XMLHTTP
Control Can Allow Access to Local Files - Updated 22/2/2002.
Incorrect
VBScript Handling in IE can Allow Web Pages to Read Local Files -
Updated 22/2/2002.
Unsafe
Functions in Office Web Components - Updated 21/8/2002.
Internet
Explorer 6 Service Pack 1 - Updated 9/9/2002.
Default
Permissions could Allow Trojan Horse Program - See FAQ for details -
Updated 31/10/2002.
Flaw
in Microsoft VM could enable System Compromise - Updated 13/12/2002.
Windows
Media Player 9 Series - Updated 9/03/2003.
Internet
Explorer Connectivity Certificate Display Issues - Updated
23/3/2003.
Hardware-Created
ASF Files Stop Playing in Media Player 9 Series - Updated 27/3/2003.
Cumulative
Update for Outlook Express - Updated 23/4/2003.
L2TP/IPSec
NAT-T Update - Note; this can cause internet connection problems -
Updated 24/5/2003.
Windows
Media Player 9 Series Video may freeze in a Multiple Monitor scenario
- Updated 7/6/2003.
Flaw
In Windows Media Player May Allow Media Library Access - Updated
28/06/2003.
Buffer
Overrun in the HTML Converter Could Allow Code Execution - Updated
10/7/2003.
Windows
Media Player 9 Series Downloads Radio Preset Information - Updated
11/7/2003.
Error
Message: "Internet Explorer Cannot Download a File" -
Updated 15/7/2003.
DirectX
9.0b - Updated 26/7/2003.
Microsoft
Data Access Components (MDAC) 2.8
- Updated 8/8/2003.
Driver
Installation Program Does Not Install Device Drivers
- Updated 17/08/2003.
Sun
Microsystems Java Runtime Environment (JRE) 1.4.2 - Updated
17/8/2003.
Flaw
in NetBIOS Could Lead to Information Disclosure -
Updated 03/09/2003.
Flaw
in Visual Basic for Applications Could Allow Arbitrary Code Execution
- Updated 03/09/2003.
Buffer
Overrun In RPCSS Service Could Allow Code Execution
- Updated 10/09/2003.
FIX:
Slight delay when WMP 9 Series switches files streamed from a Windows
Media Services 9 Series Server - Updated 17/09/2003.
Windows
Media Player Script Command Patch - Updated
4/10/2003.
Vulnerability
in Authenticode Verification Could Allow Remote Code Execution
- Updated 16/10/2003.
Buffer
Overflow in Windows Troubleshooter ActiveX Control Could Allow Code
Execution - Updated 29/10/2003.
Buffer
Overrun in Messenger Service Could Allow Code Execution
- Updated 29/10/2003.
Buffer
Overrun in Windows Help Support
Center Could Lead to System Compromise - Updated
16/10/2003.
Buffer
Overrun in the ListBox in the ComboBox
Control Could Allow Code Execution - Updated
29/10/2003.
Jet
4.0 Service Pack 8 - Updated
16/10/2003.
Certificate
Validation Flaw Could Enable Identity Spoofing -
Updated 11/11/2003.
Buffer
Overrun in the Workstation Service Could Allow Code Execution -
Updated 11/11/2003.
Buffer
Overrun in MDAC Function - Updated 14/1/2004.
Cumulative
Patch for Internet Explorer - Updated 8/2/2004.
XMLHTTP
call fails for URLs with embedded user credentials
- Updated 8/2/2004.
ASN.1
Vulnerability Could Allow Code Execution - Updated
12/02/2004.
Some
URL script commands do not work - Updated
29/02/2004.
Back to Top
Windows Millennium Edition
"Share
Level Password" vulnerability - Updated 23/10/2000.
"Malformed
IPX NMPI Packet" vulnerability - Updated 23/10/2000.
"WebTV
for Windows Denial of Service" vulnerability - Only needed if
Web TV for Windows is installed - Updated 23/10/2000.
IDE
Hard Drive Cache Package - Updated 26/3/2003.
"Incomplete
TCP/IP Packet" vulnerability - Updated 26/3/2003.
Windows
Me Help Support update - Updated 5/12/2001.
"Web
Client NTLM Authentication" vulnerability - Updated 26/8/2001.
Visual
Basic 6 SP5 Runtime files - Updated 3/3/2001.
Erroneous
VeriSign-Issued Digital Certificates Pose Spoofing Hazard - Updated
29/8/2001.
WebDAV
Service Provider Can Allow Scripts to Levy Requests as User - Updated
19/4/2001.
