View source for Mssecure - 2006-08-08

__NOTOC__
'''Source:''' mssecure_1033.cab

'''Data Updated:''' 2006/08/08

'''Data Version:''' 2006.8.8.0

'''MSBA/Tool Version:''' 1.2.4013.0 3.32


-----

==== MS98-001 - Disabling Creation of Local Groups on a Domain by Non-Administrative Users ====
''Posted: 1998/06/01''

===== 169556 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: CREATALS_x86.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/reskit/nt40/i386/creatals_x86.exe


-----

==== MS98-002 - Error Message Vulnerability Against Secured Internet Servers ====
''Posted: 1998/06/26''

===== 148427 =====
'''Affected Products:'''

* Exchange Server 5.5
** Exchange Server 5.5 Gold
** Exchange Server 5.5 SP1
* Internet Information Server 3.0
** Windows NT4 Service Pack 3
* Internet Information Server 4.0
** Windows NT4 Service Pack 3

'''Patch: ssl-fixi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp3/ssl-fix/


-----

==== MS98-003 - File Access Issue with Windows NT Internet Information Server ====
''Posted: 1998/07/02''

===== 188806 =====
'''Affected Products:'''

* Internet Information Server 3.0
** Windows NT4 Service Pack 3

'''Patch: iis3fixi.exe'''

* ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/
===== 188806 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 3
* Personal Web Server 4.0
** Windows NT4 Service Pack 3

'''Patch: iis4fixi.exe'''

* ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/


-----

==== MS98-004 - Unauthorized ODBC Data Access with RDS and IIS ====
''Posted: 1998/07/14''

===== 184375 =====
'''Affected Products:'''

* Internet Information Server 3.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Internet Information Server 4.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q184375'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;q184375


-----

==== MS98-005 - Unwanted Data Issue with Office 98 for the Macintosh ====
''Posted: 1998/07/17''

===== 189529 =====
'''Affected Products:'''

* Office 98 for Macintosh
** Office 98 for Macintosh Gold

'''Patch: 98-005'''

* http://www.microsoft.com/technet/security/bulletin/ms98-005.asp


-----

==== MS98-006 - Potential Denial-of-Service in IIS FTP Server due to Passive Connections ====
''Posted: 1998/07/23''

===== 189262 =====
'''Affected Products:'''

* Internet Information Server 3.0
** Windows NT4 Service Pack 3

'''Patch: ftpfix3i.exe'''

* ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/ftp-fix/ftpfix3i.exe
===== 189262 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 3

'''Patch: ftpfix4i.exe'''

* ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/iis4-ftpfix/ftpfix4i.exe


-----

==== MS98-007 - Potential SMTP and NNTP Denial-of-Service Vulnerabilities ====
''Posted: 1998/07/24''

===== 188341 =====
'''Affected Products:'''

* Exchange Server 5.5
** Exchange Server 5.5 Gold

'''Patch: MS98-007'''

* http://www.microsoft.com/technet/security/bulletin/ms98-007.asp
===== 188341 =====
'''Affected Products:'''

* Exchange Server 5.0
** Exchange Server 5.0 SP1
** Exchange Server 5.0 SP2

'''Patch: psp2imsi.exe'''

* ftp://ftp.microsoft.com/bussys/exchange/exchange-public/fixes/eng/exchg5.0/post-sp2-ims/
===== 188369 =====
'''Affected Products:'''

* Exchange Server 5.0
** Exchange Server 5.0 SP1
** Exchange Server 5.0 SP2

'''Patch: psp2stri.exe'''

* ftp://ftp.microsoft.com/bussys/exchange/exchange-public/fixes/eng/exchg5.0/post-sp2-store/


-----

==== MS98-008 - Long file name Security Issue affecting Microsoft Outlook 98 and Microsoft Outlook Express 4.x ====
''Posted: 1998/07/27''

===== 175807 =====
'''Affected Products:'''

* Outlook Express 4.01
** Internet Explorer 4.01 Gold
** Internet Explorer 4.01 SP1

'''Patch: oelong'''

* http://www.microsoft.com/msdownload/iebuild/oebuff/en/29128.htm
===== 175807 =====
'''Affected Products:'''

* Outlook 98
** Outlook 98 Gold

'''Patch: outptch2.exe'''

* http://office.microsoft.com/downloads/9798/outptch2.aspx


-----

==== MS98-009 - Windows NT Privilege Elevation Attack ====
''Posted: 1998/07/27''

===== 190288 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 3
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 3
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 3

'''Patch: privfixi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp3/priv-fix/


-----

==== MS98-010 - Information on the Back Orifice Program ====
''Posted: 1998/08/04''

===== 237280 =====
'''Affected Products:'''

* Windows 95
** Windows 95 Gold
** Windows 95 SR 2.1
** Windows 95 SR 2.5
* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold

'''Patch: MS98-010'''

* http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms98-010.asp


-----

==== MS98-011 - Window.External JScript Vulnerability in Microsoft Internet Explorer 4.0 ====
''Posted: 1998/08/17''

===== 191200 =====
'''Affected Products:'''

* Internet Explorer 4.0
** Internet Explorer 4.0 Gold
* Internet Explorer 4.01
** Internet Explorer 4.01 Gold
** Internet Explorer 4.01 SP1

'''Patch: jscript.asp'''

* http://www.microsoft.com/windows/ie/security/jscript.asp


-----

==== MS98-012 - Updates available for Security Vulnerabilities in Microsoft PPTP ====
''Posted: 1998/08/18''

===== 189771 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
** Windows 98 SP1

'''Patch: dun40.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp3/pptp3-fix/
===== 154091 =====
'''Affected Products:'''

* Windows 95
** Windows 95 Gold
** Windows 95 SR 2.1
** Windows 95 SR 2.5

'''Patch: msdun13.exe'''

* ftp://ftp.microsoft.com/softlib/mslfiles/msdun13.exe
===== 189595 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 3
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 3
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 3

'''Patch: pptpfixi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp3/pptp3-fix/
===== 189594 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 3
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 3

'''Patch: rrasfixi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp3/rras30-fix/


-----

==== MS98-013 - Internet Explorer Cross Frame Navigate Vulnerability ====
''Posted: 1998/09/04''

===== 168485 =====
'''Affected Products:'''

* Internet Explorer 4.0
** Internet Explorer 4.0 Gold
* Internet Explorer 4.01
** Internet Explorer 4.01 Gold
** Internet Explorer 4.01 SP1

'''Patch: xframe.asp'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;168485


-----

==== MS98-014 - RPC Spoofing Denial of Service on Windows NT ====
''Posted: 1998/09/29''

===== 193233 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 3
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 3
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 3

'''Patch: snk-fixi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp3/snk-fix/snk-fixi.exe
===== 193233 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Gold

'''Patch: Snk-fixi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40tse/hotfixes-postsp3/snk-fix/


-----

==== MS98-015 - Untrusted Scripted Paste Issue in Microsoft Internet Explorer 4.01 ====
''Posted: 1998/10/16''

===== 169245 =====
'''Affected Products:'''

* Internet Explorer 4.01
** Internet Explorer 4.01 Gold
** Internet Explorer 4.01 SP1

'''Patch: paste.asp'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;169245


-----

==== MS98-016 - Dotless IP Address Issue in Microsoft Internet Explorer 4 ====
''Posted: 1998/10/23''

===== 168617 =====
'''Affected Products:'''

* Internet Explorer 4.01
** Internet Explorer 4.01 SP1

'''Patch: dotless.asp'''

* http://www.microsoft.com/windows/ie/security/dotless.asp


-----

==== MS98-017 - Named Pipes Over RPC Vulnerability ====
''Posted: 1998/11/19''

===== 195733 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4

'''Patch: nprpcfxi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp4/archive/nprpc-fix/


