The Hotfix Depot

[Mocko2]

Microsoft .NET Framework 3.0 Final

x86:

http://download.microsoft.com/download/3/F...9/dotnetfx3.exe

x64:

http://download.microsoft.com/download/3/F...tnetfx3_x64.exe

[parkd1]

Microsoft Baseline Security Analyzer 2.0.1

MBSA 2.0.1 is an update to MBSA 2.0 to enable compatibility with the new Windows Update offline scan file. (For information on the new scan file, see http://support.microsoft.com/kb/926464.) This fix enables MBSA to download and read the new file format.

http://www.microsoft.com/technet/security/...s/mbsahome.mspx

[dkdk_it]

Microsoft Windows Defender 1.1.1593.0

x86:

http://www.microsoft.com/downloads/details...;DisplayLang=en

x64:

http://www.microsoft.com/downloads/details...;DisplayLang=en

[Mocko2]

Google Toolbar 4.0.1020.5070:

http://dl.google.com/toolbar/T4/data/en/bi...arInstaller.exe

[the_guy]

Microsoft .NET Framework 3.0 Final

x86:

http://download.microsoft.com/download/3/F...9/dotnetfx3.exe

x64:

http://download.microsoft.com/download/3/F...tnetfx3_x64.exe

This includes .Net 2, but it does NOT include 917283 and 922770.

the_guy

[dkdk_it]

Microsoft Security Advisory (927892)

Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution

Published: November 3, 2006

Microsoft is investigating public reports of a vulnerability in the XMLHTTP 4.0 ActiveX Control, part of Microsoft XML Core Services 4.0 on Windows. We are aware of limited attacks that are attempting to use the reported vulnerability.

Customers who are running Windows Server 2003 and Windows Server 2003 Service Pack 1 in their default configurations, with the Enhanced Security Configuration turned on, are not affected. Customers would need to visit an attacker?s Web site to be at risk. We will continue to investigate these public reports.

[xyz123]

WMP11 is updated!

And IESpell is 2.5.1 - it showed up in www.ieaddons.com RSS.

[ckit]

Sun Java 2 Standard Edition Runtime Environment 5.0 Update 10 on http://www.kaldata.com/

Not available on Sun Java VM homepage yet!

[dkdk_it]

KB920213: A security issue has been identified in MSAgent that could allow an attacker to compromise your Windows-based system and gain control over it. Download

Windows 2000 SP4 - Windows XP SP2 - Windows Server 2003

KB923789: Security issues have been identified in Macromedia Flash Player from Adobe that could allow an attacker to compromise a Windows-based system and gain control over it. Download:

Windows XP SP2

KB923980: A security issue has been identified that could allow an attacker to compromise your Windows-based system and gain control over it. Download:

Windows 2000 SP4 - Windows XP SP2 - Windows Server 2003

KB924270: A security issue has been identified that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. Download:

Windows 2000 SP4 - Windows XP SP2

[the_guy]

KB920213: A security issue has been identified in MSAgent that could allow an attacker to compromise your Windows-based system and gain control over it. Download

Windows 2000 SP4 - Windows XP SP2 - Windows Server 2003

Replaces MS05-032!

KB923789: Security issues have been identified in Macromedia Flash Player from Adobe that could allow an attacker to compromise a Windows-based system and gain control over it. Download:

Windows XP SP2

Replaced by Flash Player 7/8/9

KB923980: A security issue has been identified that could allow an attacker to compromise your Windows-based system and gain control over it. Download:

Windows 2000 SP4 - Windows XP SP2 - Windows Server 2003

Replaces MS05-046 on XP SP2 only!

KB924270: A security issue has been identified that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. Download:

Windows 2000 SP4 - Windows XP SP2

Replaces MS06-040!

Also, you're missing MS06-071, the MSXML Updates. These updates for MSXML4/6 replace MS06-061.

