RE: XP auto update problem



Problems in Windows Explorer or the Windows shell after you install security
update MS06-015
http://support.microsoft.com/default.aspx/kb/918165

Vulnerability in Windows Explorer Could Allow Remote Code Execution (908531)
http://www.microsoft.com/technet/security/bulletin/ms06-015.mspx

For those who have Hewlett Packard's Share to Web Software, there are two
registry patches to choose from (run either one or the other) not both:

Ottmar Freudenberger has made a patch available at:-
http://patch-info.de/WinXP/Downloads/KB908531_Share-To-Web.zip
(Note this is a Zip file and will need to be extracted. It contains a REG
file
which needs to be imported into the registry)
or
Kelly has made a patch available at:
http://www.kellys-korner-xp.com/xp_tweaks.htm
Line #383 - this is a vbs file and instructions on how to use such files are
at the top of the page.


See the post at Aumha.net
by Maurice N
MVP Windows - Shell / User

"Problems in Windows Explorer/ Windows shell due to 908531"
http://aumha.net/viewtopic.php?t=19125


If you uninstall the update see:
See section titled "Workaround for Windows shell vulnerability" under
Vulnerability Details:
http://www.microsoft.com/technet/security/Bulletin/MS06-015.mspx
Also you’ll need to check Automatic Updates and make sure that the update
isn’t automatically downloaded
See: - Configure Automatic Updating in Windows XP - 306525
http://support.microsoft.com/kb/306525


"DZung" wrote:

Yes the problem was on an HP notebook.

Will Microsoft put out a fixed update and how would I know? Would I find
this information on the the microsoft problem page you directed me to?

I want to avoid having to modify the registry.

Thanks.
Dzung



"Gav" wrote:

This is due to a clash with some HP software - have a look at:

http://support.microsoft.com/kb/918165

for the fix.

I had 36 PC's with this problem in my domain & the fix worked OK (after
dropping the 0x401 bit at the end of the key name for Windows 2000 PC's) -
should be OK as is for your XP box.

Luck.



"me" wrote:

Yes Microsoft knows about this, but hey why should they care? They are still
pushing out the update that causes this problem, even after a week of
hardship for their customers.

"DZung" wrote:

I had a problem with the auto updates last week april 13:

*Explorer: could not expand on +
*Word: could not Save or Save as

Used system resore to go back before the update and the problem went away.
Turned off auto update.

Questions:
How do I know if Micro Soft knows about and is addressing this problem?
How do I know if and when it is safe to turn on auto update?
Does system restore uninstall these updates?

Dzung

.



Relevant Pages

  • [NT] Unchecked Buffer in Windows Shell Could Enable System Compromise
    ... Beyond Security would like to welcome Tiscali World Online ... The Windows Shell is responsible for providing the basic framework of the ... Windows user interface experience. ... An attacker could seek to exploit this vulnerability by creating an .MP3 ...
    (Securiteam)
  • [NT] Unchecked Buffer in Windows Shell Could Enable System Compromise (XP)
    ... to promote the most advanced vulnerability assessment solutions today. ... The Windows shell is responsible for providing the basic framework of the ... Windows user interface experience. ... of the Windows shell that automatically reads and applies folder ...
    (Securiteam)
  • Re: explorer window failurer
    ... Problems in Windows Explorer or the Windows shell after you install security ... Revised - Vulnerability in Windows Explorer Could Allow Remote Code Execution ...
    (microsoft.public.windowsxp.accessibility)
  • Re: Latest Updates
    ... Problems in Windows Explorer or the Windows shell after you install security update MS06-015 ... photos without clicking on the actual photo. ...
    (microsoft.public.windowsupdate)
  • Re: Microsoft Word 2002
    ... Problems in Windows Explorer or the Windows shell after you install security ... Microsoft Security Bulletin MS06-015 ...
    (microsoft.public.windowsxp.help_and_support)