Jump to content

Hotfixes For Windows XP Professional SP1


Aaron

Recommended Posts


I surpose another way I could do it is wrap the mdac.exe with iexpress. Would this be correct and if so that method would you recommend

There's no difference in the different ways MDAC is installed. If it makes it more convenient for you, then you can :)

Link to comment
Share on other sites

The way microsoft makes there hotfixes is like this:

1 - a kb article is created to get a kb number (like 307545), basically a dummy article is created.

2 - the hotfix is made and tested, using the kb article number

3 - once testing is done, the hotfix is released and the kb article is written

This is why a new hotfix might be a couple months old, and the hotfix number might not be new. Both these things don't neccessarily mean trouble. This is my understanding of the hotfix process, i could be wrong.

-gosh

Link to comment
Share on other sites

Here is my Svcpack.inf file.................granted I can lose some spacing in the hotfixes area but at least I don't have an easy time finding the commands. :)

I'm testing to see if the ; lines will cause chaos in my file or just act as remarks as I think they will. I added what the hotfixes were so I could at least know which is which and if a fix comes along that replaces on can find it more easily. I know about the MSVM line being remarked out..........did that till I get MSVM installed for right now :rolleyes:

[Version] 
Signature="$Windows NT$"
MajorVersion=5
MinorVersion=1
BuildNumber=2600

[SetupData]
CatalogSubDir="\i386\Update"

[ProductCatalogsToInstall]
KB826939.cat

[SetupHotfixesToRun]
update.exe -q -n

;April 2003, Cumulative Patch for Outlook Express 6 SP1
Q330994.exe /Q:A /R:N

;Flaw in Windows Script Engine May Allow Code to Run
JS56NEN.exe /Q:A /R:N

;Flaw in the Microsoft VM Could Enable System Compromise
;Q816093.exe /Q:A /R:N

;Vulnerability in Authenticode Verification Could Allow Remote Code Execution
Q823182.exe /Q /N /Z /O

;Flaw in NetBIOS Could Lead to Information Disclosure
Q824105.exe /Q /N /Z /O

;Buffer Overrun in the ListBox and in the ComboBox Control Could Allow Code Execution
Q824141.exe /Q /N /Z /O

;November 2003, Cumulative Patch for Internet Explorer 6 SP1
Q824145.exe /Q:A /R:N

;Buffer Overrun in Windows Help and Support Center Could Lead to System Compromise
Q825119.exe /Q /N /Z /O

;Buffer Overrun in Messenger Service Could Allow Code Execution
Q828035.exe /Q /N /Z /O

;Windows Media Player 9 and Movie Maker 2
WMP9_mm2_ENU.exe

;Update for Windows Media Player Script Commands
Q828026.exe /Q /N /Z /O

;MDAC 2.8
MDAC.EXE

;Buffer overrun in an MDAC function could allow code execution
MDACUP.CMD

;Verifies Hotfixes
qchain.exe

;DirectX 9
DX9NTopk.exe

;Dot Net FrameWork
DOTNETFW.exe

;WinAmp 5
WinAmp.exe

Link to comment
Share on other sites

I have created my winnt.sif file, and now i need to create the Svcpack.inf and i was wondering does anyone have a copy that i can use as a template, and also can anyone help me out with the updates i need and the best way to download them?

cheers Nick :)

Link to comment
Share on other sites

Arron I tried this:

Make a mdac.cmd file which might contain something like this:

cmdow @ /HID

start /wait %systemdrive%\apps\mdac\MDAC_TYP.exe /C:"dasetup.exe /q /n" /q

EXIT

Save this in the \i386\update folder then add a single line that says mdac.cmd under [setupHotfixesToRun]in svcpack.inf

But it's still showing on Windows Upade. Here's what im doing:

1 Made a mdac.cmd with this in it

cmdow @ /HID
start /wait %systemdrive%\install\hotfixes\Q832483.EXE /C:"dahotfix.exe /q /n" /q
EXIT

2 I'v saved this in the i386\update folder along with the mdac (Q832483) hotfix

3I then added this to svcpack.inf under the [setupHotfixesToRun] section

mdac.cmd

Please help

Link to comment
Share on other sites

Aaron,

i'm planning to put Q832483 (13th January 2004) - "Buffer overrun in an MDAC function could allow code execution" in my RunOnceEx.cmd:

REG ADD %KEY%\010 /VE /D "Microsoft DAC Security Update" /f

REG ADD %KEY%\010 /V 1 /D "%systemdrive%\install\Q832483.exe /c:\"dahotfix.exe /q /n\" /Q" /f

is this correct? i'm not sure though.

thanks!

Link to comment
Share on other sites

If I use 832353 INSTEAD of 828026, Windows Update still shows 828026 as a critical update. If I use 828026 without 832353, Windows Update shows NO updates required. I'm using the /o /u /n /z from RunOnceEx.cmd.

For now, I'm installing both, but, it appears that 832353 does NOT supercede 828026.

Link to comment
Share on other sites

It does supersede it according to file versions, its just Windows Update is oblivious to the fact that there's a newer update for WMP9, so MS haven't added it to WU's database yet. (hopefully they will soon!)

I'll remove the new WMP9 update (832353) from the list for the time being.

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...