-----

==== MS98-018 - Excel CALL Vulnerability ====
''Posted: 1998/12/10''

===== 196791 =====
'''Affected Products:'''

* Excel 97
** Office 97 SR-2/SR-2b
* Office 97
** Office 97 SR-2/SR-2b

'''Patch: Xl8p9pkg'''

* http://officeupdate.microsoft.com/downloaddetails/xl8p9pkg.htm


-----

==== MS98-019 - IIS GET Vulnerability ====
''Posted: 1998/12/21''

===== 192296 =====
'''Affected Products:'''

* Internet Information Server 3.0
** Windows NT4 Service Pack 4

'''Patch: infget3i.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp4/archive/infget-fix/
===== 192296 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4

'''Patch: infget4i.exe'''

* ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/infget-fix/


-----

==== MS98-020 - Frame Spoof Vulnerability ====
''Posted: 1998/12/23''

===== 167614 =====
'''Affected Products:'''

* Internet Explorer 4.01
** Internet Explorer 4.01 SP1

'''Patch: spoof.asp'''

* http://www.microsoft.com/windows/ie/security/spoof.asp


-----

==== MS99-001 - Exposure in Forms 2.0 TextBox Control that allows data to be read from user's Clipboard ====
''Posted: 1999/01/21''

===== 214757 =====
'''Affected Products:'''

* Excel 97
** Office 97 SR-2/SR-2b
* Office 97
** Office 97 SR-2/SR-2b
* Outlook 98
** Office 97 SR-2/SR-2b
* PowerPoint 97
** Office 97 SR-2/SR-2b
* Project 98
** Office 97 SR-2/SR-2b
* Visual Basic 5.0
** Visual Basic 5.0 Gold
* Word 97
** Office 97 SR-2/SR-2b

'''Patch: fm2paste.exe'''

* http://office.microsoft.com/downloads/9798/fm2paste.aspx


-----

==== MS99-002 - Word 97 Template Vulnerability ====
''Posted: 1999/01/21''

===== 214652 =====
'''Affected Products:'''

* Word 97
** Office 97 SR-2/SR-2b

'''Patch: Wd97SP.EXE'''

* http://download.microsoft.com/download/word97win/wd97sp/97/win98/en-us/wd97sp.exe


-----

==== MS99-003 - IIS Malformed FTP List Request Vulnerability ====
''Posted: 1999/02/03''

===== 188348 =====
'''Affected Products:'''

* Internet Information Server 3.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4

'''Patch: ftpls3i.exe'''

* ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/ftpls-fix/ftpls3i.exe
===== 188348 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4

'''Patch: ftpls4i.exe'''

* ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/ftpls-fix/ftpls4i.exe


-----

==== MS99-004 - Authentication Processing Error in Windows NT 4.0 Service Pack 4 ====
''Posted: 1999/02/08''

===== 214840 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4

'''Patch: msv-fixi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp4/archive/msv1-fix/


-----

==== MS99-005 - BackOffice Server 4.0 Does Not Delete Installation Setup File ====
''Posted: 1999/02/12''

===== 217004 =====
'''Affected Products:'''

* BackOffice Server 4.0
** BackOffice Server 4.0 Gold

'''Patch: Q217004'''

* http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms99-005.asp


-----

==== MS99-006 - Windows NT Known DLLs List Vulnerability ====
''Posted: 1999/02/19''

===== 218473 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4

'''Patch: Smssfixi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp4/smss-fix/
===== 218473 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Gold

'''Patch: Smssfixi.Exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40tse/hotfixes-postsp3/smss-fix/smssfixi.exe


-----

==== MS99-007 - Taskpads Scripting Vulnerability ====
''Posted: 1999/02/22''

===== 218619 =====
'''Affected Products:'''

* BackOffice Resource Kit SE
** BackOffice Resource Kit SE Gold

'''Patch: itmcpatch.exe'''

* ftp://ftp.microsoft.com/reskit/nt4/x86/taskpads/
===== 218619 =====
'''Affected Products:'''

* Windows 98 Resource Kit
** Windows 98 Resource Kit Gold
* Windows 98 Resource Kit Sampler
** Windows 98 Resource Kit Gold

'''Patch: tmcpatch.exe'''

* ftp://ftp.microsoft.com/reskit/win98/taskpads/tmcpatch.exe


-----

==== MS99-008 - Windows NT Screen Saver Vulnerability ====
''Posted: 1999/03/12''

===== 221991 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4

'''Patch: Scrnsavi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp4/scrnsav-fix/
===== 221991 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Gold

'''Patch: Scrnsavi.Exe'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;221991


-----

==== MS99-009 - Malformed Bind Request Vulnerability ====
''Posted: 1999/03/16''

===== 221989 =====
'''Affected Products:'''

* Exchange Server 5.5
** Exchange Server 5.5 SP2

'''Patch: PSP2DIRI.EXE'''

* ftp://ftp.microsoft.com/bussys/exchange/exchange-public/fixes/eng/exchg5.5/postsp2/dir-fix/


-----

==== MS99-010 - File Access Vulnerability in Personal Web Server ====
''Posted: 1999/03/26''

===== 216453 =====
'''Affected Products:'''

* FrontPage 98 Personal Web Server 1.0
** FrontPage 98 Personal Web Server 1.0 Gold

'''Patch: fppws98.exe'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;217765
===== 217763 =====
'''Affected Products:'''

* Personal Web Server 4.0
** Personal Web Server 4.0 Gold

'''Patch: Pwssecup.exe'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;217765
===== 217765 =====
'''Affected Products:'''

* FrontPage 97 Personal Web Server 1.0
** FrontPage 97 Personal Web Server 1.0 Gold

'''Patch: Q217765'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;q217765


-----

==== MS99-011 - DHTML Edit Vulnerability ====
''Posted: 1999/04/21''

===== 226326 =====
'''Affected Products:'''

* Internet Explorer 4.0
** Internet Explorer 4.0 Gold
* Internet Explorer 5
** Internet Explorer 5 Gold

'''Patch: DHTMLED5.EXE'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;226326


-----

==== MS99-012 - MSHTML Update Available for Internet Explorer ====
''Posted: 1999/04/21''

===== 226325 =====
'''Affected Products:'''

* Internet Explorer 4.01
** Internet Explorer 4.01 SP1
** Internet Explorer 4.01 SP2

'''Patch: mshtml4.exe'''

* http://www.microsoft.com/msdownload/iebuild/mshtml/en/72113.htm
===== 226325 =====
'''Affected Products:'''

* Internet Explorer 5
** Internet Explorer 5 Gold

'''Patch: mshtml5.exe'''

* http://www.microsoft.com/msdownload/iebuild/mshtml/en/72111.htm


-----

==== MS99-013 - File Viewers Vulnerability ====
''Posted: 1999/05/07''

===== 232449 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 5

'''Patch: fix2450i.exe'''

* ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/viewcode-fix/
===== 231656 =====
'''Affected Products:'''

* Site Server 3.0, Commerce Edition
** Site Server 3.0 Gold
** Site Server 3.0 SP1
** Site Server 3.0 SP2

'''Patch: viewfixi.exe'''

* ftp://ftp.microsoft.com/bussys/sitesrv/sitesrv-public/fixes/usa/siteserver3/hotfixes-postsp2/viewcode-fix/


-----

==== MS99-014 - Excel 97 Virus Warning Vulnerabilities ====
''Posted: 1999/05/07''

===== 231304 =====
'''Affected Products:'''

* Excel 97
** Office 97 SR-2/SR-2b
* Office 97
** Office 97 SR-2/SR-2b

'''Patch: Xl8p9pkg.exe'''

