Microsoft KB Archive/836570

= List of security updates that are included on the Windows Security Update CD (February 2004) =

PSS ID Number: 836570

Article Last Modified on 4/22/2004

-

The information in this article applies to:


 * Microsoft Windows 98
 * Microsoft Windows 98 Second Edition
 * Microsoft Windows Millennium Edition
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Professional
 * Microsoft Windows XP Home Edition
 * Microsoft Windows XP Professional
 * Microsoft Windows XP Media Center Edition
 * Microsoft Windows XP Tablet PC Edition

-





SUMMARY
This article lists the updates that are included on the Microsoft Windows Security Update CD (February 2004).



Updates that are included on the Windows Security Update CD
The Windows Security Update CD includes critical updates for the following operating systems, software, and hardware.

Microsoft Windows XP
 Windows Security Advisor tool

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

828931 Frequently asked questions about the automated portion of the Microsoft Protect Your PC Web Site

 Windows XP Service Pack 1a (SP1a)

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

324720 List of bugs that are fixed in Windows XP Service Pack 1a

 The following Windows XP updates:  

823182 MS03-041: Vulnerability in authenticode verification could allow remote code execution

 

824105 MS03-034: Flaw in NetBIOS could lead to information disclosure

 

825119 MS03-044: Buffer overrun in Windows Help and Support Center could lead to system compromise

 

826939 Update Rollup 1 for Windows XP is available

</li> 

828035 MS03-043: Buffer overrun in Messenger service could allow code execution

</li> 

817787 MS03-017: Flaw in Windows Media Player skins downloading could allow code execution

</li> 

814078 MS03-008: Flaw in Windows script engine may allow code to run

</li> 

330994 MS03-014: April, 2003, cumulative patch for Outlook Express

</li> 

828750 MS03-040: October, 2003, cumulative patch for Internet Explorer

</li> 

819696 MS03-030: Unchecked buffer in DirectX could enable system compromise

</li></ul> </li> Microsoft DirectX 9.0b

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

819696 MS03-030: Unchecked buffer in DirectX could enable system compromise

</li> Microsoft Windows Media Player 9 Series</li></ul>

Microsoft Windows 2000
<ul> Windows 2000 Service Pack 4 (SP4)

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

327194 List of bugs that are fixed in Windows 2000 Service Pack 4

</li> The following Windows 2000 update: <ul> 

824146 MS03-039: A Buffer Overrun in RPCSS Could allow an attacker to run malicious programs

</li></ul> </li></ul>

Microsoft Windows Millennium Edition
<ul> Microsoft Internet Explorer 6 Service Pack 1 (SP1)

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

326489 List of issues fixed in Internet Explorer 6 service packs

</li> DirectX 9.0b

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

819696 MS03-030: Unchecked buffer in DirectX could enable system compromise

</li> Windows Media Player 9 Series</li> Microsoft Data Access Components (MDAC) 2.8

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

828396 Release manifest for MDAC 2.8 (2.80.1022.3)

</li> <li>The following Windows Millennium Edition updates: <ul> <li>

290700 Checkpoints that you create after September 8, 2001 do not restore your computer

</li> <li>

323172 MS02-048: Flaw in certificate enrollment control may cause digital certificates to be deleted

</li> <li>

323255 MS02-055: Unchecked buffer in Windows Help facility may allow attacker to run code

</li> <li>

329048 MS02-054: Unchecked buffer in file decompression functions may allow attacker to run code

</li> <li>

329115 MS02-050: Certificate validation flaw might permit identity spoofing

</li> <li>

330994 MS03-014: April, 2003, cumulative patch for Outlook Express

</li> <li>

811630 HTML Help update to limit functionality when it is invoked with the window.showHelp method

</li> <li>

812709 MS03-006: Security vulnerability in Windows Millennium Edition Help and Support Center may permit malicious code to run

</li> <li>

823559 MS03-023: Buffer overrun in the HTML converter could allow code execution

</li> <li>

825119 MS03-044: Buffer Overrun in Windows Help and Support Center could lead to system compromise

</li> <li>

273727 Denial of service possible on an IPX/SPX protocol using the name management port

</li> <li>

314757 Unchecked buffer in Universal Plug and Play can lead to system compromise for Windows Me

</li> <li>

273991 Patch available for &quot;Share Level Password&quot; vulnerability

</li> <li>

828026 Update for Windows Media Player URL script command behavior

</li> <li>

828750 MS03-040: October, 2003, cumulative patch for Internet Explorer

</li> <li>

814078 MS03-008: Flaw in Windows script engine may allow code to run

</li></ul> </li></ul>

Microsoft Windows 98 Second Edition
<ul> <li>Microsoft Internet Explorer 6 Service Pack 1

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

326489 List of issues fixed in Internet Explorer 6 service packs

</li> <li>DirectX 9.0b

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

819696 MS03-030: Unchecked buffer in DirectX could enable system compromise

</li> <li>Windows Media Player 9 Series</li> <li>Microsoft Data Access Components (MDAC) 2.8

