Article ID: 918456
Article Last Modified on 7/6/2007
APPLIES TO
- Microsoft Windows CE 5.0
SYMPTOMS
When you use Microsoft XML (MSXML) components in Microsoft Windows CE 5.0, you may experience the following security-related problems:
- A cross-site scripting vulnerability may occur.
- An MSXML component may enter an infinite loop.
- MSXML may crash.
RESOLUTION
Software update information
A supported software update is now available from Microsoft as Windows CE 5.0 Platform Builder Monthly Update (November 2006). You can confirm this by scrolling to the "File information" section of this article. The package file name contains the product version, date, Knowledge Base article number, and processor type. The package file name format is:
Product version-yymmdd-kbnnnnnn-processor type
For example: Wincepb50-060503-kb917590-armv4i.msi is the ARMV4i Windows CE 5.0 Platform Builder fix that is documented in KB article 917590 and that is contained in the May 2006 monthly update. To resolve this problem immediately, click the following article number for information about obtaining Windows CE Platform Builder and core operating system software updates:
837392 How to locate core operating system fixes for Microsoft Windows CE Platform Builder products
Prerequisites
This software update is supported only if all previously issued software updates for this product are also applied.
Restart requirement
After you apply this software update, you must perform a clean build of the whole platform. To clean the platform, click Clean on the Build menu. To build the platform, click Build Platform on the Build menu. You do not have to restart the computer after you apply this software update.
Software update replacement information
This software update does not replace any other software updates.
File information
The English version of this package has the file attributes (or later file attributes) that are listed in the following table.
| File name | File size | Date | Time |
|---|---|---|---|
| Wincepb50-061130-kb918456-armv4i.msi | 15,719,424 | 30-Nov-2006 | 20:52 |
| Wincepb50-061130-kb918456-mipsii.msi | 15,500,288 | 30-Nov-2006 | 20:52 |
| Wincepb50-061130-kb918456-mipsii_fp.msi | 15,512,576 | 30-Nov-2006 | 20:52 |
| Wincepb50-061130-kb918456-mipsiv.msi | 15,698,432 | 30-Nov-2006 | 20:52 |
| Wincepb50-061130-kb918456-mipsiv_fp.msi | 15,703,040 | 30-Nov-2006 | 20:52 |
| Wincepb50-061130-kb918456-sh4.msi | 14,916,608 | 30-Nov-2006 | 20:52 |
| Wincepb50-061130-kb918456-x86.msi | 12,264,448 | 30-Nov-2006 | 20:52 |
The English version of this software update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
| File name | File size | Date | Time | Path |
|---|---|---|---|---|
