Microsoft Critical Update 814078

I downloaded from Windows Update the following critical update

814078: Security Update (Microsoft Jscript version 5.1, Windows 98 and Windows NT 4.0)

After the installation and reboot if found that it had removed the Visual Basic Scripting Support component from IE 5.5. The only way I could replace it was to reinstall Windows Scripting 5.6 which in turn removed the 814078 security update.

I found out it was removed when on some web pages I got a "Install on Demand" popup box telling me that VB Script Support needed to be downloaded to display the page properly. It would not download as the MS Update needs it to display, so went the reinstall of the 5.6 Scripting.

Anyone else having this problem and is there a solution. I have sent MS a request for support so if they come back with anything I will pass it along.

Admin: If you think this should be under Windows 98 forum please move.

 

I found out it was removed when on some web pages I got a "Install on Demand" popup box telling me that VB Script Support needed to be downloaded to display the page properly. It would not download as the MS Update needs it to display, so went the reinstall of the 5.6 Scripting.
----------------------------------------------------------
John
Post the site
Though I have win me --

Lonny
EDIT------------------------------
I just wanted to compare results,, I have applied all up's and don't have same problem,,win me original OS,,maybe you didn't have 5.6 beforehand.

No need to reply it would defeat purpose of post,get to long, wait and see if any others with win 98 have same mmm problem.

You do have windows up as trusted I hope. its the only site I set as such. permanently anyway.
Regards
Lonny

 

Lonny, don't quite follow you, what site do you want me to post?

The sites I got the Install on Demand box on were the Windows Update Site, just before the "Scan your computer" then it wouldn't scan and when I went into Yahoo Mail. (let me into the mail tho'). Also got it on another site that I have a list of Mutual Funds on, also let me into this site.

 

Has anyone encountered a hit to memory/speed after installing 814078?

Details here http://discuss.pcmag.com/pcmag/messages/?msg=20882.1

Regards - Charles

 

Followup

I got an answer back from MS, well really a non-answer as I have an OEM Windows 98 install and they won't talk to me unless I drop money in their pockets. (I guess that's how Bill does so well)

In MS's e-mail they referred me to several Knowledge Base sites and newsgroups which I looked at. Apparently the problem is quite universal. At a quick glance, it seems that the update is for Windows Scripting 5.1 and if you have 5.6 installed it removes the scripting engine. MS knows about it and is apparently "working on a fix "

So, for the time being, if you have Scripting 5.6 don't install the 814078 update!!!!

If you have installed it and lost your VB Scripting Support, reinstall Windows Scripting 5.6. You can get the install file from Here . Be sure to select the download for your operating system.

 

Thanks.

 

Just checked the Windows Update and I notice that the 814078 update for Windows 98 has been removed. (This is the Windows Scripting 5.1 security patch that has been causing all the trouble lately.) Apparently a fix is due out around April 2. We shall see!!

 

For what it's worth, IE5.5 installs WSH 5.5 which includes 5.5 versions of jscript.dll and vbscript.dll so with IE5.5 you should have at least jscript 5.5 installed... not sure why Windows Update would have installed the 5.1 version of the jscript patch!

I ran across this issue (Windows Script and IE versions) with the vbscript patch - see MS02-009 http://www.microsoft.com/technet/security/bulletin/ms02-009.asp

In any case since you now have Windows Script 5.6 installed you may be able to MANUALLY install the Jscript 5.6 patch since the
Windows Script 5.6 download page says that Windows Script 5.6 ... "will install Microsoft® Windows® Script containing Visual Basic® Script Edition (VBScript.) Version 5.6, JScript® Version 5.6, Windows Script Components, Windows Script Host 5.6, and Windows Script Runtime Version 5.6. "

You may also need the vbs5.6 patch mentioned in MS02-009

Check your versions of vbscript.dll and jscript.dll to see which patches you need.

By the way I've decided NOT to install this update, at least for now.

 

Hi Alice and thanks for the info. I do have the updated jscript.dll and vbscript.dll files installed so should be OK. I also have the patch in MS02-009 installed. In any event all seems to be working OK at the moment so for now "if it ain't broke, don't fix it ".

 

Hi John,

I guess I was unsure what version of Windows Script you originally had, since IE5.5 came with version 5.5 and you said that you REinstalled Windows Script 5.6. This is from MS02-009

So, if you actually upgraded from WSH 5.5 to 5.6 then you might also need the updated version of vbscript.dll, which would be the one for IE6, version
5.6.0.7302 - see http://support.microsoft.com/default.aspx?scid=kb;en-us;Q318089&SD=MSKB&#IE6

 

With Microsoft, it seems that everything is very confusing, and dangerous. Patches for one thing messes up something else.

Think I'll just stick with what I've got. IE5.5SP2. It seems to work just fine.

 

Thanks again Alice. I just download the updated vbscript.dll from the link you posted. It actually installed an even newer version 5.6.0.7426. All seems to be working OK. No "Install on Demand" requests so far.