"HyperTerminal
Buffer Overflow" vulnerability - Only needed if HyperTerminal
is installed - Updated 27/5/2001.
Checkpoints
That You Create After September 8, 2001 Do Not Restore Your Computer
- Updated 26/8/2001.
Root
Certificates Update - Updated 1/9/2001.
Windows
Installer 2.0 - Updated 29/9/2001.
Invalid
Universal Plug and Play Request can Disrupt System Operation - Updated
14/11/2001
Windows
Media Player .ASF Processor Contains Unchecked Buffer - Updated
9/3/2002.
Unchecked
Buffer in Universal Plug and Play can Lead to System Compromise -
Updated 21/12/2001.
XMLHTTP
Control Can Allow Access to Local Files - Updated 22/2/2002.
Incorrect
VBScript Handling in IE can Allow Web Pages to Read Local Files -
Updated 22/2/2002.
Unsafe
Functions in Office Web Components - Updated 21/8/2002.
Flaw
in Certificate Enrollment Control could Allow Deletion of Digital
Certificates - Updated 29/8/2002.
Certificate
Validation Flaw could enable Identity Spoofing - Updated
21/6/2003.
Internet
Explorer 6 Service Pack 1 - Updated 9/9/2002.
Unchecked
Buffer in File Decompression Functions could Lead to code execution
- Updated 3/10/2002.
Unchecked
Buffer in Windows Help Facility could enable code execution - Updated
3/10/2002.
Flaw
in Microsoft VM could enable System Compromise - Updated 13/12/2002.
HTML
Help Update to Limit Functionality when invoked with Window.showHelp( )
Method - Updated 6/2/2003.
Cannot
Access MSN E-mail or Authenticate with a Web Site - Updated 13/2/2003.
Flaw
in Help Support Center could enable code execution - Updated
26/2/2003.
Windows
Media Player 9 Series - Updated 9/3/2003.
Flaw
in Windows Script Engine May Allow code to Run - Updated 19/3/2003.
Hardware-Created
ASF Files Stop Playing in Media Player 9 Series - Updated 27/3/2003.
Flaw
in Microsoft VM could enable system compromise - Updated 9/4/2003.
Cumulative
Update for Outlook Express - Updated 23/4/2003.
Windows
Media Player 9 Series Video may freeze in a Multiple Monitor scenario
- Updated 7/6/2003.
Flaw
In Windows Media Player May Allow Media Library Access - Updated
28/06/2003.
Buffer
Overrun in the HTML Converter Could Allow Code Execution - Updated
10/7/2003.
Windows
Media Player 9 Series Downloads Radio Preset Information - Updated
11/7/2003.
Error
Message: "Internet Explorer Cannot Download a File" -
Updated 15/7/2003.
DirectX
9.0b - Updated 26/7/2003.
Microsoft
Data Access Components (MDAC) 2.8
- Updated 8/8/2003.
Sun
Microsystems Java Runtime Environment (JRE) 1.4.2 - Updated
17/8/2003.
Flaw
in Visual Basic for Applications Could Allow Arbitrary Code Execution
- Updated 03/09/2003.
FIX:
Slight delay when WMP 9 Series switches files streamed from a Windows
Media Services 9 Series Server - Updated 17/09/2003.
Windows
Media Player Script Command Patch - Updated
4/10/2003.
Buffer
Overrun in Windows Help Support
Center Could Lead to System Compromise - Updated
16/10/2003.
Buffer
Overrun in MDAC Function - Updated 14/1/2004.
Jet
4.0 Service Pack 8 - Updated
14/1/2004.
Cumulative
Patch for Internet Explorer - Updated 8/2/2004.
XMLHTTP
call fails for URLs with embedded user credentials
- Updated 8/2/2004.
Some
URL script commands do not work - Updated
29/02/2004.
Back to Top
Windows 98 Second Edition
Windows
98 Second Edition Shutdown Supplement - Updated 23/10/2001.
DCOM
1.3 - Updated 8/8/2001.
"Malformed
Telnet Argument" vulnerability - Updated 23/10/2001.
"File
Access URL" vulnerability - Updated 29/8/2001.
"Spoofed
Route Pointer" "Fragmented IGMP Packet"
vulnerability - Updated 23/10/2001.
Windows
98 Large IDE Update - Updated 23/10/2001.
Windows
98 Second Edition 1394 Storage Supplement - Updated 29/8/2001.
"Malformed
RTF Control Word" vulnerability - Updated 29/8/2001.
"DOS
Device in Path Name" vulnerability - Updated 23/10/2001.