| Xmldom.lib | 9,023,798 | 16-Nov-2006 | 01:50 | public\ie\oak\lib\armv4i\debug |
| Xmlhttp.lib | 263,310 | 16-Nov-2006 | 01:50 | public\ie\oak\lib\armv4i\debug |
| Xmlislands.lib | 839,874 | 16-Nov-2006 | 01:50 | public\ie\oak\lib\armv4i\debug |
| Xmlmime.lib | 1,270,534 | 16-Nov-2006 | 01:50 | public\ie\oak\lib\armv4i\debug |
| Xmlminisax.lib | 3,895,414 | 16-Nov-2006 | 01:50 | public\ie\oak\lib\armv4i\debug |
| Xmlnetfull.lib | 199,090 | 16-Nov-2006 | 01:47 | public\ie\oak\lib\armv4i\debug |
| Xmlnetmini.lib | 106,292 | 16-Nov-2006 | 01:47 | public\ie\oak\lib\armv4i\debug |
| Xmlsax.lib | 2,602,116 | 16-Nov-2006 | 01:48 | public\ie\oak\lib\armv4i\debug |
| Xmlstubs.lib | 152,874 | 16-Nov-2006 | 01:50 | public\ie\oak\lib\armv4i\debug |
| Xmlxql.lib | 4,716,300 | 16-Nov-2006 | 01:50 | public\ie\oak\lib\armv4i\debug |
| Xmlxslt.lib | 4,523,052 | 16-Nov-2006 | 01:50 | public\ie\oak\lib\armv4i\debug |
| Xmldom.lib | 8,765,048 | 16-Nov-2006 | 01:46 | public\ie\oak\lib\armv4i\retail |
| Xmlhttp.lib | 242,060 | 16-Nov-2006 | 01:46 | public\ie\oak\lib\armv4i\retail |
| Xmlislands.lib | 817,616 | 16-Nov-2006 | 01:46 | public\ie\oak\lib\armv4i\retail |
| Xmlmime.lib | 1,254,906 | 16-Nov-2006 | 01:46 | public\ie\oak\lib\armv4i\retail |
| Xmlminisax.lib | 3,830,634 | 16-Nov-2006 | 01:46 | public\ie\oak\lib\armv4i\retail |
| Xmlnetfull.lib | 192,950 | 16-Nov-2006 | 01:43 | public\ie\oak\lib\armv4i\retail |
| Xmlnetmini.lib | 102,592 | 16-Nov-2006 | 01:43 | public\ie\oak\lib\armv4i\retail |
| Xmlsax.lib | 2,503,786 | 16-Nov-2006 | 01:45 | public\ie\oak\lib\armv4i\retail |
| Xmlstubs.lib | 159,826 | 16-Nov-2006 | 01:46 | public\ie\oak\lib\armv4i\retail |
| Xmlxql.lib | 4,603,570 | 16-Nov-2006 | 01:46 | public\ie\oak\lib\armv4i\retail |
| Xmlxslt.lib | 4,371,358 | 16-Nov-2006 | 01:46 | public\ie\oak\lib\armv4i\retail |
| Xmldom.lib | 9,176,552 | 16-Nov-2006 | 01:58 | public\ie\oak\lib\mipsii\debug |
| Xmlhttp.lib | 261,818 | 16-Nov-2006 | 01:57 | public\ie\oak\lib\mipsii\debug |
| Xmlislands.lib | 861,348 | 16-Nov-2006 | 01:58 | public\ie\oak\lib\mipsii\debug |
| Xmlmime.lib | 1,307,696 | 16-Nov-2006 | 01:57 | public\ie\oak\lib\mipsii\debug |
| Xmlminisax.lib | 3,927,874 | 16-Nov-2006 | 01:58 | public\ie\oak\lib\mipsii\debug |
| Xmlnetfull.lib | 203,276 | 16-Nov-2006 | 01:55 | public\ie\oak\lib\mipsii\debug |
| Xmlnetmini.lib | 109,048 | 16-Nov-2006 | 01:55 | public\ie\oak\lib\mipsii\debug |
| Xmlsax.lib | 2,646,826 | 16-Nov-2006 | 01:56 | public\ie\oak\lib\mipsii\debug |
| Xmlstubs.lib | 159,196 | 16-Nov-2006 | 01:57 | public\ie\oak\lib\mipsii\debug |
| Xmlxql.lib | 4,845,936 | 16-Nov-2006 | 01:58 | public\ie\oak\lib\mipsii\debug |
