

All the rest is ok; however, I have other hotfixes in addition to the ones you have:

KB831240, 884883, 885523, 885894, 887606, 888656, 889016, 889527, 890831, 893357, 896626, 897663, 898458, 898900, 900399, 900930, 903234, 904412, 906569, 907658 and 907865. Some of those are not actually hotfixes but enhancements for the operating system, just like the 897338-v2 that you have.

All the KBxxxxxx files that I have, regardless of being actually hotfixes or merely enhancements, are -PTB (portuguese brazilian). I tell you this because if your Win XP works on a language other than ENU, perhaps you should look for the appropriate localized files for your WinXP.

(Just curiosity: There was a little text in pushtu below "tempuser" which, if I'm not wrong, it reads "sathvat 3 vi"... Is it?)

Henrique

[HPeron]

Hi all,

does anyone know how to install ENU (KBxxxxxx-ENU) hotfixes on a Win XP which is not in english?

KB897338, for instance, is giving me a hard time. Portuguese brazilian Windows XP does not accept that hotfix because of language issues. The installation is interrupted.

Is there anyway to bypass that?

Thanks,

Henrique

[muiz]

Hi all,

does anyone know how to install ENU (KBxxxxxx-ENU) hotfixes on a Win XP which is not in english?

KB897338, for instance, is giving me a hard time. Portuguese brazilian Windows XP does not accept that hotfix because of language issues. The installation is interrupted.

Is there anyway to bypass that?

Thanks,

Henrique

No , you have to download the one in your language.

Edited January 4, 2006 by muiz

[muiz]

Microsoft Statement Concerning Windows Meta File Vulnerability

Microsoft has completed development of a security update to fix the vulnerability and is now testing it for quality and application compatibility, with a goal of releasing the fix worldwide on Jan. 10.

http://www.microsoft.com/presspass/press/2006/jan06/01-03WMFUpdatePR.mspx

Till that time use the fix from a few postst back.

MORE INFO

http://www.grc.com/sn/notes-020.htm

Edited January 5, 2006 by muiz

[samab]

Microsoft just released the fix for the WMF problem.

http://www.microsoft.com/technet/security/...n/ms06-001.mspx

Can somebody fix the link to the KB898900 on the first page, it is pointed to the wrong file.

The correct file is:

http://download.microsoft.com/download/2/2...-v2-x86-ENU.exe

Edited January 8, 2006 by samab

[joei]

The new wmf flaw hotfix, KB912919, won't /integrate for me. Anyone else?

Update... My bad. It works. I gave it the wrong path.

Edited January 6, 2006 by joei

[muiz]

works fine

[war59312]

English Windows XP SP2 Direct Link:

KB912919: http://www.microsoft.com/downloads/info.as...919-x86-ENU.exe

Edited January 6, 2006 by war59312

[the_guy]

English Windows 2000 SP4 Direct Link:

KB912919: http://download.microsoft.com/download/2/8...919-x86-ENU.EXE

Edited January 7, 2006 by the_guy

[samab]

KB900485 Fixes a problem with XP SP2 --- AEC.SYS is the acoustic echo canceling driver.

http://download.microsoft.com/download/e/3...485-x86-ENU.exe

[Theadalus]

Maybe reported before (didn't read previous 100+ pages ), but downloadlink for Windows XP Hotfix KB901214 doesn't work. Found a direct link.

KB901214: http://download.microsoft.com/download/e/1...214-x86-ENU.exe

[war59312]

Thanks samab.

[oneless]

Security Update for Windows XP (KB908519)

+

malicious v1.12 , KB890830 ("250985ee-62e6-4560-b141-997fc6377fe2")

for now