Re: MS02-052

From: mapsonx (mapsonx@hotmail.com)
Date: 09/26/02 

From: "mapsonx" <mapsonx@hotmail.com>
Date: Wed, 25 Sep 2002 20:25:50 -0700

Hi Ned

Just curious. The script returns "Java VM build number is 3807." Is it
to be understood that this message implies that the update has been
installed sucessfully?

According to "MS02-052: Flaw in Microsoft VM JDBC Classes Might Permit
Code to Be Run"
http://support.microsoft.com/?id=kb;en-us;Q329077

This update makes the following changes to the registry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed
Components\{DBB3C81D-3C91-4a1e-BDDF-905B61C7CEDF}
="Security Update for the Microsoft VM"
"ComponentID"="JAVAVM"
"IsInstalled"=hex:01,00,00,00
"KeyFileName"="C:\\WINDOWS\\System32\\msjava.dll"
"Version"="5,00,3807,0"

I have verified this on my machine (Win98se, IE 5.5sp2)

Thx

J

"Ned Flanders" <nedfla@hotmail.com> wrote in message
news:OY03e0JZCHA.3764@tkmsftngp08...
> I cobbled together both of the methods Torgeir supplied and made a
single
> script that checks the msjava.dll file and the registry entry as well.
VBS
> file attached - enjoy. Rename from .vbs.txt to just .vbs, obviously.
>
> "Bill Sanderson" <bill_NoSpamSanderson@msn.com> wrote in message
> news:O4rMrpIZCHA.2452@tkmsftngp11...
> > There's a registry key which is written as part of the patch
process. If
> > you'll forgive me, I can't find the message (its in one of the 052
threads
> > in this group) which gives this info, but I can quote a message
giving
> > installer code for the patch, which includes a test against this
value as
> > part of the code--hope you can decipher it:
>
> ---------------------------------------------------------------------- 

----
> --
> > ---------
> > For everyone who's interested in updating ms java from a KIX script.
Maybe
> > this is helpful. By the way, I downloaded vm-sfix3.exe  by watching
the
> > temporarily files in the Windows Update directory. vm-sfix3.exe is
deleted
> > after installation, so you have to be fast.  This works for 98, NT
and
> 2000,
> > but is not fully tested. XP is not tested. More information about
KIX:
> > http://www.kixtart.org
> >
> > --------------------------------------------------------
> > Shell ('%comspec% /c jview.exe >c:\temp\javara.txt')
> > Shell ('cmd /e:1024 /c jview.exe >c:\temp\javara.txt')
> > OPEN (1,'c:\temp\javara.txt',2)
> > $javabuild = ReadLine(1)
> > CLOSE(1)
> > if Instr($javabuild,'5.00.3805')
> > ELSE
> > if $os_type='W2K'
> > run ('\\server\sbeheer\Install\Q300845_W2K_SP3_X86_EN.exe')
> > exit
> > else
> > run ('\\server\sbeheer\Install\msjavx86.exe /q')
> > exit
> > endif
> > endif
> > del 'c:\temp\javara.txt'
> > if $os_type='NT4' or $os_type='98'or $os_type='w2k'
> > $Javaupdate=ReadValue('HKEY_LOCAL_MACHINE\Software\Microsoft\Active
> > Setup\Installed
> > Components\{DBB3C81D-3C91-4a1e-BDDF-905B61C7CEDF}','Version')
> > if $javaupdate < '5,00,3807,0'
> > run ('\\server\sbeheer\Install\vm-sfix3.exe /q /r:n')
> > endif
> > endif
> > --------------------------------------------------------
> >
> > Marian wrote:
> > > I know I said, "Thank you" . . . but, having said
> > > that . . . how do I confirm the patch installation?  Pls
> > > don't tell me to go to WU; that doesn't work for me . . .
> > > I don't see it under IE, and when I try Run, command
> > > JView, it still shows 3805?
> > >
> > >
> > >
> > >> -----Original Message-----
> > >> Graciously supplied by Torgeir Bakken:
> > >> http://www.download.windowsupdate.com/msdownload/update/v3
> > > -19990518/cabpool/vm-
> > > sfix3_5629DC64B1B233AE49BB601DCC41336F8E723EEE.exe
> > >> (watch for URL wrap)
> > >>
> > >> (secondhand from Ned Flanders!)
> > >>
> > >> Paul Ray wrote:
> > >>> We cannot use http://windowsupdate.microsoft.com/ so where
> > >>> can I download this patch from?
> >
> >
>
>
>

Relevant Pages

  • Re: image gallery
    ... Does this mean i dont have to modify the second part of the script - telling ... If your pictures are stored in your images folder, ... pictures like the FP Banner web component but will be visible to users ... Being in Java doesn't usually / neccessarily mean insecure. ...
    (microsoft.public.frontpage.addins)
  • Re: [opensuse] Editting PATH variable
    ... SuSEconfig script ... ... not knowing what you options you used to install ... If your unfamiliar with Bash a good book is 'Learning the Bash Shell' by ... For Java use editing the PATH variable is NOT required... ...
    (SuSE)
  • Re: JAvascripts not working in my computer
    ... I have all my java enabled in the ... >> Script Debugging Problem ... >> Sun JRE.) ... >> Sun also offers an automatic download and install of the 1.4 Java ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: file not found or server unavailable web site links
    ... and definely looks like a virus writter script deletion ... >> There is an apparent java script error with IE6. ... the Sun JRE.) ... >Sun also offers an automatic download and install of the ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: JavaScript window.open() can not hide status bar
    ... > Script Debugging Problem ... > Where to get the JAVA VM ... > Sun also offers an automatic download and install of the 1.4 Java plug-in ... > checks whether the browser can handle Shockwave Flash so I suspect there may ...
    (microsoft.public.windows.inetexplorer.ie6.browser)