Security patches

Microsoft Help lists 2 "critical" security patches (dated
1/ll/05) for Windows ME, but fails to tell how they can be
downloaded. Links are provided for other Operating
Systems, but not for ME. Suggestions?

The two hotfix articles both refer home users to
http://www.microsoft.com/technet/sec.../ms05-jan.mspx and this
says how to get the patches and this is the same as it has been ever since
the launch of Win Me, that is, the Windows Update site. The same is true
of the two security bulletins: MS05-001 and MS05-002 (both linked from the
KB articles listed below)..

There does however seem to be a problem in that one of the patches
(891711) does not yet seem to be available.

For more details see KB890175 - "MS05-001: Vulnerability in HTML Help
could allow code execution" (http://support.microsoft.com/?kbid=890175).
Note that update 811630 (see KB811630 - "HTML Help Update to Limit
Functionality When It Is Invoked with the window.showHelp( ) Method"
(http://support.microsoft.com/?kbid=811630) should be installed prior to
installing the later 890175 update.

Also KB891711 - "MS05-002: Vulnerability in cursor and icon format
handling could allow remote code execution"
(http://support.microsoft.com/?kbid=891711).

See also "Windows Security Updates Summary for January 2005"
(http://www.microsoft.com/security/bu...1_windows.mspx)
--
Mike Maltby MS-MVP



rink66 wrote:

Microsoft Help lists 2 "critical" security patches (dated
1/ll/05) for Windows ME, but fails to tell how they can be
downloaded. Links are provided for other Operating
Systems, but not for ME. Suggestions?

Thanks for your prompt reply. But I am still mystrified.
The Update site offers 2 links: to download the latest IE
version (I use IE6), and to download for other browsers. I
find no hint for users of IE6. Still, I clicked the 2nd
download link for other browers, & entered KB811630, then
just 811630. I came up empty! The article for 811630
offers no download site either. If this is truly a
"critical patch", when is it so difficult to find?
Suggestions?
-----Original Message-----
The two hotfix articles both refer home users to
http://www.microsoft.com/technet/sec.../ms05-jan.mspx
and this
says how to get the patches and this is the same as it has
been ever since
the launch of Win Me, that is, the Windows Update site.
The same is true
of the two security bulletins: MS05-001 and MS05-002 (both
linked from the
KB articles listed below)..

There does however seem to be a problem in that one of the
patches
(891711) does not yet seem to be available.

For more details see KB890175 - "MS05-001: Vulnerability
in HTML Help
could allow code execution"
(http://support.microsoft.com/?kbid=890175).
Note that update 811630 (see KB811630 - "HTML Help Update
to Limit
Functionality When It Is Invoked with the window.showHelp(
) Method"
(http://support.microsoft.com/?kbid=811630) should be
installed prior to
installing the later 890175 update.

Also KB891711 - "MS05-002: Vulnerability in cursor and
icon format
handling could allow remote code execution"
(http://support.microsoft.com/?kbid=891711).

See also "Windows Security Updates Summary for January 2005"
(http://www.microsoft.com/security/bu...1_windows.mspx)
--
Mike Maltby MS-MVP



rink66 wrote:

Microsoft Help lists 2 "critical" security patches (dated
1/ll/05) for Windows ME, but fails to tell how they can be
downloaded. Links are provided for other Operating
Systems, but not for ME. Suggestions?

.

IE6 is not supported. The only versions of IE supported on Win Me are
IE5.5 SP2 and IE6 SP1. What version are you running? Click Help | About
in IE and check what it says. What critical updates are you offered when
visiting the Windows Update site? If you are running IE6 then you need to
upgrade first to IE6 SP1 after which you will then be offered any required
patches.

Is it possible that at some time you reinstalled Win Me over itself having
previously upgraded to IE 6 or IE6 SP1? If so then reinstalling Win Me
will have reinstalled IE5.5 with the result that you now have a what is
best described as version soup.

Regards,
--
Mike Maltby MS-MVP




wrote:

Thanks for your prompt reply. But I am still mystrified.
The Update site offers 2 links: to download the latest IE
version (I use IE6), and to download for other browsers. I
find no hint for users of IE6. Still, I clicked the 2nd
download link for other browers, & entered KB811630, then
just 811630. I came up empty! The article for 811630
offers no download site either. If this is truly a
"critical patch", when is it so difficult to find?
Suggestions?