| Xmlxslt.lib | 4,623,136 | 16-Nov-2006 | 01:58 | public\ie\oak\lib\mipsii\debug |
| Xmldom.lib | 8,468,702 | 16-Nov-2006 | 01:54 | public\ie\oak\lib\mipsii\retail |
| Xmlhttp.lib | 245,504 | 16-Nov-2006 | 01:54 | public\ie\oak\lib\mipsii\retail |
| Xmlislands.lib | 789,278 | 16-Nov-2006 | 01:54 | public\ie\oak\lib\mipsii\retail |
| Xmlmime.lib | 1,146,632 | 16-Nov-2006 | 01:54 | public\ie\oak\lib\mipsii\retail |
| Xmlminisax.lib | 3,688,000 | 16-Nov-2006 | 01:54 | public\ie\oak\lib\mipsii\retail |
| Xmlnetfull.lib | 186,370 | 16-Nov-2006 | 01:51 | public\ie\oak\lib\mipsii\retail |
| Xmlnetmini.lib | 101,276 | 16-Nov-2006 | 01:51 | public\ie\oak\lib\mipsii\retail |
| Xmlsax.lib | 2,468,308 | 16-Nov-2006 | 01:52 | public\ie\oak\lib\mipsii\retail |
| Xmlstubs.lib | 135,684 | 16-Nov-2006 | 01:54 | public\ie\oak\lib\mipsii\retail |
| Xmlxql.lib | 4,281,392 | 16-Nov-2006 | 01:54 | public\ie\oak\lib\mipsii\retail |
| Xmlxslt.lib | 4,085,654 | 16-Nov-2006 | 01:54 | public\ie\oak\lib\mipsii\retail |
| Xmldom.lib | 9,179,396 | 16-Nov-2006 | 02:05 | public\ie\oak\lib\mipsii_fp\debug |
| Xmlhttp.lib | 261,830 | 16-Nov-2006 | 02:05 | public\ie\oak\lib\mipsii_fp\debug |
| Xmlislands.lib | 861,474 | 16-Nov-2006 | 02:05 | public\ie\oak\lib\mipsii_fp\debug |
| Xmlmime.lib | 1,307,812 | 16-Nov-2006 | 02:05 | public\ie\oak\lib\mipsii_fp\debug |
| Xmlminisax.lib | 3,930,128 | 16-Nov-2006 | 02:05 | public\ie\oak\lib\mipsii_fp\debug |
| Xmlnetfull.lib | 203,314 | 16-Nov-2006 | 02:03 | public\ie\oak\lib\mipsii_fp\debug |
| Xmlnetmini.lib | 109,074 | 16-Nov-2006 | 02:03 | public\ie\oak\lib\mipsii_fp\debug |
| Xmlsax.lib | 2,647,164 | 16-Nov-2006 | 02:03 | public\ie\oak\lib\mipsii_fp\debug |
| Xmlstubs.lib | 159,352 | 16-Nov-2006 | 02:05 | public\ie\oak\lib\mipsii_fp\debug |
| Xmlxql.lib | 4,845,944 | 16-Nov-2006 | 02:05 | public\ie\oak\lib\mipsii_fp\debug |
| Xmlxslt.lib | 4,624,514 | 16-Nov-2006 | 02:05 | public\ie\oak\lib\mipsii_fp\debug |
| Xmldom.lib | 8,473,322 | 16-Nov-2006 | 02:02 | public\ie\oak\lib\mipsii_fp\retail |
| Xmlhttp.lib | 245,518 | 16-Nov-2006 | 02:01 | public\ie\oak\lib\mipsii_fp\retail |
| Xmlislands.lib | 789,406 | 16-Nov-2006 | 02:02 | public\ie\oak\lib\mipsii_fp\retail |
| Xmlmime.lib | 1,146,750 | 16-Nov-2006 | 02:01 | public\ie\oak\lib\mipsii_fp\retail |
| Xmlminisax.lib | 3,692,168 | 16-Nov-2006 | 02:02 | public\ie\oak\lib\mipsii_fp\retail |
| Xmlnetfull.lib | 186,410 | 16-Nov-2006 | 01:59 | public\ie\oak\lib\mipsii_fp\retail |
| Xmlnetmini.lib | 101,302 | 16-Nov-2006 | 01:59 | public\ie\oak\lib\mipsii_fp\retail |
| Xmlsax.lib | 2,468,646 | 16-Nov-2006 | 02:00 | public\ie\oak\lib\mipsii_fp\retail |
| Xmlstubs.lib | 135,840 | 16-Nov-2006 | 02:01 | public\ie\oak\lib\mipsii_fp\retail |
