Re: Important Information Regarding MS01-054 and WindowsME

From: Russ (Russ.Cooper@RC.ON.CA)
Date: 11/09/01


Message-ID:  <E9A01F52DC939448BBDE44ED2E1C468F23CD09@muskie.rc.on.ca>
Date:         Fri, 9 Nov 2001 08:20:24 -0500
From: Russ <Russ.Cooper@RC.ON.CA>
Subject:      Re: Important Information Regarding MS01-054 and WindowsME
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

Microsoft have pushed a Security Bulletin message regarding MS01-054. Seems
that there is a problem with MS01-054 which affects Windows ME systems.
Depending on how the system is installed, Windows ME may hang or act
erratically after MS01-054 is installed.

I urge you to contact Microsoft Support via telephone if you encounter this
problem. The support call is free if you explain you're dealing with this
issue.

This update is also included in the "October 25th, 2001 Critical Update"
from Windows Update, but again, the problems are only with the Windows ME
bits.

Looks like Microsoft has another investigation to go through.

Meanwhile, over on SecurityFocus' Bugtraq, Ken
<franklin_tech_unlimited@yahoo.com> published 3 Denial of Service attacks on
November 1 which exploit the Universal Plug-n-Play component being fixed by
this bulletin;

http://www.securityfocus.com/archive/1/224295

Cheers,
Russ - NTBugtraq Editor



Relevant Pages

  • SecurityFocus Microsoft Newsletter #176
    ... MICROSOFT VULNERABILITY SUMMARY ... Microsoft Windows XP HCP URI Handler Arbitrary Command Execu... ... PHPNuke Category Parameter SQL Injection Vulnerability ... Microsoft Baseline Security Analyzer Vulnerability Identific... ...
    (Focus-Microsoft)
  • SecurityFocus Microsoft Newsletter #49
    ... Subject: SecurityFocus Microsoft Newsletter #49 ... Microsoft Windows NNTP Denial of Service Vulnerability ... Microsoft IIS SSI Buffer Overrun Privelege Elevation Vulnerability ... Microsoft ISA Server H.323 Memory Leak Denial of Service... ...
    (Focus-Microsoft)
  • SecurityFocus Microsoft Newsletter #153
    ... MICROSOFT VULNERABILITY SUMMARY ... ZoneAlarm Random UDP Flood Denial Of Service Vulnerability ... FloosieTek FTGatePro Mail Server Path Disclosure Vulnerabili... ... Microsoft Windows NetBIOS Name Service Reply Information Lea... ...
    (Focus-Microsoft)
  • [NT] Cumulative Security Update for Internet Explorer (MS04-025)
    ... Get your security news from a reliable source. ... * Microsoft Windows NT Workstation 4.0 Service Pack 6a ... Navigation Method Cross-Domain Vulnerability ...
    (Securiteam)
  • SecurityFocus Microsoft Newsletter #120
    ... Strengthening Network Security: FREE Guide Network security is a ... MICROSOFT VULNERABILITY SUMMARY ... Microsoft Windows File Protection Signed File Replacement... ... PlatinumFTPServer Information Disclosure Vulnerability ...
    (Focus-Microsoft)