* http://officeupdate.microsoft.com/downloaddetails/xl8p9pkg.htm


-----

==== MS99-015 - Malformed Help File Vulnerability ====
''Posted: 1999/05/17''

===== 231605 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5

'''Patch: winhlp-i.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp5/winhlp32-fix


-----

==== MS99-016 - Malformed Phonebook Entry  Vulnerability ====
''Posted: 1999/05/20''

===== 230677 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 5
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 5
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 5

'''Patch: rasffixi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp5/ras-fix/


-----

==== MS99-017 - RAS and RRAS Password Vulnerability ====
''Posted: 1999/05/27''

===== 230681 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5

'''Patch: raspassword-fix'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp5/raspassword-fix/
===== 233303 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5

'''Patch: rpwdfixi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp5/rraspassword-fix/


-----

==== MS99-018 - Malformed Favorites Icon Vulnerability ====
''Posted: 1999/05/27''

===== 241361 =====
'''Affected Products:'''

* Internet Explorer 5
** Internet Explorer 5 Gold

'''Patch: q241361.exe'''

* http://www.microsoft.com/msdownload/iebuild/iefav/en/iefav.htm
===== 241361 =====
'''Affected Products:'''

* Internet Explorer 4.01
** Internet Explorer 4.01 SP2

'''Patch: Q241361.exe'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;q241361&sd=tech


-----

==== MS99-019 - Malformed HTR Request Vulnerability ====
''Posted: 1999/06/15''

===== 234905 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5

'''Patch: extfixi.exe'''

* ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/ext-fix/


-----

==== MS99-020 - Malformed LSA Request Vulnerability ====
''Posted: 1999/06/23''

===== 231457 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 5
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 5
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 5

'''Patch: lsareqi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp5/lsa3-fix/
===== 231457 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 4

'''Patch: lsareqi.Exe'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;231457


-----

==== MS99-021 - CSRSS Worker Thread Exhaustion Vulnerability ====
''Posted: 1999/06/23''

===== 233323 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5

'''Patch: csrssfxi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp5/csrss-fix/


-----

==== MS99-022 - Double Byte Code Page Vulnerability ====
''Posted: 1999/06/24''

===== 233335 =====
'''Affected Products:'''

* Internet Information Server 3.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5

'''Patch: fesrc3i.exe'''

* ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/fesrc-fix/
===== 233335 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5

'''Patch: fesrc4i.exe'''

* ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/fesrc-fix/


-----

==== MS99-023 - Malformed Image Header Vulnerability ====
''Posted: 1999/06/30''

===== 234557 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4

'''Patch: krnlifxi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp4/kernel-fix/
===== 234557 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 4

'''Patch: Krnlifxi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40tse/hotfixes-postsp4/kernel-fix/


-----

==== MS99-024 - Unprotected IOCTLs Vulnerability ====
''Posted: 1999/07/06''

On a terminal server, such a program could disable the keyboard and mouse on the console.

===== 236359 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5

'''Patch: ioctlfxi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp5/ioctl-fix
===== 236359 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 4

'''Patch: Ioctlfxi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40tse/hotfixes-postsp4/ioctl-fix/


-----

==== MS99-025 - Unauthorized Access to IIS Servers through ODBC Data Access with RDS ====
''Posted: 1999/07/17''

===== 184375 =====
'''Affected Products:'''

* Internet Information Server 3.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Internet Information Server 4.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q184375'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;q184375


-----

==== MS99-026 - Malformed Dialer Entry Vulnerability ====
''Posted: 1999/07/29''

===== 237185 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5

'''Patch: dialrfxi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp5/dialer-fix/
===== 237185 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 4

'''Patch: Dialrfxi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40tse/hotfixes-postsp4/dialer-fix/


-----

==== MS99-027 - Encapsulated SMTP Address Vulnerability ====
''Posted: 1999/08/06''

===== 237927 =====
'''Affected Products:'''

* Exchange Server 5.5
** Exchange Server 5.5 SP2

'''Patch: psp2imci.zip'''

* ftp://ftp.microsoft.com/bussys/exchange/exchange-public/fixes/eng/exchg5.5/postsp2/imc-fix/


-----

==== MS99-028 - Terminal Server Connection Request Flooding Vulnerability ====
''Posted: 1999/08/09''

===== 228724 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 4
** Windows NT4 Terminal Server Service Pack 5

'''Patch: tsmemfxi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40tse/hotfixes-postsp4/flood-fix/


-----

==== MS99-029 - Malformed HTTP Request Header Vulnerability ====
''Posted: 1999/08/11''

===== 238349 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5

'''Patch: vdext4i.exe'''

* ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/hdbrk-fix/


-----

==== MS99-030 - Office ODBC Vulnerabilities ====
''Posted: 1999/08/20''

===== 141796 =====
'''Affected Products:'''

* Office 95
** Office 95 Gold

'''Patch: Jet30Pkg.exe'''

* http://officeupdate.microsoft.com/downloaddetails/excel95odbc.htm
===== 239105 =====
'''Affected Products:'''

* Office 97
** Office 97 Gold
** Office 97 SR-1
** Office 97 SR-2/SR-2b

'''Patch: jetCopkg.exe'''

* http://office.microsoft.com/downloads/9798/excel97odbc.aspx
===== 239471 =====
'''Affected Products:'''

* Office 2000
** Office 2000 Gold
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a

'''Patch: JetcoPkg.exe'''

* http://office.microsoft.com/downloads/2000/excel2000odbc.aspx


-----

==== MS99-031 - Virtual Machine Sandbox Vulnerability ====
''Posted: 1999/08/25''

===== 240346 =====
'''Affected Products:'''

* Microsoft Virtual Machine (VM)
** Microsoft Virtual Machine (VM) Gold
* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold
* Windows Me
** Windows Me Gold
* Windows NT Server 4.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: msjavx86.exe'''

* http://www.microsoft.com/java/vm/dl_vm40.htm


-----

==== MS99-032 - scriptlet.typelib/Eyedog Vulnerability ====
''Posted: 1999/08/31''

===== 240308 =====
'''Affected Products:'''

* Internet Explorer 4.0
** Internet Explorer 4.0 Gold
* Internet Explorer 4.01
** Internet Explorer 4.01 Gold
** Internet Explorer 4.01 SP1
** Internet Explorer 4.01 SP2
* Internet Explorer 5
** Internet Explorer 5 Gold
* Outlook Express 4.01
** Internet Explorer 4.01 Gold
** Internet Explorer 4.01 SP1
** Internet Explorer 4.01 SP2

'''Patch: q240308.exe'''

* ftp://ftp.microsoft.com/peropsys/ie/ie-public/fixes/usa/eyedog-fix/


-----

==== MS99-033 - Malformed Telnet Argument Vulnerability ====
''Posted: 1999/09/09''

===== 240163 =====
'''Affected Products:'''

* Windows 95
** Windows 95 Gold
** Windows 95 SR 2.1
** Windows 95 SR 2.5

'''Patch: telnet95.exe'''

* http://www.microsoft.com/windows95/downloads/contents/wucritical/telnet/default.asp
===== 240163 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold

'''Patch: TelnetUp.EXE'''

* http://www.microsoft.com/windows98/downloads/contents/wucritical/telnet/license.asp


-----

==== MS99-034 - Fragmented IGMP Packet Vulnerability ====
''Posted: 1999/09/03''

===== 238453 =====
'''Affected Products:'''

* Windows 95
** Windows 95 Gold
** Windows 95 SR 2.1
** Windows 95 SR 2.5

'''Patch: 238453US5.exe'''

* http://www.microsoft.com/windows98/downloads/contents/wucritical/srpoint/license.asp
===== 238453 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold

'''Patch: 238453US8.EXE'''

* http://www.microsoft.com/windows98/downloads/contents/wucritical/srpoint/license.asp
===== 238329 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5

