1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

MS Security Bulletin--Dec 14

Discussion in 'Malware and Virus Removal Archive' started by Welshjim, 2004/12/14.

Thread Status:
Not open for further replies.
  1. 2004/12/14
    Welshjim

    Welshjim Inactive Thread Starter

    Joined:
    2002/01/07
    Messages:
    5,643
    Likes Received:
    0
    I received my monthly notification from MS and went to Windows Update to see what was offered. Sure enough, three of those listed in the Bulletin came up, but so did one other, and it was identified as "Critical ". (All the rest were merely "Security" Updates.)
    The one that did not come up for me is the revision to MS04-040 (MSKB 889293) and does not apply to WinXP SP2.
    The MYSTERY Critical Update was designated as KB886185 without any link to a Security Bulletin number (MS04-xxx) or site. Searches at MS and Google produced no info.

    EDIT--I have learned more. 886185 is a fix for Windows Firewall.
    Quote from MS
    "Critical Update for Windows XP (KB886185)
    Date last published: 12/14/2004
    Download size: 384 KB
    This update helps narrow the definition of the My network, or local subnet, restriction option in the Windows Firewall. This is helpful in situations where the Windows Firewall would consider a large network to be on the local subnet because of how the dial-up software configured the route tables. After you install this item, you may have to restart your computer.
    System Requirements
    Recommended CPU: Not specified.
    Recommended memory: Not specified.
    Recommended hard disk space: Not specified.
    How to Uninstall
    This software update can be removed via Add or Remove Programs in Control Panel.
    Help and support
    http://go.microsoft.com/fwlink/?linkid=36671&clcid=0x409 "

    So there are really five December Updates, rather than the four as announced in the MS Security Bulletin email.
    Or maybe even six. As I was typing this another, revised Security Bulletin email arrived, announcing an update to Security Bulletin MS04-028, which was called Critical. Not clear whether it applies to my PC (it deals with the GDI+ vulnerability), though I am not offered it at Windows Update.
     
    Last edited: 2004/12/14
    Welshjim,
    #1
  2. 2004/12/15
    Christer

    Christer Geek Member Staff

    Joined:
    2002/12/17
    Messages:
    6,585
    Likes Received:
    74
    Jim,
    I was prompted to install four critical, KB873339, KB885835, KB885836 and KB886185 plus one recommended, KB887797.

    (I use Automatic Update to get notification, Windows Update to check for non-critical and then go to the download site to get what I need.)

    I believe that's an old one, KB885884. XP SP2 is not vulnerable to the GDIplus thingie but they take You on a run to Office Update, regardless if Office is installed or not.

    Christer
     
    Christer,
    #2


  3. to hide this advert.

  4. 2004/12/15
    charlesvar

    charlesvar Inactive Alumni

    Joined:
    2002/02/18
    Messages:
    7,024
    Likes Received:
    0
    Hi Jim,

    Same experience as Christer - not working on my system at the moment, this is a pro system. The update blurb did identify what KB886185 was for.

    Regards - Charles
     
    charlesvar,
    #3
  5. 2004/12/15
    Welshjim

    Welshjim Inactive Thread Starter

    Joined:
    2002/01/07
    Messages:
    5,643
    Likes Received:
    0
    It turns out that there were at least eight updates offered yesterday. Only half apply to WinXP SP2. Here is the list
    KB886185 No MS04-# or published MSKB article yet
    KB833987 MS04-028 (revised)
    KB889293 MS04-040
    KB885836 MS04-041
    KB885249 MS04-042
    KB873339 MS04-043
    KB883835 MS04-044
    KB870763 MS04-045
    Info on the last six is available here
    http://www.microsoft.com/technet/security/bulletin/ms04-dec.mspx
    and you have my explanation of the other two.

    Christer mentions an additional one, KB887797. I am not offered that one by WinUpdate. It has to do with Outlook Express. There also is no information on what it does.
    http://www.microsoft.com/downloads/...8b-69b0-4813-9856-a1a3da675baf&displaylang=en
    Wonder why I am not offered that. Maybe I have Outlook Express SP2?? (I have never understood whether getting WinXP SP2 meant you also installed IE and OE SP2 or whether they stayed at SP1.)
     
    Last edited: 2004/12/15
    Welshjim,
    #4
  6. 2004/12/16
    Hugh Jarss

    Hugh Jarss Inactive

    Joined:
    2002/07/22
    Messages:
    908
    Likes Received:
    6
    886185

    taken from here

    best wishes, HJ
     
    Last edited: 2004/12/16
    Hugh Jarss,
    #5
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...