the_guy Posted August 17, 2006 Share Posted August 17, 2006 @winxpi: Just copying the file might mess up IE. That's why I'm waiting until MS rereleases 918899 to include it in my patch.the_guy Link to comment Share on other sites More sharing options...
PROBLEMCHYLD Posted August 18, 2006 Share Posted August 18, 2006 Does BROWSEUI.DLL in this package fix the delete large files bug Created from Win2000 SP4 IE 6.0 SP1 MS06-042 [Q918899] Security Fix: Link to comment Share on other sites More sharing options...
the_guy Posted August 19, 2006 Share Posted August 19, 2006 I have no idea what bug you're talking about. I don't believe it does. I don't even know if Microsoft is aware of the issue. I plan on requesting KB915113 which updates browseui.dll to version 6.0.2800.1807 in the next few days.the_guy Link to comment Share on other sites More sharing options...
winxpi Posted August 19, 2006 Share Posted August 19, 2006 Does BROWSEUI.DLL in this package fix the delete large files bug Created from Win2000 SP4 IE 6.0 SP1 MS06-042 [Q918899] Security Fix:Don't think so because the browselc.dll file is also a culprit. Link to comment Share on other sites More sharing options...
erpdude8 Posted August 21, 2006 Share Posted August 21, 2006 Does BROWSEUI.DLL in this package fix the delete large files bug Created from Win2000 SP4 IE 6.0 SP1 MS06-042 [Q918899] Security Fix:Don't think so because the browselc.dll file is also a culprit.Not even close, PROBLEMCHYLD. Note the"delete large files" problem only occurs under Win98 & ME and does not happen under Win2000/XP. MUST use BROWSEUI.DLL file from IE 5.5 SP2 KB905915 patch and BROWSELC.DLL file from IE 5.5 SP2.anyway, I use xplorer2 to delete or even shred large number of files and will not hang my Win98/ME machines.hmm, looks like the author of 918547 will need to patch the 98fe GDI files.MDGx, can the author of unofficial 918547 gdi.exe & gdi32.dll v4.10.2227 Win98se update, patch the gdi.exe and gdi32.dll files for Win98fe and release them as v4.10.2004? Link to comment Share on other sites More sharing options...
MDGx Posted August 21, 2006 Author Share Posted August 21, 2006 (edited) MDGx, can the author of unofficial 918547 gdi.exe & gdi32.dll v4.10.2227 Win98se update, patch the gdi.exe and gdi32.dll files for Win98fe and release them as v4.10.2004?Please see this post:http://www.msfn.org/board/?s=&showtopi...st&p=550394____________________________________Great news I've obtained Q923762 now with theUrlmon.dll 6.00.2800.1567 version and included it in the unofficial Cumulative Security Update for Internet Explorer KB918899.I obtained the fix approximately 5 hours ago but had to test it first and there was no conflict so far.The installer is now called with _v2 for volume 2 .English IE60sp1_KB918899_v2_ENU.EXEGerman IE60sp1_KB918899_v2_DEU.exeIf someone wants the original hotfix only, write me!I have tried to install your hotfix v2 on Win98SE + IE 6.0 SP1 and all I get is this message:"The version of Windows you have installed does not match the update you are trying to install."So I extracted urlmon.dll, copied it over to %windir%\system and then regsvr32-ed it.The 1st hotfix [v1] works ok:http://www.mdgx.com/files/IE918899.EXEPlease send me the official Q923672 fix at your convenience.E-mail [please click the blue E-mail link]:http://www.mdgx.com/form.htmThanks in advance. Edited August 21, 2006 by MDGx Link to comment Share on other sites More sharing options...
erpdude8 Posted August 21, 2006 Share Posted August 21, 2006 (edited) It is highly unlikely I will have the time to create separate patches for Win98FE. The code in GDI.EXE 4.10.2002 is arranged differently, so the patches would have to be rewritten (no simple cut & paste operation in a hex editor here). However, there appear to be no differences in functionality between 4.10.2002 and 4.10.2225, so I suggest using 4.10.2227 under Win98FE. If someone finds a difference in functionality, please let me know.Can he take a look at the code of U912919 of v4.10.2003 of the gdi.exe and gdi32.dll files?nah, I dont like the idea of using 4.10.2227 under Win98 FE as it may break Win98 FE or cause BSOD errors.I'm going to re-create the Q231942 ios.vxd 4.00.1114 fix for Win95 SR2 as the patch is faulty and wont install the updated ios.vxd file. I'll send you the "corrected" Q231942 patch ASAP. Edited August 21, 2006 by erpdude8 Link to comment Share on other sites More sharing options...