MSXML4 SP2

MSXML6 RTM

the_guy

[lia]

whats x86 & x64 ? i'm confused. pls help. how to know whether my system..???bit...pls help

[akaladis Veteran]

guys relax, i have already downloaded the patches. and you're missing an IE patch ;) KB922760 i believe!

http://www.microsoft.com/technet/security/...n/ms06-nov.mspx

[the_guy]

That's not affected on IE7. I guess we forgot it for Win2k.

the_guy

[dkdk_it]

Also, you're missing MS06-071, the MSXML Updates. These updates for MSXML4/6 replace MS06-061.

MSXML4 SP2

MSXML6 RTM

the_guy

Excuse me... :D

[dkdk_it]

whats x86 & x64 ? i'm confused. pls help. how to know whether my system..???bit...pls help

x86: for 32 bit OS

x64: for 64 bit OS

[the_guy]

Flash PLayer 9 updated to 9.0.28.0

the_guy

[akaladis Veteran]

I really don't see how we can include Internet Explorer 7.

Windows Media Player 11 of course is an other story, since you can install it the 'administrative way' (no fancy installer, just the usual hotfix installer). I'm not sure if Microsoft considers this to be illegal (there's no hacked/patched/whatever files involved).

[lia]

x86: for 32 bit OS

x64: for 64 bit OS

tq so much...but how to know my computer is 32 bit or 64 bit....pls

[PsiMoon314]

Hi,

I really don't see how we can include Internet Explorer 7.

Why?

You don't need hacked or patched files for IE7 either. The IEAK for IE7 produces a perfectly good installer which seems to be working well for me. I have such an installer in my own copy of APXP and it seems to be working fine, even when the PC is offline.

To be honest there was nothing really wrong with the standard IE7 installer however I was hoping that the IEAK would allow you to skip validation but I have not had the opportunity to test this aspect as yet.

The main issue is sorting out all of the other updates included within AP for IE6 and WMP 9/10 which are longer required when you install those newer versions. There is a lot of unticking of updates when you choose to install IE7 or WMP11.

If the WMP10 and it's updates had been placed in their own section, as I suggested some time ago, it would be a lot simpler to include WMP11 now.

For the record here are the install switches I am using:

WMP11: "Module:\wmp11-windowsxp-x86-enu.exe" /q:A /c:"setup_wm.exe /Q /R:N /P:#e /DisallowSystemRestore /SetWMPAsDefault"

and

IE7: Module:\IE7-WindowsXP-x86-enu.exe /passive /update-no /norestart

If you use the IEAK version of the IE7 installer this is switch-less as the options you wish to use are included in the installer itself.

I am still working on Windows Defender and applying it's updates to this following installation requires terminating some processes before they can be applied correctly.

Kind Regards

Simon

Edited November 15, 2006 by PsiMoon314

[xyz123]

Just for the record, KB922760 is only for MIE6 and NOT for WIE7. More information in this post on IEBlog: IE November 2006 Security Update Now Available.

[the_guy]

Just a heads up that MS06-030, in combination with MS06-070, replace MS04-044. A binary check will confirm this.

the_guy

[Mocko2]

Microsoft just silently updated IE7 on all editions on November 8:

http://go.microsoft.com/fwlink/?LinkId=74211

[xyz123]

Microsoft just silently updated IE7 on all editions on November 8:

http://go.microsoft.com/fwlink/?LinkId=74211

Could you give some more info? I tried googling and found nothing about it.

[Mocko2]

Could you give some more info? I tried googling and found nothing about it.

Not so much but if you take a look at digital signatures you will se November 8, for both IE7 and WMP11.

[PsiMoon314]

Hi,

I am not sure how true it is but the threads I have seen on the IE7 updates elsewhere seem to be indicating that the Validation Detection modules within IE7 are being updated.

By my count we are now on the third updated release of IE7, unless something has happened in the last 24 hours or so.

Kind Regards

Simon