re: 810030 Microsoft VM Security Update

From: David Bailey (dave@pixel-publishing.co.uk)
Date: 02/18/03 

From: "David Bailey" <dave@pixel-publishing.co.uk>
Date: Mon, 17 Feb 2003 19:37:02 -0800

>-----Original Message-----
>
>
>> -----Original Message-----
>> From: David Bailey [mailto:dave@pixel-publishing.co.uk]
>> Posted At: 10 February 2003 12:12
>> Posted To: security
>> Conversation: 810030 Microsoft VM Security Update
>> Subject: re: 810030 Microsoft VM Security Update
>>
>>
>>
>> >-----Original Message-----
>> >
>> >>
>> >> I wish to install the above update.
>> >>
>> >> Following the readme instructions I have ascertained
I
>> >> currently have version 5.00.3167 installed on my
system.
>> >>
>> >> Before I can apply the 810030 patch I must first
update
>> my
>> >> version of the Virtual Machine to 5.00.3805.
>> >>
>> >> The update read me file tells me I can download this
>> from
>> >> the Windows Update site, but I have entered the most
>> >> obvious search terms and come up with nothing. I
also
>> >> tried the Microsoft Download Centre and drew a blank.
>> >>
>> >> Does anyone know where on Microsoft's site I can
>> download
>> >> this patch, or do I have to update my version of
>> Internet
>> >> Explorer from version 5 to 5.5 - assuming this
contains
>> >> the later version of the Virtual Machine.
>> >>
>> >> All help gratefully appreciated.
>> >>
>> >
>> >http://windowsupdate.microsoft.com and let it scan
your
>> PC.
>> >
>> >--
>> >Gary Williams
>> >newsposter@gdwnet.com
>> >Visit http://www.gdwnet.com for IT articles about real-
>> world issues.
>> >Please keep discussions in the newsgroup.
>> >Backup everything before making any changes - Just in
>> case!!!
>> >Have you looked at http://groups.google.com? - The
answer
>> you seek is
>> >probably there!
>> >
>> >.
>> >I wish to be able to download the update and archive
it.
>> In any event, whilst windowsupdate will list the 810030
>> update in it's list of critical updates, you would be
>> attempting to patch an earlier version of the virtual
>> machine which the update cannot patch.
>
>The MS02-69 patch is 5.5MB in size. This is not patch it
is actually the
>full version of the Microsoft Java VM (version 3809 in
fact)
>
>> Please follow the security bulletin link in the 'read
>> more' pop up window, and you will appreciate what I am
>> saying.
>>
>> Why can't I download the file, the instructions say it
is
>> available. Things are seldom as simple it seems, as
>> Microsoft claim.
>
>Because of legal issues with MS and Sun over Java.
>
>You can download build 5.00.3805 from
>http://java-virtual-machine.net/download.html
>
>You should also read the FAQ on this page which contains
more
>information about the legal and security situation with
this package.
>
>Regards,
>
>--
>Gary Williams
>newsposter@gdwnet.com
>Visit http://www.gdwnet.com for IT articles about real-
world issues.
>Please keep discussions in the newsgroup.
>Backup everything before making any changes - Just in
case!!!
>Have you looked at http://groups.google.com? - The answer
you seek is
>probably there!
>
>.
>Thanks for this, but I'm not quite there yet. You mention
the MS02-69 patch, but provide no url.

I vistited the other url you mentioned, and there seems to
be a suggestion that the virual machine can only be
upgraded from a microsoft hotfix/patch. I searched the
knowledge base for Q222193 and came up blank.

Query - can I just ditch the MS Virtual Machine simply by
disabling all options relating to it in Internet
Explorer 'Tools' 'Internet Options' 'Advanced'

By doing this, and relying on the Sun java environment, is
my system no longer vulnerable to this security flaw?

Many many thanx

Dave Bailey

Relevant Pages