Re: 891711/MS05-002 Updated (fixed) for Win9x

From: Peter Foldes (okf22_at_email.msn.com)
Date: 04/13/05 

Date: Wed, 13 Apr 2005 09:02:35 -0400

Also 4 more of them
http://go.microsoft.com/fwlink/?LinkId=46049 

-- 
Peter
Please reply to Newsgroup for the benefit of others.
"PA Bear" <PABearMVP@gmail.com> wrote in message 
news:ee%23iUJ5PFHA.3988@tk2msftngp13.phx.gbl...
> [Crossposted to Security, Security.Homeusers, Win98 General, WinME 
> General, Win98 Windows Update, and Windows Update newsgroups for maximum 
> exposure. Please eliminate needless crossposting when replying to this 
> message.]
>
> Microsoft Security Bulletin MS05-002: Vulnerability in Cursor and Icon 
> Format Handling Could Allow Remote Code Execution (891711):
> http://www.microsoft.com/technet/Security/bulletin/ms05-002.mspx
>
> <quote>
> Why was this security bulletin updated on April 12, 2005?
>
> After the release of the MS05-002 security bulletin, Microsoft became 
> aware of an issue affecting customers deploying the Windows 98, 98SE and 
> ME security update. In most cases, the issue caused machines to 
> unexpectedly restart.
>
> Microsoft has investigated this issue and has made available revised 
> security updates for these platforms. These revised security updates are 
> available from Windows Update and the Microsoft Download Center. Customers 
> who have not yet applied the original version of these updates should 
> visit Windows Update to receive the revised updates.
>
> [NB:] Customers who have already applied the original Windows 98, 98SE and 
> ME security update are advised to install the current revision of the 
> update from Windows Update.
>
> <snip>
>
> Are Windows 98, Windows 98 Second Edition, or Windows Millennium Edition 
> critically affected by any of the vulnerabilities that are addressed in 
> this security bulletin?
>
> Yes. Windows 98, Windows 98 Second Edition, and Windows Millennium Edition 
> are critically affected by this vulnerability. A Critical security update 
> for these platforms is available and is provided as part of this security 
> bulletin and can be downloaded /only/ from the Windows Update Web site. 
> [Emphasis added]
> </quote>
>
> Thanks to all those who called MS at 1-866-PCSAFETY about the bug in 
> 891711 as released in Feb-05.  Your documentation of the problems caused 
> by 891711 played a major role in getting them fixed.
>
> AFAIK KB891711 should no longer load at Startup and display as a running 
> Process.
> -- 
> ~Robear Dyer (PA Bear)
> MS MVP-Windows (Shell, IE/OE) & Security
>

Relevant Pages
Loading