'''Patch: igmpfixi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40tse/hotfixes-postsp4/igmp-fix/
===== 238329 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 4
** Windows NT4 Terminal Server Service Pack 5

'''Patch: Igmpfixi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40tse/hotfixes-postsp4/igmp-fix/


-----

==== MS99-035 - Set Cookie Header Caching Vulnerability ====
''Posted: 1999/09/10''

===== 238647 =====
'''Affected Products:'''

* Microsoft Commercial Internet System 2.0
** Microsoft Commercial Internet System 2.0 Gold
* Microsoft Commercial Internet System 2.5
** Microsoft Commercial Internet System 2.5 Gold
* Site Server 3.0
** Site Server 3.0 Gold
** Site Server 3.0 SP1
** Site Server 3.0 SP2
* Site Server 3.0, Commerce Edition
** Site Server 3.0 Gold
** Site Server 3.0 SP1
** Site Server 3.0 SP2

'''Patch: q238647x86eng.exe'''

* ftp://ftp.microsoft.com/bussys/sitesrv/sitesrv-public/fixes/usa/siteserver3/hotfixes-postsp2/proxycache/


-----

==== MS99-036 - Windows NT 4.0 Does Not Delete Unattended Installation File ====
''Posted: 1999/09/10''

===== 155197 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 4
** Windows NT4 Terminal Server Service Pack 5
** Windows NT4 Terminal Server Service Pack 6
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: MS99-036'''

* http://www.microsoft.com/technet/security/bulletin/ms99-036.asp


-----

==== MS99-037 - ImportExportFavorites Vulnerability ====
''Posted: 1999/09/10''

===== 241361 =====
'''Affected Products:'''

* Internet Explorer 5
** Internet Explorer 5 Gold

'''Patch: q241361.exe'''

* http://www.microsoft.com/msdownload/iebuild/iefav/en/iefav.htm
===== 241361 =====
'''Affected Products:'''

* Internet Explorer 4.01
** Internet Explorer 4.01 SP2

'''Patch: Q241361.exe'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;q241361&sd=tech


-----

==== MS99-038 - Spoofed Route Pointer Vulnerability ====
''Posted: 1999/09/20''

===== 238453 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 5
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 5
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 5

'''Patch: ipsrfixi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp5/spoof-fix/


-----

==== MS99-039 - Domain Resolution and FTP Download Vulnerabilities ====
''Posted: 1999/09/23''

===== 241805 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: iprftp4i.exe'''

* ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/iis40/hotfixes-postsp6/security/iprftp-fix/
===== 241562 =====
'''Affected Products:'''

* Microsoft Commercial Internet System 2.5
** Microsoft Commercial Internet System 2.5 Gold

'''Patch: q242559.exe'''

* ftp://ftp.microsoft.com/bussys/mcis/mcis-public/fixes/usa/mcis25/security/ftpsvc-fix/


-----

==== MS99-040 - Download Behavior Vulnerability ====
''Posted: 1999/09/28''

===== 243638 =====
'''Affected Products:'''

* Internet Explorer 5
** Internet Explorer 5 Gold

'''Patch: q243638.exe'''

* http://www.microsoft.com/msdownload/iebuild/dlbhav/en/136291.htm


-----

==== MS99-041 - RASMAN Security Descriptor Vulnerability ====
''Posted: 1999/09/30''

===== 242294 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: fixrasi.exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp6/security/rasman-fix/
===== 242294 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 5
** Windows NT4 Terminal Server Service Pack 6

'''Patch: fixrasi.Exe'''

* ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp6/security/rasman-fix/fixrasi.exe


-----

==== MS99-042 - IFRAME ExecCommand Vulnerability ====
''Posted: 1999/10/11''

===== 243638 =====
'''Affected Products:'''

* Internet Explorer 5
** Internet Explorer 5 Gold

'''Patch: q243638.exe'''

* http://www.microsoft.com/msdownload/iebuild/dlbhav/en/136291.htm


-----

==== MS99-043 - Javascript Redirect Vulnerability ====
''Posted: 1999/10/18''

===== 244356 =====
'''Affected Products:'''

* Internet Explorer 4.01
** Internet Explorer 4.01 SP2

'''Patch: q244356.exe'''

* http://www.microsoft.com/msdownload/iebuild/jsredir/en/138099.htm
===== 244357 =====
'''Affected Products:'''

* Internet Explorer 5
** Internet Explorer 5 Gold

'''Patch: q244357.exe'''

* http://www.microsoft.com/msdownload/iebuild/jsredir/en/138101.htm


-----

==== MS99-044 - Excel SYLK Vulnerability ====
''Posted: 1999/10/20''

===== 241900 =====
'''Affected Products:'''

* Excel 97
** Office 97 SR-2/SR-2b
* Office 97
** Office 97 SR-2/SR-2b

'''Patch: xl8p7pkg.exe'''

* http://download.microsoft.com/download/office97pro/xl8p9pkg/97/win98/en-us/xl8p9pkg.exe
===== 241901 =====
'''Affected Products:'''

* Excel 2000
** Office 2000 Gold
* Office 2000
** Office 2000 Gold

'''Patch: xl9p2pkg.exe'''

* http://download.microsoft.com/download/excel2000/xl9p2pk/2000/win98/en-us/xl9p2pkg.exe


-----

==== MS99-045 - Virtual Machine Verifier Vulnerability ====
''Posted: 1999/10/21''

===== 275609 =====
'''Affected Products:'''

* Microsoft Virtual Machine (VM)
** Microsoft Virtual Machine (VM) Gold
* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold
* Windows Me
** Windows Me Gold
* Windows NT Server 4.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: msjavx86.exe'''

* http://www.microsoft.com/java/vm/dl_vm40.htm


-----

==== MS99-046 - Improve TCP Initial Sequence Number Randomness ====
''Posted: 1999/10/22''

===== 243835 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: q243835i.exe'''

* http://download.microsoft.com/download/winntsrv40/patch/tcp-sp6/nt4/en-us/q243835i.exe
===== 243835 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 4
** Windows NT4 Terminal Server Service Pack 5

'''Patch: Q243835i.EXE'''

* http://download.microsoft.com/download/winntterminal/patch/q243835/nt4alpha/en-us/q243835i.exe
===== 243835 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5

'''Patch: q243835sp5i.exe'''

* http://download.microsoft.com/download/winntsrv40/patch/tcp-sp5/nt4/en-us/q243835sp5i.exe


-----

==== MS99-047 - Malformed Spooler Request Vulnerability ====
''Posted: 1999/11/04''

===== 243649 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q243649.exe'''

* http://download.microsoft.com/download/winntsrv40/patch/spooler-fix/nt4/en-us/q243649.exe


-----

==== MS99-048 - Active Setup Control Vulnerability ====
''Posted: 1999/11/11''

===== 244540 =====
'''Affected Products:'''

* Internet Explorer 4.01
** Internet Explorer 4.01 SP2

'''Patch: q244540.exe'''

* http://www.microsoft.com/msdownload/iebuild/ascontrol/en/136473.htm
===== 244540 =====
'''Affected Products:'''

* Internet Explorer 5
** Internet Explorer 5 Gold

'''Patch: Q244540.exe'''

* http://www.microsoft.com/msdownload/iebuild/ascontrol/en/136473.htm


-----

==== MS99-049 - File Access URL Vulnerability ====
''Posted: 1999/11/12''

===== 245729 =====
'''Affected Products:'''

* Windows 95
** Windows 95 Gold
** Windows 95 SR 2.1
** Windows 95 SR 2.5

'''Patch: 245729us5.exe'''

* http://download.microsoft.com/download/win95/update/245729/w95/en-us/245729us5.exe
===== 245729 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
** Windows 98 SP1

