main

Cumulative Security Update for Internet Explorer (MS04-025)

Tom Warren   on 30 July 2004 - 18:52 · 24 comments & 1886 views

Advertisement (Why?)
This update resolves several newly discovered public vulnerabilities. Each vulnerability is documented in this bulletin in its own Vulnerability Details section.

If a user is logged on with administrative privileges, an attacker who successfully exploited the most severe of these vulnerabilities could take complete control of an affected system, including installing programs; viewing, changing, or deleting data; or creating new accounts with full privileges. Users whose accounts are configured to have fewer privileges on the system would be at less risk than users who operate with administrative privileges.

Microsoft recommends that customers apply the update immediately.

Download: Internet Explorer 6 SP1 | Windows Server 2003 Internet Explorer 6 SP1
View: Microsoft Security Bulletin MS04-025
News source: Microsoft Support


Although much of the session will be about the game's creation, Martin will apply lessons learnt during its development to current and future projects. He will touch on his experiences since quitting Rare and setting up Cambridge-based developer Zoonami, and focus on ways in which game creators can excel in design and gameplay.

EDF is a TIGA event, supported and actively marketed by many of TIGA's partner associations, including APOM in France, GAME in Germany as well as the Dutch and Danish trade bodies. EDF's International Programme Consultant is Jennifer Olsen, the influential former editor of Game Developer magazine in the USA, while EDF's European Programme Consultant is Fred Gill of Gusto Games.

"My aim is to help others through my own experience," says Martin Hollis, founder of Zoonami, currently developing the revolutionary rhythm-action game, Funkydilla. "And as this is the first time I have ever discussed the development of GoldenEye 007 in such a public forum, I hope to offer delegates inspiration and advice which will result in better games from us all."

"This is a real coup for the European Developers' Forum," adds Fred Hasson, CEO of TIGA. "Martin is one of this country's most respected yet elusive developers and his presence at EDF illustrates that it is the only conference of its type to receive such support from the length and breadth of the industry. I'm sure, like so many of the sessions we have organised, it will be something not to be missed."


EDF is open to all developers. A full list of speakers and details on the entire programme can be found at www.europeandevelopersforum.co.uk


Dice says: The EDF sounds like an excellent event for the gaming industry. Speaches, games, trading, making of goldeneye 007, game stars live, 5 day exhibition for gaming...can't get any better. :D We will keep you updated as the EDF nears down and during the event.

Post a comment · Send to friend Comments · There are 24 additional comments
(5 replies) #1 shihchiun on 30 Jul 2004 - 18:55
why is it that none of these updates are available on windows update? how do they expect average people to keep their systems up to date if they don't know something needs patching?
#1.1 falconnian on 30 Jul 2004 - 18:58
Agreed.
#1.2 Joe User 99 on 30 Jul 2004 - 19:13
Running XP SP2? :

Prerequisites
To install the Internet Explorer 6 Service Pack 1 (SP1) versions of this update, you must be running Internet Explorer 6 SP1 (version 6.00.2800.1106) on one of the following versions of Windows:

• Microsoft Windows 98

• Microsoft Windows 98 Second Edition (SE)

• Microsoft Windows Millennium Edition (Me)

• Microsoft Windows NT® Workstation 4.0 Service Pack 6a

• Microsoft Windows NT Server 4.0 Service Pack 6a

• Microsoft Windows NT Server 4.0 Terminal Server Edition, Service Pack 6

• Microsoft Windows 2000 Service Pack 2, Service Pack 3, Service Pack 4

• Microsoft Windows XP

• Microsoft Windows XP Service Pack 1


• Microsoft Windows XP 64-Bit Edition, Service Pack 1


Note Versions of Windows and versions of Internet Explorer that are not listed in this article are no longer supported or not affected. Microsoft recommends that you upgrade to a supported version of Windows and of Internet Explorer, and then apply the appropriate update.


