Ms06-015 Patch-> win 2000 shell32.dll ?

[X-Mas]

BTW how can I patch the header of the verclsid.exe file for example,is it difficult?

When there is a working version can you tell here,Tihiy?

Does someone know how to check this security hole.

Edited August 5, 2006 by X-Mas

[erpdude8]

Actually, it won't work with Kernel Update. It is still missing SHBindToParent in shell32.dll. Kernel Update fixes 1 dependency, but not both of them.

Oh well, It should work with 98SE2ME Option 3.

the_guy

or Tihiy's RPlite5 pack with Shell update. Using 98SE2ME option 3 to install the WinME Explorer GUI may also fix the multiple screen saver icon bug I talked about in another thread.

[erpdude8]

ah forget about MS06-015. New security update MS06-045 has newer shell32.dll files for Win2000, XP & 2003.

[winxpi]

OK lets make an unofficial MS06-045 update.

But the verclsid.exe maybe would also have been essential part of the ms06-015 patch.

Edited August 10, 2006 by winxpi

[the_guy]

The only difference between MS06-015 and MS06-045 is that MS06-015 includes verclsid.exe. That's it.

Now, if someone make an unofficial MS06-045 patch, they should also try to make verclsid.exe work on 98/ME.

the_guy

[erpdude8]

no. Verclsid.exe files from MS06-015 refuse to run under Win95/98/ME and require Win2000/XP/2003

Yes. It runs without problems after header patching.

I'll write my researching later.

what's the status on patching verclsid.exe, Tihiy?

[Tihiy]

what's the status on patching verclsid.exe, Tihiy?

One byte can be changed to make it work on 9x, but why? Is is useless standalone.

Sometime i'll make shell patch to fix those MS??-??? vulnerabilites, but i'm not sure when.

[winxpi]

Can you tell which byte does one have to change,please. Would be B) .

I'm just curious.

Edited August 30, 2006 by winxpi

[winxpi]

I think I wont get this information .

Anyway I can't waste time anymore now.

Edited August 31, 2006 by winxpi

[erpdude8]

One byte can be changed to make it work on 9x, but why? Is is useless standalone.

Quote from security bulletin MS06-015 about VERCLSID.EXE file:

Verclsid.exe is used to verify a COM object before it is instantiated by Windows Explorer.

I think I wont get this information .

Anyway I can't waste time anymore now.

then DONT, winxpi! move on and forget about it.