'''Patch: 245729us8.exe'''

* http://download.microsoft.com/download/win98/update/245729/w98/en-us/245729us8.exe


-----

==== MS99-050 - Server-side Page Reference Redirect Vulnerability ====
''Posted: 1999/12/08''

===== 246094 =====
'''Affected Products:'''

* Internet Explorer 4.01
** Internet Explorer 4.01 SP2

'''Patch: q246094.exe'''

* http://download.microsoft.com/download/ie4095/sprr/4.01/w9xnt4/en-us/q246094.exe
===== 256094 =====
'''Affected Products:'''

* Internet Explorer 5
** Internet Explorer 5 Gold

'''Patch: Q246094.exe'''

* http://download.microsoft.com/download/ie5/sprr/5.0/w9xnt4/en-us/q246094.exe
===== 246094 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 Gold

'''Patch: Q246094.Exe'''

* http://download.microsoft.com/download/ie501/sprr/5.01/w9xnt4/en-us/q246094.exe


-----

==== MS99-051 - IE Task Scheduler Vulnerability ====
''Posted: 1999/11/29''

===== 246972 =====
'''Affected Products:'''

* Internet Explorer 5
** Internet Explorer 5 Gold

'''Patch: q246972'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;q246972


-----

==== MS99-052 - Legacy Credential Caching Vulnerability ====
''Posted: 1999/11/29''

===== 168115 =====
'''Affected Products:'''

* Windows 95
** Windows 95 Gold
** Windows 95 SR 2.1
** Windows 95 SR 2.5

'''Patch: 168115us5.exe'''

* http://download.microsoft.com/download/win95/update/168115/w95/en-us/168115us5.exe
===== 168115 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold

'''Patch: 168115us8.exe'''

* http://download.microsoft.com/download/win98/update/168115/w98/en-us/168115us8.exe


-----

==== MS99-053 - Windows Multithreaded SSL ISAPI Filter Vulnerability ====
''Posted: 1999/12/02''

===== 244613 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: sslune4i.exe'''

* http://download.microsoft.com/download/iis40/patch/4.02.0728/nt4/en-us/sslune4i.exe


-----

==== MS99-054 - WPAD Spoofing Vulnerability ====
''Posted: 1999/12/01''

===== 247333 =====
'''Affected Products:'''

* Internet Explorer 5
** Internet Explorer 5 Gold

'''Patch: Q247333'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;q247333


-----

==== MS99-055 - Malformed Resource Enumeration Argument Vulnerability ====
''Posted: 1999/12/09''

The primary effect of the failure is to cause named pipes to fail, which prevents many other system services from operating.

===== 246045 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q246045.EXE'''

* http://download.microsoft.com/download/winntsrv40/update/srvsvc/nt4/en-us/q246045.exe


-----

==== MS99-056 - Syskey Keystream Reuse Vulnerability ====
''Posted: 1999/12/16''

===== 248183 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q248183.EXE'''

* http://download.microsoft.com/download/winntsp/patch/syskey/nt4/en-us/q248183.exe
===== 248183 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 4
** Windows NT4 Terminal Server Service Pack 5

'''Patch: Q248183ts.exe'''

* http://www.microsoft.com/technet/security/bulletin


-----

==== MS99-057 - Malformed Security Identifier Request Vulnerability ====
''Posted: 1999/12/16''

===== 248183 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q248183.EXE'''

* http://download.microsoft.com/download/winntsp/patch/syskey/nt4/en-us/q248183.exe


-----

==== MS99-058 - Virtual Directory Naming Vulnerability ====
''Posted: 1999/12/21''

===== 238606 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: vrdcon4i.exe'''

* http://download.microsoft.com/download/iis40/patch/4.2.727.1/nt4/en-us/vrdcon4i.exe


-----

==== MS99-059 - Malformed TDS Packet Header Vulnerability ====
''Posted: 1999/12/20''

===== 248749 =====
'''Affected Products:'''

* SQL Server 7.0
** SQL Server 7.0 SP1

'''Patch: S70761i.exe'''

* http://download.microsoft.com/download/sql70/patch/7.0/win98/en-us/s70761i.exe


-----

==== MS99-060 - HTML Mail Attachment Vulnerability ====
''Posted: 1999/12/22''

===== 249082 =====
'''Affected Products:'''

* Internet Explorer 4.5 for Macintosh
** Internet Explorer 4.5 for Macintosh Gold
* Outlook Express 5 for Macintosh
** Outlook Express 5 for Macintosh Gold

'''Patch: MacFiles'''

* http://support.microsoft.com/support/kb/articles/q249/0/82.asp


-----

==== MS99-061 - Escape Character Parsing Vulnerability ====
''Posted: 1999/12/21''

===== 246401 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: unschx4i.exe'''

* http://download.microsoft.com/download/iis40/patch/4.2.732.1/nt4/en-us/unschx4i.exe


-----

==== MS00-001 - Malformed IMAP Request Vulnerability ====
''Posted: 2000/01/04''

===== 246731 =====
'''Affected Products:'''

* Microsoft Commercial Internet System 2.0
** Microsoft Commercial Internet System 2.0 Gold
* Microsoft Commercial Internet System 2.5
** Microsoft Commercial Internet System 2.5 Gold

'''Patch: q246731engi.EXE'''

* http://download.microsoft.com/download/cis25b/patch/5.5.1877.37/nt4/en-us/q246731engi.exe


-----

==== MS00-002 - Malformed Conversion Data Vulnerability ====
''Posted: 2000/01/20''

===== 249881 =====
'''Affected Products:'''

* PowerPoint 2000
** Office 2000 Gold
* Word 2000
** Office 2000 Gold

'''Patch: WW5pkg.exe'''

* http://officeupdate.microsoft.com/2000/downloaddetails/ww5pkg.htm
===== 249881 =====
'''Affected Products:'''

* PowerPoint 98
** PowerPoint 98 Gold
* Word 97
** Office 97 Gold
* Word 98
** Word 98 Gold

'''Patch: WW5Pkg.exe'''

* http://officeupdate.microsoft.com/downloaddetails/ww5pkg.htm


-----

==== MS00-003 - Spoofed LPC Port Request Vulnerability ====
''Posted: 2000/01/12''

===== 247869 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q247869i.EXE'''

* http://download.microsoft.com/download/winntsp/patch/lpc/nt4/en-us/q247869i.exe


-----

==== MS00-004 - RDISK Registry Enumeration File Vulnerability ====
''Posted: 2000/01/21''

The RDISK utility is used to create an Emergency Repair Disk (ERD) in order to record machine state information as a contingency against system failure. During execution, RDISK creates a temporary file containing an enumeration of the registry. The ACLs on the file allow global read permission, and as a result, a malicious user who knew that the administrator was running RDISK could open the file and read the registry enumeration information as it was being created. RDISK erases the file upon successful completion, so under normal conditions there would be no lasting vulnerability.By default, the file is not shared and therefore could not be read by other network user

===== 249108 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 4
** Windows NT4 Terminal Server Service Pack 5
** Windows NT4 Terminal Server Service Pack 6

'''Patch: q249108i.EXE'''

* http://download.microsoft.com/download/winntsp/patch/rdisk/nt4/en-us/q249108i.exe
===== 249108 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q249108i.exe'''

* http://download.microsoft.com/download/winntsp/patch/rdisk2/nt4/en-us/q249108i.exe


-----

==== MS00-005 - Malformed RTF Control Word Vulnerability ====
''Posted: 2000/01/17''

===== 249973 =====
'''Affected Products:'''

* Windows 95
** Windows 95 Gold
** Windows 95 SR 2.1
** Windows 95 SR 2.5

'''Patch: 249973USA5.exe'''