winxpi Posted August 21, 2006 Share Posted August 21, 2006 (edited) Great news I've obtained Q923762 now with theUrlmon.dll 6.00.2800.1567 version and included it in the unofficial Cumulative Security Update for Internet Explorer KB918899.I obtained the fix approximately 5 hours ago but had to test it first and there was no conflict so far.The installer is now called with _v2 for volume 2 .English IE60sp1_KB918899_v2_ENU.EXEGerman IE60sp1_KB918899_v2_DEU.exeIf someone wants the original hotfix only, write me!I have tried to install your hotfix v2 on Win98SE + IE 6.0 SP1 and all I get is this message:"The version of Windows you have installed does not match the update you are trying to install."So I extracted urlmon.dll, copied it over to %windir%\system and then regsvr32-ed it.The 1st hotfix [v1] works ok:http://www.mdgx.com/files/IE918899.EXEPlease send me the official Q923672 fix at your convenience.E-mail [please click the blue E-mail link]:http://www.mdgx.com/form.htmThanks in advance.You did right with extracting.This is a "feature-problem" this message should prevent on installing the fix on wrong systems.But if you installed 918899 before somehow that it only includes one newer file it despite using the proper system refuses to install. It did also happen on my system so you can manually install the new file or a better workaround is to open the installer with e.g. ResourceHacker go to RCData and delete the "VERCHECK" ressource.I tried 2x to send you the fix but I got "delivery failed".Hopefully I uploaded it:HereAlthough the zip file is called "283500..." but it contains the fix. Edited August 21, 2006 by winxpi Link to comment Share on other sites More sharing options...
MDGx Posted August 21, 2006 Author Share Posted August 21, 2006 It is highly unlikely I will have the time to create separate patches for Win98FE. The code in GDI.EXE 4.10.2002 is arranged differently, so the patches would have to be rewritten (no simple cut & paste operation in a hex editor here). However, there appear to be no differences in functionality between 4.10.2002 and 4.10.2225, so I suggest using 4.10.2227 under Win98FE. If someone finds a difference in functionality, please let me know.Can he take a look at the code of U912919 of v4.10.2003 of the gdi.exe and gdi32.dll files?nah, I dont like the idea of using 4.10.2227 under Win98 FE as it may break Win98 FE or cause BSOD errors.erpdude8:This is your answer:On August 21, 09:47 AM, 'erpdude8' wrote:> Can he take a look at the code of U912919 of v4.10.2003 of the gdi.exe> and gdi32.dll files?Why??? I am the author of 4.10.2003.> nah, I dont like the idea of using 4.10.2227 under Win98 FE as it may> break Win98 FE or cause BSOD errors.Pretty easy to replace two system files under plain MS-DOS 7.1 and findout for sure!Hope this helps. Link to comment Share on other sites More sharing options...
PROBLEMCHYLD Posted August 21, 2006 Share Posted August 21, 2006 if i install Q918547 and don't install Q912919 will it cause problems? Link to comment Share on other sites More sharing options...
MDGx Posted August 21, 2006 Author Share Posted August 21, 2006 (edited) if i install Q918547 and don't install Q912919 will it cause problems?Boh these fixes install identical files on Win98SE:GDI32.DLL + GDI.EXE 4.10.2227Description found at:http://www.mdgx.com/web.htm#9SU* Windows 98/98 SE Graphics Rendering Engine (GRE) Windows MetaFile (WMF)Security Vulnerability Fixes (English):http://www.microsoft.com/technet/security/...n/ms06-026.mspxQ918547: Unofficial Windows 98 SE GDI32.DLL + GDI.EXE 4.10.2227 Fix:http://www.mdgx.com/files/918547.TXTDirect download [328 KB]:http://www.mdgx.com/files/Q918547.EXESTRONGLY RECOMMENDED: Q918547 above provides the BEST Fix!OBSOLETE fixes:- Microsoft Windows 98/98 SE Q918547.DLL 4.10.2224 + KB918547.EXE 4.10.2224Fix [145 KB]:http://download.windowsupdate.com/msdownlo...0a47a89e3ce.exeBUG: Q918547.DLL + KB918547.EXE Fix above installs BUGgy INF file!FIX: MUST Install this INF Fix [63 KB]:http://www.mdgx.com/files/918547FX.EXEAFTER installing Q918547.DLL + KB918547.EXE Fix above!