"IP
Fragment Reassembly" vulnerability - Updated 29/8/2001.
Windows
98 Second Edition Mapped Drives Shutdown Update - Updated 27/2/2002.
"Share
Level Password" vulnerability - Updated 23/10/2001.
"Malformed
IPX NMPI Packet" vulnerability - Updated 23/10/2001.
"WebTV
for Windows Denial of Service" vulnerability - Only required if
Web TV for Windows is installed - Updated 23/10/2001.
IDE
Hard Drive Cache Package - Updated 26/3/2003.
"Incomplete
TCP/IP Packet" vulnerability - Workaround only - Updated
27/2/2003.
Visual
Basic 6 SP5 Runtime files - Updated 3/3/2001.
Erroneous
VeriSign-Issued Digital Certificates Pose Spoofing Hazard - Updated
29/8/2001.
WebDAV
Service Provider Can Allow Scripts to Levy Requests as User - Updated
19/4/2001.
Dial-Up
Networking 1.4 - Updated 19/5/2001.
“HyperTerminal
Buffer Overflow” vulnerability - Only need if HyperTerminal is
installed - Updated 29/8/2001.
Root
Certificates Update - Updated 1/9/2001.
Windows
Installer 2.0 - Updated 29/9/2001.
Windows
Media Player .ASF Processor contains Unchecked Buffer - Updated
9/3/2002.
Unchecked
Buffer in Universal Plug Play can lead to System Compromise -
Updated 21/12/2001.
XMLHTTP
Control can allow access to Local Files - Updated 22/2/2002.
Incorrect
VBScript Handling in IE can allow Web Pages to read Local Files -
Updated 22/2/2002.
Fatal
Exception 0E with Multiple MS-DOS Device Names in Path - Updated
30/3/2002.
Unchecked
Buffer in Windows Shell could lead to code execution - Updated
18/4/2002.
Non-PCM
wave formats update - Updated 21/4/2002.
Unchecked
Buffer in SNMP Service could enable Arbitrary code to be run - Updated
26/4/2002.
Unsafe
Functions in Office Web Components - Updated 21/8/2002.
Flaw
in Certificate Enrollment Control could allow deletion of Digital
Certificates - Updated 29/8/2002.
Certificate
Validation Flaw could enable Identity Spoofing - Patch updated
21/11/2002.
Internet
Explorer 6 Service Pack 1 - Updated 9/9/2002.
Flaw
in Microsoft VM JDBC Classes could allow code execution - Updated
19/9/2002.
Unchecked
Buffer in Windows Help Facility could enable code execution - Updated
3/10/2002.
HTML
Help Update to Limit Functionality When Invoked with Window.showHelp( )
Method - Updated 6/2/2003.
Cannot
Access MSN E-mail or Authenticate with a Web Site - Updated 13/2/2003.
Windows
Media Player 9 Series - Updated 9/3/2003.
Flaw
in Windows Script Engine May Allow code to Run - Updated 19/3/2003.
Hardware-Created
ASF Files Stop Playing in Media Player 9 Series - Updated 27/3/2003.
Flaw
in Microsoft VM could enable system compromise - Updated 9/4/2003.
Cumulative
Update for Outlook Express - Updated 23/4/2003.
Windows
Media Player 9 Series Video may freeze in a Multiple Monitor scenario
- Updated 7/6/2003.
Flaw
In Windows Media Player May Allow Media Library Access - Updated
28/06/2003.
Buffer
Overrun in the HTML Converter Could Allow Code Execution - Updated
10/7/2003.
Windows
Media Player 9 Series Downloads Radio Preset Information - Updated
11/7/2003.
Error
Message: "Internet Explorer Cannot Download a File" -
Updated 15/7/2003.
DirectX
9.0b - Updated 26/7/2003.
Microsoft
Data Access Components (MDAC) 2.8
- Updated 8/8/2003.
Sun
Microsystems Java Runtime Environment (JRE) 1.4.2 - Updated
17/8/2003.
Flaw
in Visual Basic for Applications Could Allow Arbitrary Code Execution
- Updated 03/09/2003.
FIX:
Slight delay when WMP 9 Series switches files streamed from a Windows
Media Services 9 Series Server - Updated 17/09/2003.
Buffer
Overrun in MDAC Function - Updated 14/1/2004.
Jet
4.0 Service Pack 8 - Updated
14/1/2004.
Cumulative
Patch for Internet Explorer - Updated 8/2/2004.
XMLHTTP
call fails for URLs with embedded user credentials
- Updated 8/2/2004.
Back to Top