| Xmlxql.lib | 4,280,832 | 16-Nov-2006 | 02:02 | public\ie\oak\lib\mipsii_fp\retail |
| Xmlxslt.lib | 4,087,156 | 16-Nov-2006 | 02:02 | public\ie\oak\lib\mipsii_fp\retail |
| Xmldom.lib | 9,281,750 | 16-Nov-2006 | 02:13 | public\ie\oak\lib\mipsiv\debug |
| Xmlhttp.lib | 264,922 | 16-Nov-2006 | 02:12 | public\ie\oak\lib\mipsiv\debug |
| Xmlislands.lib | 869,784 | 16-Nov-2006 | 02:13 | public\ie\oak\lib\mipsiv\debug |
| Xmlmime.lib | 1,321,480 | 16-Nov-2006 | 02:13 | public\ie\oak\lib\mipsiv\debug |
| Xmlminisax.lib | 3,972,746 | 16-Nov-2006 | 02:13 | public\ie\oak\lib\mipsiv\debug |
| Xmlnetfull.lib | 205,920 | 16-Nov-2006 | 02:10 | public\ie\oak\lib\mipsiv\debug |
| Xmlnetmini.lib | 110,512 | 16-Nov-2006 | 02:10 | public\ie\oak\lib\mipsiv\debug |
| Xmlsax.lib | 2,674,870 | 16-Nov-2006 | 02:11 | public\ie\oak\lib\mipsiv\debug |
| Xmlstubs.lib | 160,380 | 16-Nov-2006 | 02:13 | public\ie\oak\lib\mipsiv\debug |
| Xmlxql.lib | 4,888,370 | 16-Nov-2006 | 02:13 | public\ie\oak\lib\mipsiv\debug |
| Xmlxslt.lib | 4,664,750 | 16-Nov-2006 | 02:13 | public\ie\oak\lib\mipsiv\debug |
| Xmldom.lib | 8,504,340 | 16-Nov-2006 | 02:09 | public\ie\oak\lib\mipsiv\retail |
| Xmlhttp.lib | 245,968 | 16-Nov-2006 | 02:09 | public\ie\oak\lib\mipsiv\retail |
| Xmlislands.lib | 790,808 | 16-Nov-2006 | 02:09 | public\ie\oak\lib\mipsiv\retail |
| X mlmime.lib | 1,149,794 | 16-Nov-2006 | 02:09 | public\ie\oak\lib\mipsiv\retail |
| Xmlminisax.lib | 3,702,692 | 16-Nov-2006 | 02:09 | public\ie\oak\lib\mipsiv\retail |
| Xmlnetfull.lib | 187,016 | 16-Nov-2006 | 02:06 | public\ie\oak\lib\mipsiv\retail |
| Xmlnetmini.lib | 101,534 | 16-Nov-2006 | 02:06 | public\ie\oak\lib\mipsiv\retail |
| Xmlsax.lib | 2,472,396 | 16-Nov-2006 | 02:07 | public\ie\oak\lib\mipsiv\retail |
| Xmlstubs.lib | 135,880 | 16-Nov-2006 | 02:09 | public\ie\oak\lib\mipsiv\retail |
| Xmlxql.lib | 4,288,822 | 16-Nov-2006 | 02:09 | public\ie\oak\lib\mipsiv\retail |
| Xmlxslt.lib | 4,095,764 | 16-Nov-2006 | 02:09 | public\ie\oak\lib\mipsiv\retail |
| Xmldom.lib | 9,282,088 | 16-Nov-2006 | 02:21 | public\ie\oak\lib\mipsiv_fp\debug |
| Xmlhttp.lib | 264,934 | 16-Nov-2006 | 02:20 | public\ie\oak\lib\mipsiv_fp\debug |
| Xmlislands.lib | 869,910 | 16-Nov-2006 | 02:21 | public\ie\oak\lib\mipsiv_fp\debug |
| Xmlmime.lib | 1,321,596 | 16-Nov-2006 | 02:20 | public\ie\oak\lib\mipsiv_fp\debug |
| Xmlminisax.lib | 3,972,720 | 16-Nov-2006 | 02:21 | public\ie\oak\lib\mipsiv_fp\debug |
| Xmlnetfull.lib | 205,958 | 16-Nov-2006 | 02:18 | public\ie\oak\lib\mipsiv_fp\debug |
| Xmlnetmini.lib | 110,538 | 16-Nov-2006 | 02:18 | public\ie\oak\lib\mipsiv_fp\debug |
| Xmlsax.lib | 2,675,208 | 16-Nov-2006 | 02:19 | public\ie\oak\lib\mipsiv_fp\debug |