- U918547: Unofficial Windows 98/98 SE/ME Q918547.DLL 4.10.2226 + KB918547.EXE4.10.2226 Fix:http://www.mdgx.com/files/U918547.TXTDirect download [113 KB]:http://www.mdgx.com/files/U918547.EXESymantec: Microsoft Windows GDI WMF Handling Heap Overflow Vulnerability:http://securityresponse.symantec.com/avcen...tent/18322.htmlInside the WMF Format [Acrobat PDF format, 113 KB, right-click to save!]:http://pferrie.tripod.com/vb/wmf.pdf* Unofficial Windows 98/98 SE Graphics Rendering Engine (GRE) WindowsMetaFile (WMF) GDI32.DLL + GDI.EXE (4.10.2003 for Win98/98 SP1 + 4.10.2227for Win98 SE) Security Vulnerability Fix:http://www.microsoft.com/technet/security/...n/ms06-001.mspxDirect download [380 KB, English]:http://www.mdgx.com/files/Q912919.EXEMore info:http://www.mdgx.com/files/918547.TXTMore info:http://www.microsoft.com/technet/security/...n/ms06-026.mspxMore info:http://www.msfn.org/board/?showtopic=46581&st=193MouseTrap WMF BUG detection tool (freeware):http://www.grc.com/wmf/wmf.htmMore info:http://www.kb.cert.org/vuls/id/181038/Hope this helps._________________________________________This is a "feature-problem" this message should prevent on installing the fix on wrong systems.But if you installed 918899 before somehow that it only includes one newer file it despite using the proper system refuses to install. It did also happen on my system so you can manually install the new file or a better workaround is to open the installer with e.g. ResourceHacker go to RCData and delete the "VERCHECK" ressource.I tried 2x to send you the fix but I got "delivery failed".Hopefully I uploaded it:HereAlthough the zip file is called "283500..." but it contains the fix.About IE918899 hotfix v2:Is it possible to change SED code to allow install on all 98/98 SE/ME systems with IE 6.0 SP1 pre-installed?I got the official W2K SP4 fix.Thanks again.BTW:The delivery failure is probably caused by Gmail [my email account] which doesn't allow to send EXE or ZIP file attachments.Such file extensions must be renamed to some unknown extension, like EXX, ZZZ etc. Edited August 21, 2006 by MDGx Link to comment Share on other sites More sharing options...
winxpi Posted August 21, 2006 Share Posted August 21, 2006 (edited) About IE918899 hotfix v2:Is it possible to change SED code to allow install on all 98/98 SE/ME systems with IE 6.0 SP1 pre-installed?If you mean that it can be installed without getting an error message (I think the message is shown because v2 includes nearly the same files versions like v1 does)then use ResourceHacker go to RCData and delete the "VERCHECK" ressource and thats it. Edited August 21, 2006 by winxpi Link to comment Share on other sites More sharing options...
MDGx Posted August 22, 2006 Author Share Posted August 22, 2006 (edited) winxpi:What I meant was...If possible, can you please modify the vercheck function and repackage the hotfix to include the older URLMON.DLL from the 1st hotfix [v1]?This way everybody will be able to install it, not only the people who never installed v1.Right now who installed v1, cannot install v2, therefore can't install newer urlmon.dll.If you have the time to do this, I'll post it at my site to replace older v1 hotfix.Thanks for your time. Edited August 22, 2006 by MDGx Link to comment Share on other sites More sharing options...
erpdude8 Posted August 22, 2006 Share Posted August 22, 2006 (edited) if i install Q918547 and don't install Q912919 will it cause problems?no it will not. Q918547 provides the same security fix as Q912919 except Q912919 also bundles GDI files for Win98fe. Edited August 22, 2006 by erpdude8 Link to comment Share on other sites More sharing options...
erpdude8 Posted August 22, 2006 Share Posted August 22, 2006 (edited) Also, Microsoft plans to re-release MS06-042 for 2000 SP4 and XP SP1 to fix the urlmon.dll issue on August 22. I plan on redoing my patch at that time to include the new urlmon.dll.the_guyOOPSIE, the_guy. Microsoft has just changed their mind. They will NOT re-release MS06-042 for Win2k SP4/WinXP SP1 today August 22 as they've found new problems with it. See MS security bulletin MS06-042 now and look in the "Caveats" section:http://www.microsoft.com/technet/security/...n/MS06-042.mspxoh and read this Bink.nu article as MS06-042 for IE6 SP1 seems to "open" a new security vulnerability:http://bink.nu/Article8130.binkIf that's true, then I will advise NOT to install MS06-042 for IE6 SP1 Edited August 22, 2006 by erpdude8 Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now