* http://www.microsoft.com/windows98/downloads/contents/wucritical/rtfcontrol/license.asp
===== 249973 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold

'''Patch: 249973USA8.exe'''

* http://www.microsoft.com/windows98/downloads/contents/wucritical/rtfcontrol/license.asp
===== 249973 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q249973i.EXE'''

* http://download.microsoft.com/download/winntsp/patch/rtf/nt4/en-us/q249973i.exe
===== 249973 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 5

'''Patch: q249973ts.exe'''

* http://www.microsoft.com/technet/security/bulletin


-----

==== MS00-006 - Malformed Hit-Highlighting Argument Vulnerability ====
''Posted: 2000/01/26''

The first vulnerability is the "Malformed Hit-Highlighting Argument" vulnerability. The ISAPI filter that implements the hit-highlighting (also known as "WebHits") functionality does not adequately constrain what files can be requested. By providing a deliberately-malformed argument in a request to hit-highlight a document, it is possible to escape the virtual directory. This would allow any file residing on the server itself, and on the same logical drive as the web root directory, to be retrieved regardless of permissions.  This variant could allow the source of server-side files such as .ASP files to be read. The new variant affects only Index Server 2.0, and Windows 2000 customers who applied the original patch were never at risk from it. The second vulnerability involves the error message that is returned when a user requests a non-existent Internet Data Query file. The error message provides the physical path to the web directory that was contained in the request. Although this vulnerability would not allow a malicious user to alter or view any data, it could be a valuable reconnaissance tool for mapping the file structure of a web server. This variant could allow a malicious user to read files. The variant was eliminated by the original patch, and customers who applied the original version of the patch were never at risk from it. Indexing Services in Windows 2000 is affected only by the "Malformed Hit-Highlighting" vulnerability - it is not affected by the second vulnerability.

===== 251170 =====
'''Affected Products:'''

* Indexing Services for Windows 2000
** Windows 2000 Gold
* Internet Information Services 5.0
** Windows 2000 Gold
* Windows 2000 Advanced Server
** Windows 2000 Gold
* Windows 2000 Datacenter Server
** Windows 2000 Gold
* Windows 2000 Professional
** Windows 2000 Gold
* Windows 2000 Server
** Windows 2000 Gold

'''Patch: Q251170_W2K_SP1_X86_en.EXE'''

* http://download.microsoft.com/download/win2000pro/patch/mhh/nt5/en-us/q251170_w2k_sp1_x86_en.exe
===== 252463 =====
'''Affected Products:'''

* Index Server 2.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Internet Information Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q252463i.EXE'''

* http://download.microsoft.com/download/winntsp/patch/mhh/nt4/en-us/q252463i.exe


-----

==== MS00-007 - Recycle Bin Creation Vulnerability ====
''Posted: 2000/02/01''

The Windows NT Recycle Bin for a given user maps to a folder, whose name is based on the owner's SID. The folder is created the first time the user deletes a file, and the owner is given sole permissions to it. However, if a malicious user could create the folder before the bona fide one were created, he or she could assign any desired permissions to it. This would allow him or her to create, modify or delete files in the Recycle Bin

===== 248399 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: q248399i.exe'''

* http://download.microsoft.com/download/winntsp/patch/q248399/nt4alpha/en-us/q248399i.exe


-----

==== MS00-008 - Registry Permissions Vulnerability ====
''Posted: 2000/03/09''

===== 259496 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q259496i.exe'''

* http://download.microsoft.com/download/winntsp/patch/q259496/nt4/en-us/q259496i.exe


-----

==== MS00-009 - Image Source Redirect Vulnerability ====
''Posted: 2000/02/16''

When a web server navigates a window from one domain into another one, the IE security model checks the server's permissions on the new page. However, it is possible for a web server to open a browser window to a client-local file, then navigate the window to a page that is in the web site's domain in such a way that the data in the client-local file is accessible to the new window. The data would only be accessible to the new window for a very brief period, but the result is that it could be possible for a malicious web site operator to view files on the computer of a visiting user.

===== 251109 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 Gold

'''Patch: q251109.exe'''

* http://download.microsoft.com/download/ie501/secpach5/5.01/w9xnt4/en-us/q251109.exe
===== 251109 =====
'''Affected Products:'''

* Internet Explorer 4.01
** Internet Explorer 4.01 SP2

'''Patch: Q251109.exe'''

* http://download.microsoft.com/download/ie4095/secpach5/4.01/w9xnt4/en-us/q251109.exe


-----

==== MS00-010 - Site Wizard Input Validation Vulnerability ====
''Posted: 2000/02/18''

===== 252614 =====
'''Affected Products:'''

* Site Server 3.0, Commerce Edition
** Site Server 3.0 Gold
** Site Server 3.0 SP1
** Site Server 3.0 SP2
** Site Server 3.0 SP3
** Site Server 3.0 SP4

'''Patch: Q252614.zip'''

* http://download.microsoft.com/download/siteserver30commerce/patch/3.0/nt4/en-us/q252614.zip


-----

==== MS00-011 - VM File Reading Vulnerability ====
''Posted: 2000/02/18''

The version of the Microsoft VM that ships with Microsoft Internet Explorer 4.x and Internet Explorer 5.x contains a security vulnerability that could allow a Java applet to operate outside the bounds set by the sandbox. A malicious user could write a Java applet that could read - but not change, delete or add - files from the computer of a person who visited his site or read web content from inside an intranet if the malicious site is visited by a computer from within that intranet.

===== 253562 =====
'''Affected Products:'''

* Microsoft Virtual Machine (VM)
** Microsoft Virtual Machine (VM) Gold
* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold
* Windows Me
** Windows Me Gold
* Windows NT Server 4.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: msjavx86.exe'''

* http://www.microsoft.com/java/vm/dl_vm40.htm
===== 253562 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
* Windows 2000 Professional
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Service Pack 1

'''Patch: Q287030_W2K_SP2_x86_EN.exe'''

* http://windowsupdate.microsoft.com


-----

==== MS00-012 - Remote Agent Permissions Vulnerability ====
''Posted: 2000/02/22''

===== 249847 =====
'''Affected Products:'''

* Systems Management Server 2.0
** Systems Management Server 2.0 Gold
** Systems Management Server 2.0 SP1

'''Patch: Q249847i.EXE'''

* http://download.microsoft.com/download/sms20/patch/q249847/nt4/en-us/q249847i.exe


-----

==== MS00-013 - Misordered Windows Media Services Handshake Vulnerability ====
''Posted: 2000/02/23''

===== 253943 =====
'''Affected Products:'''

* Windows Media Services 4.0
** Windows NT4 Service Pack 6a
* Windows Media Services 4.1
** Windows NT4 Service Pack 6a

'''Patch: WMSU4954_NT4.EXE'''

* http://download.microsoft.com/download/winmediatech40/update/4954/nt4/en-us/wmsu4954_nt4.exe
===== 253943 =====
'''Affected Products:'''

* Windows Media Services 4.1
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: WMSU4954_Win2000.EXE'''

* http://download.microsoft.com/download/winmediatech40/update/4954/nt5/en-us/wmsu4954_win2000.exe


-----

==== MS00-014 - SQL Query Abuse Vulnerability ====
''Posted: 2000/03/08''

===== 256052 =====
'''Affected Products:'''

* Microsoft Data Engine (MSDE)
** SQL Server 7.0 Gold
** SQL Server 7.0 SP1
* SQL Server 7.0
** SQL Server 7.0 Gold
** SQL Server 7.0 SP1

'''Patch: s70780i.exe'''

* http://download.microsoft.com/download/sql70/patch/2000.3.1.0/nt4alpha/en-us/s70780i.exe


-----

==== MS00-015 - Clip Art Buffer Overrun Vulnerability ====
''Posted: 2000/03/06''