Well I guess that goes to show you "if it ain't broke you can still fix it "!!! I think that is something like mflynn's slogan

 

You're right, I was giving you the file version for the ORIGINAL vbscript.dll patch. The REVISED patch gives you the following, from http://support.microsoft.com/default.aspx?scid=kb;en-us;Q318089&SD=MSKB&#IE6 ( same link I posted before)

 

Well here's my problem:


My jscript.dll is 5.0.0.3715--I havent seen anyone with that low of a number.

I don't see a download that would be compatible for my specific Jscript

If I had the following Jscript.dll I would chance it.

5.1

5.5

And of course the 5.6.

And if you download one of the above jscripts you " "may" get the new Jscript.dll 5.6.0.8513.

Judging from all the confusion about this issue --I think I'll just keep what I have--To me it's just not worth risking a BSOD--

I'll just continue to keep my Secutity Active scripting set on disabled/and or prompt.That should give me some protection from E mail and a malicious web site.

win98se

jess

 

Since IE5.01 installs Windows Script 5.1 by default, you MAY be running a very old version of Internet Explorer! That would be very risky as far as security issues go.

What is your IE version? If you are running Win98 or above you might want to consider installing IE6 SP1 (IE5.5 SP2, I've gathered, is no longer available from Microsoft). At the very least you should be running IE 5.01 SP2 See http://www.microsoft.com/windows/ie/downloads/archive/default.asp

 

Alice thanks for your reply and the link.

Yes, you are absolutely correct.

I have IE 5.0 ( to be exact the numbers are 5.00.2614.3500)

I have never updated any microsoft patches or critical updates. Everything seems to be working Ok--And I figured that ole axiom " If it aint broke don't fix it " LOL

I have set my active scripting on prompt and have set my windows scripting host (WSH) unchecked (disabled)

Reason: I thought I read somewhere that microsoft had stopped supporting WIn 98.

I would love to hear your feed back on this--As I'm sure my attitude is all wrong on this issue'

" We fear that of which we have no knowledge" author -unknown

Again Alice--thanks

 

I also tend to follow the axiom " If it aint broke don't fix it " EXCEPT for Windows and Internet Explorer security updates! These fall under the category of preventive medicine. You wouldn't want to wait until you get sick to "fix" something like polio, smallpox or other diseases if you can get a vaccine, now would you?

Windows 98 is still being supported, as far as I know, until June 2003? A Windows 98 user could give you more on that.

I have Win95B but as you can see by my signature I've gone as far as I can with Microsoft...which is IE5.5sp2. Windows Update no longer has anything for WIN95... I have to get my updates manually! Except for the Feb 2003 IE cumulative update and the Jscript update, I'm pretty much caught up. I decided after reading about the problems with these last two updates, to stop updating IE. My reasoning there is, if Microsoft breaks something for Win95 users they are "out of luck ", especially if Win98 is listed as the minimum platform!

My "main" browser is Mozilla 1.0.1 and my husband was the IE user. He also used Outlook Express, so I made sure I had the preview pane disabled, OE set to open in the Restricted Sites zone, my antivius updated and running in the background, and Symantec's "noscript.exe" set to disable the Windows Script Host - see
http://www.symantec.com/avcenter/venc/data/win.script.hosting.html

My husband recently got his own computer (Macintosh!) so I no longer have the need to constantly update IE. If I were you, I would either:
- get IE6 SP1 and go to Windows Update and get all your critical updates
OR
- get a non-Microsoft browser, for example, Netscape 7.02. Head on over to the Netscape forum and read up!

 

Maybe I'm missing something here but 810847 is a cumulative patch that includes a fix for the scripting thing.

I haven't tried it on any 9X systems but it does fine on all the NT versions.

 

Thanks Alice and Newt:

Heres another one thats shows illustrations
if you ever need to reinstall your WSH.

http://members.aol.com/pattyoh105/vb_wsh_a.htm

 

Hi Newt,

I guess this thread is a little hard to follow, and I did get a little far afield.

It began with JohnB mentioning a flaw in the Jscript patch, MS03-008 : Flaw in Windows Script Engine could allow code execution (814078) which resulted in some Win98 folks being offered the 5.1 version on Windows Update, when they had 5.6 installed and needed the 5.6 version. The result of installing 5.1 over 5.6 was a loss of Visual Basic Scripting support! The "fix" for that was to reinstall Windows Script 5.6, which installs all the scripting components, including vbscript.dll... however, the "original" 5.6 version should then be patched. That's what JJohnB did.

810847 is MS03-004: the February, 2003, Cumulative Patch for Internet Explorer which can only be installed on certain versions of IE. The lowest IE version for Win98 that can be patvched with MS03-004 would be IE5.5sp2. It doesn't include any vbscript or jscript updates (as ar as I know!).

The scripting updates for jscript.dll and vbscript.dll are included in MS03-008 (March 2003) and MS02-009 (Feb 2002, revised March 2002). Both of these patches require at least Windows Script version 5.1

By the way, all the current bulletins are listed at http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/current.asp

Since Jess had an older vbscript.dll version (5.0) He was not able to apply ANY off these patches.. not the IE patch OR the scriipting patches! I guess he could have installed the Windows Script 5.6 update and then the vbscript.dll and jscript.dll updates but my thinking was... why do that, when your IE version is so old! Better to update IE and then get ALL the patches. Either that or get another browser