Microsoft VM3805 Patch

Here we go again!

Microsoft Security Bulletin MS02-052: Flaw in Java VM JDBC Classes Could Allow Code Execution (Q329077)
http://www.microsoft.com/technet/security/bulletin/ms02-052.asp

Looks like this time, Microsoft is just patching, not issuing a new Virtual Machine, but you need to have VM3805 installed before you can apply the patch

I guess "More than 3805" means that you've already applied the patch?? (3805 is the build I have installed)

I checked Windows Update just now and the patch isn't there yet.

For those who don't have at least build 3805 of the Microsoft VM installed, I would suggest installing it as soon as possible so you will be ready to install the patch....or, you could get Sun's Java to use in Internet Explorer:

http://java.sun.com/getjava/

 

Confused

Hi Alice

I'm by no means the sharpest knife in the drawer.
I went to Microsoft update page and was told I needed the above patch (Q329077).
I did the Command\Jview and it shows I have ver. 5.00.3805.
If I have the correct ver. why then am I being told I need it?
Should I download it anyway?

Thanks for the help.

mopar.

 

Confused before???

I thaught I was confused before.
My computer just checked for updates and reported that the above update should be installed. It also told me I should have ver. 3805 before I update

Well, If I have ver 3805 why should I update?

mopar.

 

I would say it is because it is to patch a flaw in that version.

 

markp62

If this is so, should I not have a somewhat different version? Before I did the update I had ver. 5.00.3805 and the same ver. after the update.

mopar.

 

I have the same version also. The patch was only one file, guess they thought there is no reason to add a number to it.

 

markp62

Thanks for your input. Guess I'll forget about it.

Thanks again

mopar.

 

mopar,

Micorosft seems to have confused the issue when they mentioned that seeing "More than 3805 " with a JVIEW meant you didn't need the patch, if after applying the Q329077patch you still see build 3805!

As for myself, I have ver 3805 so I know I need the patch, but WindowsUpdate doesn't have it for me! I just checked again, with the Microsoft VM enabled in my Advanced options.

I'm never sure in Win95 whether any more updates will be offered me through WindowsUpdate. Mostly I have to download from alternate sites.

A week or two ago Windows Update was telling me I needed the March 4 2002 Critical Update which IS the VM 3805 (it was telling someone else here on the board the same thing) and now that update has disappeared and I show nothing under Critical Updates.

Oh well. I UNchecked the Microsort VM "JIT Compiler for Virtual Machine" in Tools Internet Options Advanced and checked off the Sun Java option right above it for the time being. I guess I'll reenable Microsoft's VM from time to time and check back at Windows Update. Having Win95 is a pain sometimes.

 

As a result of a PM I received, I looked for Q329077 on the MS Knowledge base, and found:
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q329077
MS02-052: Flaw in Microsoft VM JDBC Classes Might Permit Code to Be Run
which says:

That's why JVIEW still shows 3805 for you, after applying the patch. The only place showing the patch was installed would be the registry.

The same thing happened to me way back when I installed another VM "patch" to VM3309, Security Update, August 25, 2000 (version 5,0,3314,0). Jview still showed the old VM version 5.00.3309 but the registry showed 3314.

 

Alice-- "As for myself, I have ver 3805 so I know I need the patch, but WindowsUpdate doesn't have it for me! "
I installed the patch. Before I did, I read More Info, and it says that the patch is for Win95 as well as all the other later Windows. Yes, it really said Win95.
Your first post in this thread says "I checked Windows Update just now ", so it seems you are able to access Windows Update, or do I misunderstand why you cannot get the update?
Unfortunately, I cannot send the patch to you, since it automatically installs after downloading and never creates a file to be executed.

 

Hi Jim,

The problem is that I can get to Windows update but it doesn't list the patch. There is nothing at all listed under Critical Updates.

I did a groups .google search and found that others are wondering why Win95 users can't download the patch:
=============copy/paste=====================
From: Sandi - Microsoft MVP (sandi_hardmeier@mvps.org)
Subject: Re: Security update MS02-52
Newsgroups: microsoft.public.msn.discussion
Date: 2002-09-19 20:06:03 PST

"...winston" <merlin@druid9#.com> wrote in
news:OQeuM8EYCHA.1432@tkmsftngp10:

> Any idea why this hasn't been made available in a non Windows Update
> download..there are millions of JVM 3805 and less running on IE5x(the
> source of the earlier flawed Jvm) with Win95 installed..
>

No idea.

=============end copy/paste=================

 

Q329077: Security Update
163 KB/ Download Time: < 1 min This update resolves the "Java Applet" vulnerabilities in Microsoft virtual machine (Microsoft VM).