| Xmlstubs.lib | 160,528 | 16-Nov-2006 | 02:20 | public\ie\oak\lib\mipsiv_fp\debug |
| Xmlxql.lib | 4,887,546 | 16-Nov-2006 | 02:21 | public\ie\oak\lib\mipsiv_fp\debug |
| Xmlxslt.lib | 4,665,444 | 16-Nov-2006 | 02:21 | public\ie\oak\lib\mipsiv_fp\debug |
| Xmldom.lib | 8,504,900 | 16-Nov-2006 | 02:17 | public\ie\oak\lib\mipsiv_fp\retail |
| Xmlhttp.lib | 245,982 | 16-Nov-2006 | 02:17 | public\ie\oak\lib\mipsiv_fp\retail |
| Xmlislands.lib | 790,936 | 16-Nov-2006 | 02:17 | public\ie\oak\lib\mipsiv_fp\retail |
| Xmlmime.lib | 1,149,912 | 16-Nov-2006 | 02:17 | public\ie\oak\lib\mipsiv_fp\retail |
| Xmlminisax.lib | 3,702,794 | 16-Nov-2006 | 02:17 | public\ie\oak\lib\mipsiv_fp\retail |
| Xmlnetfull.lib | 187,056 | 16-Nov-2006 | 02:14 | public\ie\oak\lib\mipsiv_fp\retail |
| Xmlnetmini.lib | 101,560 | 16-Nov-2006 | 02:14 | public\ie\oak\lib\mipsiv_fp\retail |
| Xmlsax.lib | 2,472,734 | 16-Nov-2006 | 02:15 | public\ie\oak\lib\mipsiv_fp\retail |
| Xmlstubs.lib | 136,036 | 16-Nov-2006 | 02:17 | public\ie\oak\lib\mipsiv_fp\retail |
| Xmlxql.lib | 4,287,160 | 16-Nov-2006 | 02:17 | public\ie\oak\lib\mipsiv_fp\retail |
| Xmlxslt.lib | 4,096,488 | 16-Nov-2006 | 02:17 | public\ie\oak\lib\mipsiv_fp\retail |
| Xmldom.lib | 8,467,350 | 16-Nov-2006 | 01:42 | public\ie\oak\lib\sh4\debug |
| Xmlhttp.lib | 239,858 | 16-Nov-2006 | 01:42 | public\ie\oak\lib\sh4\debug |
| Xmlislands.lib | 799,924 | 16-Nov-2006 | 01:42 | public\ie\oak\lib\sh4\debug |
| Xmlmime.lib | 1,191,508 | 16-Nov-2006 | 01:42 | public\ie\oak\lib\sh4\debug |
| Xmlminisax.lib | 3,606,420 | 16-Nov-2006 | 01:42 | public\ie\oak\lib\sh4\debug |
| Xmlnetfull.lib | 185,826 | 16-Nov-2006 | 01:40 | public\ie\oak\lib\sh4\debug |
| Xmlnetmini.lib | 98,982 | 16-Nov-2006 | 01:40 | public\ie\oak\lib\sh4\debug |
| Xmlsax.lib | 2,456,654 | 16-Nov-2006 | 01:41 | public\ie\oak\lib\sh4\debug |
| Xmlstubs.lib | 146,598 | 16-Nov-2006 | 01:42 | public\ie\oak\lib\sh4\debug |
| Xmlxql.lib | 4,479,826 | 16-Nov-2006 | 01:42 | public\ie\oak\lib\sh4\debug |
| Xmlxslt.lib | 4,286,730 | 16-Nov-2006 | 01:42 | public\ie\oak\lib\sh4\debug |
| Xmldom.lib | 7,825,794 | 16-Nov-2006 | 01:39 | public\ie\oak\lib\sh4\retail |
| Xmlhttp.lib | 223,030 | 16-Nov-2006 | 01:38 | public\ie\oak\lib\sh4\retail |
| Xmlislands.lib | 727,266 | 16-Nov-2006 | 01:39 | public\ie\oak\lib\sh4\retail |
| Xmlmime.lib | 1,058,076 | 16-Nov-2006 | 01:39 | public\ie\oak\lib\sh4\retail |
| Xmlminisax.lib | 3,398,692 | 16-Nov-2006 | 01:39 | public\ie\oak\lib\sh4\retail |
| Xmlnetfull.lib | 171,448 | 16-Nov-2006 | 01:36 | public\ie\oak\lib\sh4\retail |
| Xmlnetmini.lib | 93,104 | 16-Nov-2006 | 01:36 | public\ie\oak\lib\sh4\retail |
