HOTFIXES: Windows XP SP2 & Windows 2000 SP4

[Izzie]

I'm currently updating my hotfixes collection for win2kSP4 to discard the obsolete ones.

Not sure if KB905495 has been included in win2k HF list on purpose but just in case:

KB905495 -› Vulnerability in the Windows FTP client could allow file transfer location tampering

Download -› 555 KB (August 10, 2005)

Switches: KB905495.exe /passive /norestart /quiet

Microsoft Security Bulletin MS05-044

Vulnerability in the Windows FTP Client Could Allow File Transfer Location Tampering (905495)

Published: October 11, 2005 | Updated: October 26, 2005

(...)

Non-Affected Software:

• Microsoft Windows 2000 Service Pack 4

http://www.microsoft.com/technet/security/...n/ms05-044.mspx

Edited February 21, 2006 by Izzie

[the_guy]

in response to that, read the Affected Components Section

Affected Components:

• Internet Explorer 6 Service Pack 1 on Microsoft Windows 2000 Service Pack 4

the_guy

[tarquel]

Hotfix KB889858, KB887078 and KB884267 already include in Windows media

player 10.00.00.3802 (http://www.microsoft.com/downloads/details.aspx?FamilyID=

b446ae53-3759-40cf-80d5-cde4bbe07999&displaylang=en).

KB907658 remove KB892313 (new Wmp.dll 07-Sep-2005 11:07 10.0.0.3955 5,533,696)

KB893241 remove KB885353 (new Wmnetmgr.dll 26-Apr-2005 11:40 10.0.0.3921 1,028,096)

KB888656 remove KB898549 (new Wmvcore.dll 30-Apr-2005 21:23 10.0.0.3923 2,374,392)

KB900399 remove KB893241 (new Wmnetmgr.dll 26-Jul-2005 10.0.0.3941 1,027,584)

KB904555 remove KB893240 (new Drmv2clt.dll 21-Jul-2005 13:14 10.0.0.3940 504,320)

after install 888656 - .3923, after install 907658 - .3955 version of wmp.

Is this still acurate Mr Hulk? I'm slightly confused as to which hotfixes to include, plus one of them is giving me the System Restore is turned off message during the UA install and I cant pin point which hotfix it is

Thanks for the list tho - it is appreciated

Regards

Nath

Edited February 22, 2006 by tarquel

[BlueMe]

I use this page for some time now and just wanna say Thank You that your doing this !

[xcitmntaz]

Is anyone else having a problem getting KB911565 (WMP10 version) to install during an integrated unattended install for WXPSP2? The entries get added to svcpack.inf and I have even tried moving toward the bottom so that it gets installed last, but still no luck.

[cumminbk]

i have only been able in install wmp10 hotfixes after install at first boot. they dont work well i call them from cmdlines.txt

[the_guy]

New Updates for Windows 2000

KB912919 -› Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution

Download -› 711 KB (January 5, 2006)

Switches: KB912919.exe /q /n /z

*** NEW ***

KB911565 -› Vulnerability in Windows Media Player could allow remote code execution.

Download -› 2.43 MB (February 13, 2006)

Switches: KB911565.exe /q /n /z

*** NEW ***

KB911564 -› Vulnerability in Windows Media Player plug-in with non-Microsoft Internet browsers could allow remote code execution.

Download -› 598 KB (February 13, 2006)

Switches: KB911564.exe /q /n /z

KB908523 -› Vulnerability in Windows Kernel Could Allow Elevation of Privilege

Download -› 1.52 MB (December 12, 2005)

Switches: KB908523.exe /q /n /z

KB908519 -› Vulnerability in Embedded Web Fonts Could Allow Remote Code Execution

Download -› 584 KB (January 9, 2006)

Switches: KB908519.exe /q /n /z

KB905915 -› Cumulative Security Update for Internet Explorer

Download -› 4.75 MB (December 5, 2005)

Switches: KB905915.exe /q /n /z

*** NEW ***

KB890830 -› Microsoft® Windows® Malicious Software Removal Tool (v1.13)

Download -› 1.41 MB (February 14, 2006)

Switches: KB890830.exe /q (cannot use the /integrate; option)

To be removed from the list:

885492

896688

the_guy

Edited February 24, 2006 by the_guy

[hmaster10]

Hotfix being remove from the list means that there is a newer fix to that remove hotfix? (please enligthen me ) thank you

[RyanVM]

For the record, expect KB912945 (released today) to break a bunch of stuff. It's the result of Microsoft's loss of the patent infringement lawsuit they were in over how ActiveX controls are loaded. Read the KB article for more details.

Oh, and KB904942 should also probably be added to the first post along with KB912945

[war59312]

And perhaps KB912475 as well.

Australia has changed the regularly scheduled end of Daylight Saving Time in five Australian states from March 2006 to the first Sunday of April 2006 due to the 2006 Commonwealth Games. Install this update to enable your computer to automatically adjust the computer clock on the correct date. After you install this item, you may have to restart your computer.

http://support.microsoft.com/default.aspx?...kb;en-us;912475

[RyanVM]

Man, you can tell I don't follow this thread too closely. That fix came out last week and I figured you guys were all over that one already

[jrf2027]

So, if KB912945 is not a critical update, fixes no security issues, and takes away functionality, why would I want to even install it?

Also, does KB912475 really affect anybody not living in Australia? So once again, why should I bother with it?

[RyanVM]

KB912945 is a cumulative IE update. In other words, as soon as MS releases another round of security updates, you'll get the new behavior whether you want it or not.

[war59312]

KB904942 - Authentication fails when you use Outlook or Outlook Express to try to log on to a HTTP-based mail server if you use Internet Explorer version 7.0

http://support.microsoft.com/Default.aspx?kbid=904942

Edited March 1, 2006 by war59312

[RyanVM]

Guys, as a general warning: KB912945 SEVERELY BREAKS INTERNET EXPLORER WHEN INTEGRATED VIA ANY METHOD INTO THE XP INSTALL CD

I've confirmed it by integrating by my normal method, integrating with nLite, and with using the plain old /integrate switch. If the hotfix is integrated, you'll see a dialog during the OOBE stage of XP setup asking you to open or save a file. After that, you'll find that IE can't open HTML files or open any websites. (I'll put up some screenshots in a bit).

DO NOT INTEGRATE KB912945 INTO YOUR CD. IT WILL SEVERELY BREAK IE!

Edited March 2, 2006 by RyanVM