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

828396 Release manifest for MDAC 2.8 (2.80.1022.3)

</li> <li>The following Windows 98 Second Edition updates: <ul> <li>

238453 Data in route pointer field can bypass source routing disable

</li> <li>

245729 Windows 95 and Windows 98 file access URL update

</li> <li>

256015 Fatal exception 0E with multiple MS-DOS device names in path

</li> <li>

259728 MS00-029: Windows hangs with fragmented IP datagrams

</li> <li>

273727 Denial of service possible on an IPX/SPX protocol using the name management port

</li> <li>

314147 MS02-006: An unchecked buffer in the SNMP service may allow code to run

</li> <li>

329048 MS02-054: Unchecked buffer in file decompression functions may allow attacker to run code

</li> <li>

249973 MS00-005: Default RTF file viewer interrupts normal program processing

</li> <li>

274548 Patch for &quot;HyperTerminal buffer overflow&quot; vulnerability in Windows 98, Windows Me

</li> <li>

323172 MS02-048: Flaw in certificate enrollment control may cause digital certificates to be deleted

</li> <li>

329115 MS02-050: Certificate validation flaw might permit identity spoofing

</li> <li>

811630 HTML Help update to limit functionality when it is invoked with the window.showHelp method

</li> <li>

823559 MS03-023: Buffer overrun in the HTML converter could allow code execution

</li> <li>

273991 Patch available for &quot;Share Level Password&quot; vulnerability

</li> <li>

314941 Unchecked buffer in Universal Plug and Play can lead to system compromise for Windows 98

</li> <li>

323255 MS02-055: Unchecked buffer in Windows Help facility may allow attacker to run code

</li> <li>

240163 Buffer overrun in Telnet in Windows 95/98 poses a security risk

</li> <li>

313829 Unchecked buffer in Windows shell could lead to code running

</li> <li>

330994 MS03-014: April, 2003, cumulative patch for Outlook Express

</li> <li>

828750 MS03-040: October, 2003, cumulative patch for Internet Explorer

</li> <li>

814078 MS03-008: Flaw in Windows script engine may allow code to run

</li> <li>

819639 MS03-021: A flaw in Windows Media Player may permit the Media Library to be accessed

</li></ul> </li></ul>

Windows 98
<ul> <li>Internet Explorer 6 Service Pack 1

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

326489 List of issues fixed in Internet Explorer 6 service packs

</li> <li>DirectX 9.0b

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

819696 MS03-030: Unchecked buffer in DirectX could enable system compromise

</li> <li>Media Player 7.1

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

299321 Description and availability of Windows Media Player 7.1

</li> <li>Windows 98 System Update

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

232972 Contents of the Microsoft Windows 98 system update

</li> <li>Microsoft Data Access Components (MDAC) 2.8

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

828396 Release manifest for MDAC 2.8 (2.80.1022.3)

</li> <li>Virtual Private Networking (VPN) update for Windows 98 and Dial-Up Networking 1.3

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

191540 VPN update for Windows 98 and Dial-Up Networking 1.3 Available

</li> <li>

168115 Malicious user with physical access to a computer can acquire cached domain password

</li> <li>

238453 Data in route pointer field can bypass source routing disable

</li> <li>

245729 Windows 95 and Windows 98 file access URL update

</li> <li>

256015 Fatal exception 0E with multiple MS-DOS device names in path

</li> <li>

259728 MS00-029: Windows hangs with fragmented IP datagrams

</li> <li>

273727 Denial of service possible on an IPX/SPX protocol using the name management port

</li> <li>

314147 MS02-006: An unchecked buffer in the SNMP service may allow code to run

</li> <li>

329048 MS02-054: Unchecked buffer in file decompression functions may allow attacker to run code

</li> <li>

249973 MS00-005: Default RTF file viewer interrupts normal program processing

</li> <li>

274548 Patch for &quot;HyperTerminal buffer overflow&quot; vulnerability in Windows 98, Windows Me

</li> <li>

323172 MS02-048: Flaw in certificate enrollment control may cause digital certificates to be deleted

</li> <li>

329115 MS02-050: Certificate validation flaw might permit identity spoofing

</li> <li>

811630 HTML Help update to limit functionality when it is invoked with the window.showHelp method

</li> <li>

823559 MS03-023: Buffer overrun in the HTML converter could allow code execution

</li> <li>

273991 Patch available for &quot;Share Level Password&quot; vulnerability

</li> <li>

314941 Unchecked buffer in Universal Plug and Play can lead to system compromise for Windows 98

</li> <li>

323255 MS02-055: Unchecked buffer in Windows Help facility may allow attacker to run code

</li> <li>

240163 Buffer overrun in Telnet in Windows 95/98 poses a security risk

</li> <li>

313829 Unchecked buffer in Windows shell could lead to code running

</li> <li>

330994 MS03-014: April, 2003, cumulative patch for Outlook Express

</li> <li>

828750 MS03-040: October, 2003, cumulative patch for Internet Explorer

</li> <li>

814078 MS03-008: Flaw in Windows script engine may allow code to run

</li> <li>

817787 MS03-017: Flaw in Windows Media Player skins downloading could allow code execution

</li> <li>

320920 MS02-032: Windows Media Player rollup available

</li></ul>

<div class="references_section">