Q329077: Security Update - version 5,0,3807,0 - was successfully installed. 5:46:06 PM Thursday, September 19, 2002 : 5710

I installed this patch for WIN98SE from Windows Update yesterday but I can't find any other place for you to obtain it! Wish I could help.

June

 

Hi June,

I'm almost certain WindowsUpdate is no longer offering new updates for Win95 users - only existing ones. I even checked http://corporate.windowsupdate.microsoft.com/en/default.asp but that site's been retired since March 2002. So, unless I can find a download for the patch, I'll have to stick with Sun's Java for Internet Explorer.

Doesn't bother me really, since Mozilla 1.0.1 is my maiin browser and that uses Sun's Java. My next preference is Netscape 4.79 which gives you the choice of Sun's Java or it's own built-in version. IE is the only browser that uses the Micorosft VM .

My husband uses IE5.5sp2 and he prefers the Microsoft VM for his Yahoo card games because it loads up faster than Sun's Java

I guess he'll just have to suffer

 

Well, I found a place to download the patch, but whether I want to install it is another matter since Sun's Java seems to be working out (Apparently it was the old 1.3.1 version on Netscape 4.79 that hubby didn't care for. Sun's 1.4. version seems to be OK)

Anyway, I downloaded vm-sfix3.exe which is the VM3805 patch. Supposedly there is only one patch for all versions of Windows. I found the link here:
http://www.burtonsys.com/virus_advice.html#windows

I also found a direct windowsupdate download that appears to be the same file (both are 167,768 bytes, same information in Properties):

=======copy/paste==========
Subject: Re: MS02-052
Newsgroups: microsoft.public.security
Date: 2002-09-23 11:28:02 PST

"Bill Sanderson" <bill_NoSpamSanderson@msn.com> buzzed in and said:

http://www.download.windowsupdate.c..._5629DC64B1B233AE49BB601DCC41336F8E723EEE.exe

Or http://tinyurl.com/1lh0 with no URL wrap. =)

========end copy/paste============

 

When I installed this patch I monitored the installation with Norton and this is what was installed:

Program Installed: CU MS02-052
Date Installed: 5:45 PM on 9/19/02

File 'C:\WINDOWS\JAVA\CLASSES\MSJDBC.CER' added.
File 'C:\WINDOWS\JAVA\CLASSES\MSJDBC.ZIP' added.
File 'C:\WINDOWS\JAVA\CLASSES\OSP.ZIP' added.
File 'C:\WINDOWS\SYSTEM.DAT' updated.
File 'E:\Temporary Internet Files\Content.IE5\6PQ9SBUD\25_0x00000409_eula[1].htm' added.
File 'E:\Temporary Internet Files\Content.IE5\6PQ9SBUD\basket[1].htm' added.
File 'E:\Temporary Internet Files\Content.IE5\6PQ9SBUD\HNav[2].htm' added.
File 'E:\Temporary Internet Files\Content.IE5\7Z9A2L45\button-arrow-back[1].jpg' added.
File 'E:\Temporary Internet Files\Content.IE5\7Z9A2L45\eula[1].htm' added.
File 'E:\Temporary Internet Files\Content.IE5\GXMFW527\big-hand[1].png' added.
File 'E:\Temporary Internet Files\Content.IE5\GXMFW527\HNav[2].htm' added.
File 'E:\Temporary Internet Files\Content.IE5\XN7RL8DL\button_back_large[1].gif' added.
File 'E:\Temporary Internet Files\Content.IE5\XN7RL8DL\psuccess[1].htm' added.

13 items, occupying 5,772,288 bytes

This may help you decide whether or not you want to install the patch.

June

 

Hi June,

Thanks for the information.

What I'm going to do is leave well enough alone and continue with Sun's Java in IE unless ann until I have a good enough reason to switch back to Microsoft's VM and install the patch!

I think it's horrible of Microsoft to make it so difficult for Win95 users, and even other users who for whatever reason have problems with Windows update, particularly since the Microsoft VM cannot be uninstalled and it's a security issue!

 

Update

I just installed the VM3805 Patch from http://ftp.uni-stuttgart.de/pub/systems/winxp/fixes/security-bulletins/usa/vm-sfix3.exe since my husband complained that the Sun Java froze up the machine on his card game site. I don't know whether or not Sun's Java was to blame but to keep hubby happy I took the chance

After running the file (with antivirus turned off) and rebooting I checked my registry -see http://support.microsoft.com/default.aspx?scid=kb;en-us;Q329077 - and I show "Version "= "5,00,3807,0" in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{DBB3C81D-3C91-4a1e-BDDF-905B61C7CEDF} so the patch worked.

I'm glad that's done with.