===== 256167 =====
'''Affected Products:'''

* Greetings 2000
** Greetings 2000 Gold
* Home Publishing 2000
** Home Publishing 2000 Gold
* Office 2000
** Office 2000 Gold
* Photo Draw 2000 Version 1
** Photo Draw 2000 Version 1 Gold
* PictureIt 2000
** PictureIt 2000 Gold
* Publisher 99
** Publisher 99 Gold
* Works 2000
** Works 2000 Gold

'''Patch: cilupdt.exe'''

* http://download.microsoft.com/download/office2000/patch/4.71.1015.0/win98/en-us/cilupdt.exe


-----

==== MS00-016 - Malformed Media License Request Vulnerability ====
''Posted: 2000/03/17''

===== 257200 =====
'''Affected Products:'''

* Windows Media Rights Manager 1
** Windows Media Rights Manager 1 Gold

'''Patch: WMRMU8912_NT4.EXE'''

* http://download.microsoft.com/download/winmediatech40/update/8912/nt4/en-us/wmrmu8912_nt4.exe


-----

==== MS00-017 - DOS Device in Path Name Vulnerability ====
''Posted: 2000/03/16''

===== 256015 =====
'''Affected Products:'''

* Windows 95
** Windows 95 Gold
** Windows 95 SR 2.1
** Windows 95 SR 2.5

'''Patch: 256015USA5.EXE'''

* http://download.microsoft.com/download/win95/update/6467/w95/en-us/256015usa5.exe
===== 256015 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold

'''Patch: 256015USA8.EXE'''

* http://download.microsoft.com/download/win98se/update/6467/w98/en-us/256015usa8.exe


-----

==== MS00-018 - Chunked Encoding Post Vulnerability ====
''Posted: 2000/03/20''

===== 252693 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: chkenc4i.exe'''

* http://download.microsoft.com/download/iis40/patch/4.2.739.1/nt4/en-us/chkenc4i.exe


-----

==== MS00-019 - Virtualized UNC Share Vulnerability ====
''Posted: 2000/03/30''

Under certain fairly unusual conditions, the vulnerability could cause a web server to send the source code of .ASP and other files to a visiting user.

===== 249599 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Gold

'''Patch: Q249599_W2K_SP1_X86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q249599/nt5/en-us/q249599_w2k_sp1_x86_en.exe
===== 249599 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: uncsec4i.exe'''

* http://download.microsoft.com/download/iis40/patch/4.2.736.1/nt4/en-us/uncsec4i.exe


-----

==== MS00-020 - Desktop Separation Vulnerability ====
''Posted: 2000/06/15''

By design, processes are constrained to run within a windows station, and the threads in the process run in one or more desktops. A process in one windows station should not be able to access desktops belonging to another windows station. However, due to an implementation error, this could happen under very specific circumstances. This could allow a process belonging to a low-privilege user to view inputs or output that belong to another desktop within the same session, and potentially obtain information such as passwords

===== 260197 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
* Windows 2000 Datacenter Server
** Windows 2000 Gold
* Windows 2000 Professional
** Windows 2000 Gold
* Windows 2000 Server
** Windows 2000 Gold

'''Patch: q260197_w2k_sp1_x86_en.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q260197/nt5/en-us/q260197_w2k_sp1_x86_en.exe


-----

==== MS00-021 - Malformed TCP/IP Print Request Vulnerability ====
''Posted: 2000/03/30''

A specially-malformed print request could cause TCPSVC.EXE to crash, which would not only prevent the server from providing printing services, but also would stop several other services, most importantly DHCP.

===== 257870 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
* Windows 2000 Datacenter Server
** Windows 2000 Gold
* Windows 2000 Professional
** Windows 2000 Gold
* Windows 2000 Server
** Windows 2000 Gold

'''Patch: Q257870_W2K_SP1_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q257870/nt5/en-us/q257870_w2k_sp1_x86_en.exe
===== 257870 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q257870i.EXE'''

* http://download.microsoft.com/download/winntsp/patch/q257870/nt4/en-us/q257870i.exe
===== 257870 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q257870ts.exe'''

* http://www.microsoft.com/technet/security/bulletin


-----

==== MS00-022 - XLM Text Macro Vulnerability ====
''Posted: 2000/04/03''

===== 255605 =====
'''Affected Products:'''

* Excel 97
** Office 97 SR-2/SR-2b
* Office 97
** Office 97 SR-2/SR-2b

'''Patch: xl8p9pkg.exe'''

* http://www.officeupdate.com/downloaddetails/xl8p9pkg.htm?s=/downloadcatalog/dldexcel.asp


-----

==== MS00-023 - Myriad Escaped Characters Vulnerability ====
''Posted: 2000/04/12''

Special characters can be embedded in URLs by use of so-called escaped character sequences. By providing a specially-malformed URL with an extremely large number of escaped characters, a malicious user could arbitrarily increase the work factor associated with parsing the escaped characters, thereby consuming much or all of the CPU availability on the server and preventing useful work from being done.

===== 254142 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: escseq4i.exe'''

* http://download.microsoft.com/download/iis40/patch/4.2.740.1/nt4alpha/en-us/escseq4i.exe
===== 254142 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Gold

'''Patch: Q254142_W2K_SP1_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q254142/nt5/en-us/q254142_w2k_sp1_x86_en.exe


-----

==== MS00-024 - OffloadModExpo Registry Permissions Vulnerability ====
''Posted: 2000/04/12''

===== 259496 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q259496i.exe'''

* http://download.microsoft.com/download/winntsp/patch/q259496/nt4/en-us/q259496i.exe
===== 259496 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q259496i.Exe'''

* http://download.microsoft.com/download/winntsp/patch/q259496/nt4/en-us/q259496i.exe


-----

==== MS00-025 - Link View Server-Side Component Vulnerability ====
''Posted: 2000/04/14''

===== 259799 =====
'''Affected Products:'''

* FrontPage 98 Server Extensions
** FrontPage 98 Server Extensions Gold
* Internet Information Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Personal Web Server 4.0
** Personal Web Server 4.0 Gold

'''Patch: Q259799'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;259799


-----

==== MS00-026 - Mixed Object Access Vulnerability ====
''Posted: 2000/04/20''

Active Directory allows for access control of directory objects on a per-attribute basis. However, the vulnerability at issue here could allow a malicious user to modify object attributes that he does not have permission to modify, as long as he combined the operation in a particular way with ones involving attributes that he does have permission to modify.The vulnerability does not afford the malicious user an opportunity to modify all objects in a class ? only the specific class objects for which he has permission to modify at least one attribute. Further, the vulnerability provides no capability to bypass normal authentication or Windows 2000 auditing, so administrators could determine if this vulnerability were being exploited, and by wh

===== 259401 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
* Windows 2000 Datacenter Server
** Windows 2000 Gold
* Windows 2000 Server
** Windows 2000 Gold

'''Patch: q259401_w2k_sp1_x86_en.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q259401/nt5/en-us/q259401_w2k_sp1_x86_en.exe


-----

==== MS00-027 - Malformed Environment Variable Vulnerability ====
''Posted: 2000/04/20''

CMD.EXE, the command processor for Windows NT 4.0 and Windows 2000, has an unchecked buffer in part of the code that handles environment strings.  It could be used to mount denial of service attacks in certain cases. If a server provides batch or other script files, a malicious user could potentially provide arguments that would create an extremely large environment string and overflow the buffer. This would cause the process to fail, and the memory allocated to the process would not be made available again until a dialogue had been cleared on the operator's console. By repeatedly running the batch file, the malicious user could potentially make some or all of the memory on the server temporarily unavailabl

===== 259622 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
* Windows 2000 Datacenter Server
** Windows 2000 Gold
* Windows 2000 Professional
** Windows 2000 Gold
* Windows 2000 Server
** Windows 2000 Gold

