Internet Explorer Critical Vulnerability

[PsycoUnc]

-hey, has anybody noticed that the unofficial IE 6.0+ VGX.DLL file subs just fine into IE 5.5sp2?

...

I unregistered the old one (located in Program Files), replaced it, re-registered, and voila, the test page displays just fine (it bombed before this "fix", as is proper for unprotected systems)...

...

-granted, I've only tested it w/the one test page, have no idea if it's "fully" compatible... anybody know of any other test pages, or ways to test it?

[Petr]

-hey, has anybody noticed that the unofficial IE 6.0+ VGX.DLL file subs just fine into IE 5.5sp2?

IE5.5SP2 uses VGX.DLL 5.50.4133.200 or hotfix version 5.50.4909.1000.

IE6.0 uses VGX.DLL 6.00.2600.0000

IE6.0SP1 uses 6.00.2800.1106 (first release), 6.00.2800.1265 (re-release and KB826940), 6.00.2800.1411 (KB833989 security update), 6.00.2800.1461 (KB883586 hotfix), 6.00.2800.1488 (KB890573 hotfix)

Original Microsoft VGX fixes install on systems with IE 6.0 SP1 only (6.00.2800.1106-6.00.2800.9999) , I have no idea if the 6.0SP1 version of VGX.DLL can be used with IE6.0 or IE5.5SP2.

Petr

[PsycoUnc]

-it's ver. 6.00.2800.1580, from MDGx's "Unofficial MS IE 6.0/6.0 SP1 Patch" file...

manual install/register of that file seems to work fine in IE5.5sp2 (at least on that one test page), but it'll need more testing of course to insure compatibility...

>;]

Edited September 28, 2006 by PsycoUnc

[bacon_boy]

-it's ver. 6.00.2800.1580, from MDGx's "Unofficial MS IE 6.0/6.0 SP1 Patch" file...

manual install/register of that file seems to work fine in IE5.5sp2 (at least on that one test page), but it'll need more testing of course to insure compatibility...

>;]

Thanks for that valuable bit of info, the page now displays correctly for me as well

[noguru]

ZERT also made a patch for Win98/2Ksp3/XPsp0

http://isotf.org/zert/download.htm

[erpdude8]

-hey, has anybody noticed that the unofficial IE 6.0+ VGX.DLL file subs just fine into IE 5.5sp2?

IE5.5SP2 uses VGX.DLL 5.50.4133.200 or hotfix version 5.50.4909.1000.

IE6.0 uses VGX.DLL 6.00.2600.0000

IE6.0SP1 uses 6.00.2800.1106 (first release), 6.00.2800.1265 (re-release and KB826940), 6.00.2800.1411 (KB833989 security update), 6.00.2800.1461 (KB883586 hotfix), 6.00.2800.1488 (KB890573 hotfix)

Original Microsoft VGX fixes install on systems with IE 6.0 SP1 only (6.00.2800.1106-6.00.2800.9999) , I have no idea if the 6.0SP1 version of VGX.DLL can be used with IE6.0 or IE5.5SP2.

Petr

i think the unofficial IE925486 patch listed at MDGx's IE page should be revised to work under IE 5.5 as well if v6.00.2800.1580 of the vgx.dll file works under IE 5.5 original, SP1 & SP2.

[bacon_boy]

i think the unofficial IE925486 patch listed at MDGx's IE page should be revised to work under IE 5.5 as well if v6.00.2800.1580 of the vgx.dll file works under IE 5.5 original, SP1 & SP2.

Agreed.

I can confirm that it definitely works under 5.5 SP2, as I have tested various pages with vector artwork examples, including Microsoft's own...

http://msdn.microsoft.com/library/default....ref/default.asp

(Choose "VML Demos" on the left-side menu)

However it should be noted that the patch won't install on 5.5 SP2 by double-clicking it. Instead, the contents of the .exe must be extracted first - and then the old vgx.dll must be unregistered and this new one registered again after being placed in the correct folder.

[MDGx]

VGX.DLL (VML) patch [iE925486.EXE] now installs under MS IE 5.5 SP2.

Please see this thread for current updates:

http://www.msfn.org/board/?showtopic=46581

HTH

[bacon_boy]

VGX.DLL (VML) patch [iE925486.EXE] now installs under MS IE 5.5 SP2.

Please see this thread for current updates:

http://www.msfn.org/board/?showtopic=46581

HTH

Cheers