Re: KB918899 (MS06-042) Known Issues section updated today (15 Aug)

http://support.microsoft.com/?kbid=918899 was updated again today (22 Aug-06):

<QP>
Known Issues

On August 15, 2006, Microsoft announced that it will release a new version
of security update 918899 (MS06-042) on August 22, 2006. This new version
was to address this problem for customers who use Internet Explorer 6
Service Pack 1. Because of an issue that was discovered in final testing,
Microsoft will not release the new version of security update 918899 on
August 22, 2006. Microsoft will release this update for Internet Explorer 6
Service Pack 1 when it meets an appropriate level of quality for broad
distribution.

Microsoft is also aware of public reports that this issue could lead to a
buffer overrun condition for customers who use Internet Explorer 6 Service
Pack 1 and who have applied security update 918899. We are not aware of
attacks that try to use the reported vulnerability at this point, nor are we
aware of customer impact at this point. Microsoft is aggressively
investigating the public reports.
</QP>

cf. http://www.securityfocus.com/news/11408
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE, Shell/User, Security), Aumha.org VSOP, DTS-L.org

<snip>
> > "PA Bear" <PABearMVP@xxxxxxxxx> wrote in message
> > news:uvIIiYOwGHA.4756@xxxxxxxxxxxxxxxxxxxxxxx
> > > X-post to IE General, IE6 Browser & Windows Update newsgroups.
> > > Followup-To set for Windows Update newsgroup.
> > >
> > > <QP>
> > > A new version of security update 918899 is currently in development
> > > and will be released to all Microsoft Internet Explorer 6 Service
> > > Pack 1 customers by August 22, 2006. The new update will be
> > > available on the Microsoft Download Center and by using Windows
> > > Update. Customers who are using any version of Internet Explorer
> > > other than Internet Explorer 6 Service Pack 1 together with any
> > > Windows version are not affected by this release and do not have to
> > > take any action. We recommend that customers who are not
> > > experiencing this issue continue to deploy security update 918899
> > > in their environments to receive protection from the
> > > vulnerabilities that are documented in security bulletin MS06-042.
> > > Customers who experience this issue should apply the new security
> > > update when it is available. Customers who want to avoid the issue
> > > before the new security update is available may apply hotfix
> > > 923762. </QP>
> > > Source: MS06-042: Cumulative security update for Internet Explorer
> > > http://support.microsoft.com/?kbid=918899

.

Relevant Pages

  • Recent posting by Microsoft into the newsgroups....
    ... "Microsoft is investigating new public reports of a possible vulnerability ... Microsoft is working with customers to ensure their information is ... lock icon in the lower right corner of the Internet Explorer window. ... use a JScript command to verify the URL or use the History pane in Internet ...
    (NT-Bugtraq)
  • Re: Trouble with 893066 patch?? Then read 898060
    ... Microsoft updated this bulletin today to advise customers that we plan to re-release the MS05-019 security update in June, ... Customers in the U.S. and Canada can receive technical support from Microsoft Product Support Services at 1-866-PCSAFETY. ...
    (microsoft.public.windowsupdate)
  • Latest update MS04-40
    ... As usual I am confused by Microsoft I have diligently applied ... This update may not include hotfixes that have been released ... The most recent security bulletin and Internet Explorer ... Is that hotfix included in this Security Update? ...
    (microsoft.public.windowsupdate)
  • Re: KB918899 (MS06-042) Known Issues section updated again today (22 Aug-06)
    ... Followup-To set for Windows Update newsgroup. ... Cumulative security update for Internet Explorer ... On August 15, 2006, Microsoft announced that it will release a new version ...
    (microsoft.public.windowsupdate)
  • Re: KB918899 (MS06-042) Known Issues section updated today (15 Aug-06)
    ... IE crashes, although not as many. ... A new version of security update 918899 is currently in development and will ... be released to all Microsoft Internet Explorer 6 Service Pack 1 customers by ... Internet Explorer other than Internet Explorer 6 Service Pack 1 together ...
    (microsoft.public.windowsupdate)
Loading