Don't think it applies to SP2...but don't quote me on that.
#1.3 arantius on 30 Jul 2004 - 20:05
When I read the article, the download is for "KB867801."
When I visit windows update, I see an available update with that same code.
It is in windows update.
#1.4 shao on 30 Jul 2004 - 20:31
last time i checked xp service pack 2 wasn't released, and therefore not supported through the normal means.

other than that, i thought this was gonna be released on monday, according to my nda premier support update, must've got my dates mixed up.
#1.5 shihchiun on 31 Jul 2004 - 01:56
yeah, it's there now...
(2 replies) #2 sumeet on 30 Jul 2004 - 18:57
OMG FIREFOX IS TEH 1337!!!!!!!!!!`11111111111



heh i bet some people are gonna say that
#2.1 Sn1p3t on 30 Jul 2004 - 19:51
Yeah. You just did.
#2.2 Mean Mr Mustard on 31 Jul 2004 - 02:43
Yeah, the odds on that bet sucked!!!
#3 Joe User 99 on 30 Jul 2004 - 19:02
Everyone might want to notice this:

Caveats: This update does not include hotfixes for Internet Explorer provided since the release of MS04-004. Customers who have received hotfixes from Microsoft or their support providers since the release of MS04-004 should review the FAQ section for this update to determine how this update might impact their operating systems.

which leads to:

For all operating systems besides Microsoft Windows Server 2003 or Microsoft Windows 64-Bit Edition Version 2003, most hotfixes created after MS04-004 are not included in this security update. Installing this security update will remove these hotfixes from the system. An update rollup is available that contains these hotfixes as well as fixes for all the security issues addressed in this update. For more information on what hotfixes are not included in this security update but that are included in the update rollup, as well as instructions on how to obtain and deploy the update rollup, contact your Microsoft support provider or review Microsoft Knowledge Base Article 871260.

Which leads to:

An update rollup is available for Internet Explorer versions 5.x and 6.0

Which leads to it's own updates.

I won't bother posting those links, you can grab those from the KB article.



#4 SSRules on 30 Jul 2004 - 19:08
I just saw this on WU about 15 minutes ago before it was posted...
#5 dreamthief on 30 Jul 2004 - 19:09
no idea what you guys are talking bout not being available in Windowsupdate. It is inside there.
#6 Ficman on 30 Jul 2004 - 19:42
I just ran it off of WU site... 2.8mb patch, how many patches is IE up to now?

(2 replies) #7 Angry_Badger on 30 Jul 2004 - 19:46
The question is does it fix this?

http://www.asan19.dsl.pipex.com/ie/Crash.htm

Edit: Just tested it, the answer is a definate no.

/goes back to happily using firefox

Last edited by 48352 on 30 Jul 2004 - 19:54
#7.1 OptiPlex on 30 Jul 2004 - 20:33
dang!
#7.2 virtorio on 31 Jul 2004 - 00:34
Thats just crazy.
#8 dmbandfan22 on 30 Jul 2004 - 19:53
Can't find it on WUv5.
(1 reply) #9 Mister Lamar on 30 Jul 2004 - 19:54
its not showing up for SP2
#9.1 virtorio on 31 Jul 2004 - 00:35
I don't think SP2 is affected.
#10 ravenkiller on 30 Jul 2004 - 20:52
MS04-025 - IE 5.5 SP2 on W2K unsupported :-( but it does install :-)

Is there anyway to test to see if it works?
#11 naap51stang on 30 Jul 2004 - 22:20
The only use I found for IE6 was the internet update site, but I since use autopatcher, and get the
updates (at the time autopatcher is written) that way. I quit using IE over a year ago. Not so much because I don't like IE, but because of the ability of other browsers to allow ME to customize the browser the way I want to.

(1 reply) #12 eilegz on 30 Jul 2004 - 23:02
using firefox but still have to patch IE



23 patches after sp1 and still cant get it right theres too much patches that theres no place for it in my about window -_-U

http://www.iespana.es/eilegz/ie_patches.jpg
#12.1 Mean Mr Mustard on 31 Jul 2004 - 02:45
Yeah, But at least MS saw fit to get this issue taken care of sooner, rather than later.
#13 STV on 31 Jul 2004 - 04:22
can someone please tell what the bad part about this is? lets say that from the moment that this security kick started, to now, they didnt patch anything. what would you say?

would you say, "wow, no patches, gee they are really serious about security."
or
"damn microsoft isnt serious about security, that whole thing was all talk."

i bet that most of you would still blame microsoft.

now, since they have been finding a whole bunch of security holes and patching them, does this mean that their security kick isnt serious? at least they are trying to fix their problems and releasing patches for these problems. stop complaining and grow up.

STV

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)