| Xmlsax.lib | 2,267,028 | 16-Nov-2006 | 01:37 | public\ie\oak\lib\sh4\retail |
| Xmlstubs.lib | 128,038 | 16-Nov-2006 | 01:39 | public\ie\oak\lib\sh4\retail |
| Xmlxql.lib | 3,964,092 | 16-Nov-2006 | 01:39 | public\ie\oak\lib\sh4\retail |
| Xmlxslt.lib | 3,807,286 | 16-Nov-2006 | 01:39 | public\ie\oak\lib\sh4\retail |
| Xmldom.lib | 6,917,526 | 16-Nov-2006 | 01:35 | public\ie\oak\lib\x86\debug |
| Xmlhttp.lib | 198,272 | 16-Nov-2006 | 01:35 | public\ie\oak\lib\x86\debug |
| Xmlislands.lib | 635,044 | 16-Nov-2006 | 01:35 | public\ie\oak\lib\x86\debug |
| Xmlmime.lib | 981,856 | 16-Nov-2006 | 01:35 | public\ie\oak\lib\x86\debug |
| Xmlminisax.lib | 2,969,202 | 16-Nov-2006 | 01:35 | public\ie\oak\lib\x86\debug |
| Xmlnetfull.lib | 150,130 | 16-Nov-2006 | 01:33 | public\ie\oak\lib\x86\debug |
| Xmlnetmini.lib | 80,150 | 16-Nov-2006 | 01:33 | public\ie\oak\lib\x86\debug |
| Xmlsax.lib | 2,011,332 | 16-Nov-2006 | 01:33 | public\ie\oak\lib\x86\debug |
| Xmlstubs.lib | 120,760 | 16-Nov-2006 | 01:35 | public\ie\oak\lib\x86\debug |
| Xmlxql.lib | 3,519,980 | 16-Nov-2006 | 01:35 | public\ie\oak\lib\x86\debug |
| Xmlxslt.lib | 3,403,472 | 16-Nov-2006 | 01:35 | public\ie\oak\lib\x86\debug |
| Xmldom.lib | 7,360,688 | 16-Nov-2006 | 01:32 | public\ie\oak\lib\x86\retail |
| Xmlhttp.lib | 203,684 | 16-Nov-2006 | 01:31 | public\ie\oak\lib\x86\retail |
| Xmlislands.lib | 683,316 | 16-Nov-2006 | 01:32 | public\ie\oak\lib\x86\retail |
| Xmlmime.lib | 1,079,054 | 16-Nov-2006 | 01:32 | public\ie\oak\lib\x86\retail |
| Xmlminisax.lib | 3,269,010 | 16-Nov-2006 | 01:32 | public\ie\oak\lib\x86\retail |
| Xmlnetfull.lib | 168,838 | 16-Nov-2006 | 01:29 | public\ie\oak\lib\x86\retail |
| Xmlnetmini.lib | 90,246 | 16-Nov-2006 | 01:29 | public\ie\oak\lib\x86\retail |
| Xmlsax.lib | 2,088,632 | 16-Nov-2006 | 01:30 | public\ie\oak\lib\x86\retail |
| Xmlstubs.lib | 134,324 | 16-Nov-2006 | 01:32 | public\ie\oak\lib\x86\retail |
| Xmlxql.lib | 3,659,628 | 16-Nov-2006 | 01:32 | public\ie\oak\lib\x86\retail |
| Xmlxslt.lib | 3,610,216 | 16-Nov-2006 | 01:32 | public\ie\oak\lib\x86\retail |
STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
MORE INFORMATION
This Windows CE 5.0 software update resolves several security-related problems in MSXML components. These fixes were converted from the desktop Windows version of the MSXML code to the Windows CE 5.0 version.
REFERENCES
For more information about an MSXML security-related update for Windows CE .NET 4.2, click the following article number to view the article in the Microsoft Knowledge Base:
916644 FIX: Update for several MSXML security issues in Windows CE .NET 4.2
For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates
Keywords: kbpubtypekc kbqfe kbfix kbbug KB918456
