Re: Updates
"Capt K Ripendran" <ripendran@dataone.in> wrote in message
news:e1msTJfwHHA.3684@TK2MSFTNGP02.phx.gbl...
| I have a HP Pavilion 6511 preloaded with Windows 98 SE. Recently, I had
| downloaded and installed Security Update KB891711, amongst others. Since
| then I find that the PC is occasionally unstable.
| I also have a HP Pavilion 4509 preloaded with Windows 98 SE and this PC
| works as ever before!
|
| What does this Update do? Is it required to keep this Update?
|
| Thanking you
| Capt K Ripendran
|
Not a yes or no answer.
Here's what I saved from that time period [03/2005] for KB891711, note
there were two versions v1 and 2 [both had problems in certain
configurations]:
v2 file date is: 03/23/05 for the KB891711.exe. [Look in
%windir\system\KB891711]
http://www.microsoft.com/technet/security/bulletin/MS05-002.mspx
Microsoft Security Bulletin MS05-002
Vulnerability in Cursor and Icon Format Handling Could Allow Remote Code
Execution (891711)
Related references:
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1049
In a Web-based attack scenario, an attacker would have to host a Web site
that contains a Web page that is used to exploit this vulnerability. An
attacker could also attempt to compromise a Web site to have it serve up a
Web page with malicious content attempting to exploit this vulnerability. An
attacker would have no way to force users to visit a Web site. Instead, an
attacker would have to persuade them to visit the Web site, typically by
getting them to click a link that takes them to the attacker's site or a
site compromised by the attacker.
An attacker who successfully exploited this vulnerability could gain the
same user rights as the local user. Users whose accounts are configured to
have fewer user rights on the system could be less impacted than users who
operate with administrative user rights.
By default, Outlook Express 6, Outlook 2002, and Outlook 2003 open HTML
e-mail messages in the Restricted sites zone. Additionally, Outlook 2000
opens HTML e-mail messages in the Restricted sites zone if the Outlook
E-mail Security Update
(
http://www.microsoft.com/office/previous/outlook/2002security.asp) has been
installed. Outlook Express 5.5 Service Pack 2 opens HTML e-mail messages in
the Restricted sites zone if Microsoft Security Bulletin MS04-018
(
http://www.microsoft.com/technet/security/bulletin/ms04-018.mspx) has been
installed. The Restricted sites zone helps reduce attacks that could
attempt to exploit this vulnerability.
The risk of attack from HTML e-mail can be significantly reduced if you meet
all the following conditions:
1. Apply the update that is included with Microsoft Security Bulletin
MS03-040 (
http://www.microsoft.com/technet/security/bulletin/MS03-040.mspx)
or later Cumulative Security Update for Internet Explorer.
2. Use Internet Explorer 6 or later.
3. Use the Microsoft Outlook E-mail Security Update, use Microsoft Outlook
Express 6 or later, or use Microsoft Outlook 2000 Service Pack 2 or later in
its default configuration.
4. Read e-mail messages in plain text format (Outlook 2002 or later, or
Outlook Express 6 SP1 or later).
The update removes the vulnerability by modifying the way that cursors,
animated cursor, and icon formats are validated prior to rendering.
Parties contacting Microsoft concerning the problems received this [or
similar]:
Thank you for contacting Microsoft Online Support Service. My name is
**********, and I'm glad to work with you. For your reference, the case ID
for
this service request is XXXXXXXXXXXX. You can contact me directly by
writing an email to xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx with the case ID in
the subject line.
To give the most accurate support possible, I would like to give a brief
summary of the problem as I understand it:
The computer did not work properly after you installed KB891711. You
have indicated that the issue has been resolved after you removed it
from Startup.
If there has been any misunderstanding, please let me know.
I would like to explain that Microsoft releases new updates to fix bugs
and increase the stability of Windows Operating System, and we have
tested as much of the software environment as we could to improve the
performance of updates. However, we cannot guarantee that every update
can install perfectly in all computers because every computer has a
different software and hardware environment. I highly appreciate your
understanding.
Regarding your concern, I would like to explain that it is a security
updates for the computer. If you have an antivirus or firewall program,
you do not need to run this update in the background currently.
If you have any further questions, don't hesitate to let me know.
Thank you for your time. I am standing by for your reply.
Best Regards,
-------
NOTE THE LAST PARAGRAPH
In this forum [and elsewhere], some had no problems, but many did. If
problems were associated to the fix, you can test by disabling it in
MSconfig or uninstalling.
It is regarded by most as a kludge / crutch, since its just a work-around
rather than a fix. Microsoft produced two (2) of these, the second is
KB918547. Likely produced as such because End Of Support was coming due.
More Information / Downloads: More information on this vulnerability could
be found in links provided below
http://support.microsoft.com/default.aspx?scid=kb;en-us;891711
http://www.microsoft.com/technet/security/Bulletin/MS05-002.mspx
http://support.microsoft.com/default.aspx?pr=LifeAn1
http://go.microsoft.com/fwlink/?LinkId=21130
http://go.microsoft.com/fwlink/?LinkId=21742
http://go.microsoft.com/fwlink/?LinkId=21140
http://go.microsoft.com/fwlink/?LinkId=33327
http://go.microsoft.com/fwlink/?LinkId=33328
http://go.microsoft.com/fwlink/?LinkId=33330
http://go.microsoft.com/fwlink/?LinkId=21134
http://go.microsoft.com/fwlink/?LinkId=33332
http://go.microsoft.com/fwlink/?LinkId=21158
http://go.microsoft.com/fwlink/?LinkId=33329
http://go.microsoft.com/fwlink/?LinkId=21129
http://go.microsoft.com/fwlink/?LinkId=21131
http://go.microsoft.com/fwlink/?LinkId=21132
http://go.microsoft.com/fwlink/?LinkId=21133
http://go.microsoft.com/fwlink/?LinkId=21134
http://support.microsoft.com/kb/323166
http://go.microsoft.com/fwlink/?LinkId=21135
http://go.microsoft.com/fwlink/?LinkId=22939
http://go.microsoft.com/fwlink/?LinkId=33340
http://go.microsoft.com/fwlink/?LinkId=21158
http://go.microsoft.com/fwlink/?LinkId=33341
http://go.microsoft.com/fwlink/?LinkId=33387
http://go.microsoft.com/fwlink/?LinkId=21161
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1049
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1305
http://go.microsoft.com/fwlink?linkid=18866
--
MEB
http://peoplescounsel.orgfree.com
________