[MERGED] More Windows Updates on 11th Jan

[nffc]

Just had this emailed by MS (I subscribe to Update email alerts)

On 11 January 2005 the Microsoft Security Response Center is planning to release:
- 3 Microsoft Security Bulletins affecting Microsoft Windows. The greatest maximum severity rating for these security updates is Critical. These security updates may require a restart.

Although we do not anticipate any changes, the number of bulletins, products affected, restart information and severities are subject to change until released.

At this time no additional information on these bulletins such as details regarding severity or details regarding the vulnerability will be made available until 11 January 2005.

Hmm...?

[Neil]

http://www.cableforum.co.uk/board/sh...ewpost&t=22235

[nffc]

Originally Posted by Neil

http://www.cableforum.co.uk/board/sh...ewpost&t=22235

And, it's tucked away as an off-topic post in a different forum with no hint.

I don't have time to read the whole forum...

[Raistlin]

Originally Posted by nffc

And, it's tucked away as an off-topic post in a different forum with no hint.

I don't have time to read the whole forum...

A situation not helped by the spate of Search problems that we've been experiencing lately

[MovedGoalPosts]

Oh rats, I just spent a few hours over Xmas making sure all the patching for the works PCs was up to date. Now I'll have to check them all again

[nffc]

Originally Posted by Raistlin

A situation not helped by the spate of Search problems that we've been experiencing lately

Yes, plus the fact that I felt it was worthy of its own topic anyway (despite not knowing it would be a duplicate).

Why do mods (on any forum) treat the posters as though it's some sort of kindergarten?

[Paul K]

From the January security bulletin
http://www.microsoft.com/technet/sec.../MS05-001.mspx

Impact of Vulnerability: Remote Code Execution
Maximum Severity Rating: Critical
Recommendation: Customers should apply the update immediately.

Caveats: Microsoft Knowledge Base Article 890175 documents the currently known issues that customers may experience when they install this security update. The article also documents recommended solutions for these issues.

Windows NT Server 4.0 and Windows NT 4.0 Terminal Server Edition are not affected by default. However, if you have installed Internet Explorer 6.0 Service Pack 1, which is the only supported version of Internet Explorer for Windows NT Server 4.0 and Windows NT 4.0 Terminal Server Edition, you will have the affected component on your system. An update is available for these configurations: see the download for Internet Explorer 6 Service Pack 1 under Affected Components.
Affected Software:
Microsoft Windows 2000 Service Pack 3 and Microsoft Windows 2000 Service Pack 4 †“ Download the update
Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2 †“ Download the update
Microsoft Windows XP 64-Bit Edition Service Pack 1 †“ Download the update
Microsoft Windows XP 64-Bit Edition Version 2003 †“Download the update
Microsoft Windows Server 2003 †“ Download the update
Microsoft Windows Server 2003 64-Bit Edition †“ Download the update
Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (Me) †“ Review the FAQ section of this bulletin for details about these operating systems.

[U]Non-Affected Software:[U]
Microsoft Windows NT Server 4.0 Service Pack 6a
Microsoft Windows NT Server 4.0 Terminal Server Edition Service Pack 6

http://www.microsoft.com/technet/sec.../MS05-002.mspx

Vulnerability in Cursor and Icon Format Handling Could Allow Remote Code Execution (891711)
Impact of Vulnerability: Remote Code Execution
Maximum Severity Rating: Critical
Recommendation: Customers should apply the update immediately.
Affected Software:
Microsoft Windows NT Server 4.0 Service Pack 6a †“ Download the update
Microsoft Windows NT Server 4.0 Terminal Server Edition Service Pack 6 †“ Download the update
Microsoft Windows 2000 Service Pack 3 and Microsoft Windows 2000 Service Pack 4 †“ Download the update
Microsoft Windows XP Service Pack 1 †“ Download the update
Microsoft Windows XP 64-Bit Edition Service Pack 1 †“ Download the update
Microsoft Windows XP 64-Bit Edition Version 2003 †“ Download the update
Microsoft Windows Server 2003 †“ Download the update
Microsoft Windows Server 2003 64-Bit Edition †“ Download the update
Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (Me) †“ Review the FAQ section of this bulletin for details about these operating systems.

Non-Affected Software:
Microsoft Windows XP Service Pack 2

http://www.microsoft.com/technet/sec.../MS05-003.mspx

Microsoft Security Bulletin MS05-003
Vulnerability in the Indexing Service Could Allow Remote Code Execution (871250)
IImpact of Vulnerability: Remote Code Execution
Maximum Severity Rating: Important
Recommendation: Customers should consider applying the security update.
Tested Software and Security Update Download Locations:
Affected Software:

Microsoft Windows 2000 Service Pack 3 and Microsoft Windows 2000 Service Pack 4 †“ Download the update
Microsoft Windows XP Service Pack 1 †“ Download the update
Microsoft Windows XP 64-Bit Edition Service Pack 1 †“ Download the update
Microsoft Windows XP 64-Bit Edition Version 2003 †“ Download the update
Microsoft Windows Server 2003 †“ Download the update
Microsoft Windows Server 2003 64-Bit Edition †“ Download the update

Non-Affected Software:

Microsoft Windows NT Server 4.0 Service Pack
Microsoft Windows NT Server 4.0 Terminal Server Edition Service Pack 6
Microsoft Windows XP Service Pack 2
Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (ME)
Affected Components:
Indexing Service

[iadom]

Got the update for SP2, also downloaded a "Malicious software removal tool" , damned if I can find it on my system though.

Think it just runs the once.

[iadom]

Originally Posted by JohnHorb

Think it just runs the once.

Guess there was nothing to remove then, now there's a surprise,

[MadGamer]

Originally Posted by Paul

From the January security bulletin
http://www.microsoft.com/technet/sec.../MS05-001.mspx

http://www.microsoft.com/technet/sec.../MS05-002.mspx

http://www.microsoft.com/technet/sec.../MS05-003.mspx

Links dont work for me.

[iadom]

Originally Posted by Wayne A

Links dont work for me.

I just used Windows Update on IE Tools.

[Paul K]

Strange all 3 mspx links work here, they launch the appropiate microsoft technet artical where you can find the relevant link to the correct download for different operating systems affected.

[nffc]

I "called it"

http://www.cableforum.co.uk/board/sh...ad.php?t=22281

[Paul K]

Originally Posted by nffc

I "called it"

http://www.cableforum.co.uk/board/sh...ad.php?t=22281

Having read your comments on the thread you have pointed to I'm very close to laughing out loud at the moment All I was doing was putting the complete information which is now available up for people in case any of the patches were relevant to them, it's wholey likely that this thread will be merged into that one (in the same way that the anti-spyware and malware removal tool threads were)and all the information will be in one thread.
by the way, the mods don't treat posters on the forum like a kindergarden they just prefer not to have loads of duplicated threads sitting in different areas of the board. The number of moved and merged threads will point to that, unnecessary duplications of threads/ posts etc just increases the ammount of information the database has to hold and search through.