'''Patch: q259622_w2k_sp1_x86_en.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q259622/nt5/en-us/q259622_w2k_sp1_x86_en.exe
===== 259622 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: q259622i.exe'''

* http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=f403ec53-9726-42a1-aaac-95772ed06a9a
===== 259622 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q259622i.EXE'''

* http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=9bddd606-12b6-43bf-a4ec-2ad96695950d


-----

==== MS00-028 - Server-Side Image Map Components Vulnerability ====
''Posted: 2000/04/21''

===== 260267 =====
'''Affected Products:'''

* FrontPage 97 Server Extensions
** FrontPage 97 Server Extensions Gold
* FrontPage 98 Server Extensions
** FrontPage 98 Server Extensions Gold
* Internet Information Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Personal Web Server 4.0
** Personal Web Server 4.0 Gold

'''Patch: Q260267'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;260267


-----

==== MS00-029 - IP Fragment Reassembly Vulnerability ====
''Posted: 2000/05/19''

The affected systems contain a flaw in the code that performs IP fragment reassembly. If a continuous stream of fragmented IP datagrams with a particular malformation were sent to an affected machine, it could be made to devote most or all of its CPU availability to processing them. The data rate needed to completely deny service varies depending on the machine and network conditions, but in most cases even relatively moderate rates would suffice.The vulnerability would not allow a malicious user to compromise data on the machine or usurp administrative control over it. Although it has been reported that the attack in some cases will cause an affected machine to crash, affected machines in all Microsoft testing returned to normal service shortly after the fragments stopped arriving. Machines protected by a proxy server or a firewall that drops fragmented packets would not be affected by this vulnerability. The machines most likely to be affected by this vulnerability would be machines located on the edge of a network such as web servers or proxy servers

===== 259728 =====
'''Affected Products:'''

* Windows 95
** Windows 95 Gold
** Windows 95 SR 2.1
** Windows 95 SR 2.5

'''Patch: 259728USA5.EXE'''

* http://download.microsoft.com/download/win95/update/8070/w95/en-us/259728usa5.exe
===== 259728 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold

'''Patch: 259728USA8.EXE'''

* http://download.microsoft.com/download/win98/update/8070/w98/en-us/259728usa8.exe
===== 259728 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
* Windows 2000 Professional
** Windows 2000 Gold
* Windows 2000 Server
** Windows 2000 Gold

'''Patch: Q259728_W2K_SP1_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q259728/nt5/en-us/q259728_w2k_sp1_x86_en.exe
===== 259728 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: q259728i.EXE'''

* http://download.microsoft.com/download/winntterminal/patch/q259728/nt4alpha/en-us/q259728i.exe
===== 259728 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q259728i.EXE'''

* http://download.microsoft.com/download/winntsp/patch/q259728/nt4alpha/en-us/q259728i.exe


-----

==== MS00-030 - Malformed Extension Data in URL Vulnerability ====
''Posted: 2000/05/11''

In compliance with RFC 2396, the algorithm in IIS that processes URLs has flexibility built in to allow it to process any arbitrary sequence of file extensions or subresource identifiers (referred to in the RFC as path_segments). By providing an URL that contains specially-malformed file extension information, a malicious user could misuse this flexibility in order to arbitrarily increase the work factor associated with parsing the URL. This could consume much or all of the CPU availability on the server and prevent useful work from being done.

===== 260205 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: myrdot4i.exe'''

* http://download.microsoft.com/download/iis40/patch/q260205/nt4alpha/en-us/myrdot4i.exe
===== 260205 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Gold

'''Patch: Q260205_W2K_SP1_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q260205/nt5/en-us/q260205_w2k_sp1_x86_en.exe


-----

==== MS00-031 - Undelimited .HTR Request and File Fragment Reading via .HTR Vulnerabilities ====
''Posted: 2000/05/10''

The vulnerabilities could, respectively, be used to slow an affected web server's response or to obtain the source code of certain types of files under very restricted conditions.

===== 260838 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: ismpst4i.exe'''

* http://download.microsoft.com/download/iis40/patch/q260838/nt4alpha/en-us/ismpst4i.exe
===== 267559 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: Q267559_W2K_SP2_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q267559/nt5/en-us/q267559_w2k_sp2_x86_en.exe


-----

==== MS00-032 - Protected Store Key Length Vulnerability ====
''Posted: 2000/06/01''

By design, the Protected Store should always encrypt the information using the strongest cryptography available on the machine.  An attacker would need to gain complete administrative control over the machine that houses the Protected Store in order to gain access to it, and even then would still need to mount a brute-force cryptographic attack against it.

===== 260219 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
* Windows 2000 Datacenter Server
** Windows 2000 Gold
* Windows 2000 Professional
** Windows 2000 Gold
* Windows 2000 Server
** Windows 2000 Gold

'''Patch: q260219_w2k_sp1_x86_en.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q260219/nt5/en-us/q260219_w2k_sp1_x86_en.exe


-----

==== MS00-033 - Frame Domain Verification and Unauthorized Cookie Access and Malformed Component Attribute Vulnerabilities ====
''Posted: 2000/05/17''

===== 269368 =====
'''Affected Products:'''

* Internet Explorer 4.01
** Internet Explorer 4.01 SP2

'''Patch: q269368.exe'''

* http://download.microsoft.com/download/ie55/secpac11/5.5/win98/en-us/q269368.exe
===== 269368 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 Gold

'''Patch: Q269368.exe'''

* http://www.microsoft.com/windows/ie/download/critical/patch11.htm


-----

==== MS00-034 - Office 2000 UA Control Vulnerability ====
''Posted: 2000/05/12''

===== 262767 =====
'''Affected Products:'''

* Access 2000
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a
* Excel 2000
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a
* FrontPage 2000
** FrontPage 2000 Gold
* Office 2000
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a
* Outlook 2000
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a
* Photo Draw 2000 Version 1
** Photo Draw 2000 Version 1 Gold
* Photo Draw 2000 Version 2
** Photo Draw 2000 Version 2 Gold
* PowerPoint 2000
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a
* Project 2000
** Project 2000 Gold
* Publisher 2000
** Publisher 2000 Gold
* Word 2000
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a
* Works 2000
** Works 2000 Gold

'''Patch: Uactlsec.exe'''

* http://download.microsoft.com/download/office2000pro/uactlsec/2000/win98/en-us/uactlsec.exe


-----

==== MS00-035 - SQL Server 7.0 Service Pack Password Vulnerability ====
''Posted: 2000/05/30''

===== 263968 =====
'''Affected Products:'''

* SQL Server 7.0
** SQL Server 7.0 SP1
** SQL Server 7.0 SP2
** SQL Server 7.0 SP3

'''Patch: killpwd.exe'''

* http://download.microsoft.com/download/sqlsvr2000/utility/2.0/w98nt42kmexp/en-us/killpwd.exe


-----

==== MS00-036 - ResetBrowser Frame and Host Announcement Frame Vulnerabilities ====
''Posted: 2000/05/25''

The two vulnerabilities are:The "ResetBrowser Frame" vulnerability, which affects both Windows NT 4.0 and Windows 2000. Like most implementations, the Windows implementation provides the ability for a Master Browser to shut down other browsers via the ResetBrowser frame. However, there is no capability to configure a browser to ignore ResetBrowser frames. This could allow a malicious user to shut down browsers on his subnet as a denial of service attack against the browser service, or, in the worst case, to shut down all browsers and declare his machine the new Master Browser.The "HostAnnouncement Flooding" vulnerability, which does not affect Windows 2000. Because there is no means of limiting the size of the browse table in Windows NT 4.0, a malicious user could send a huge number of bogus HostAnnouncement frames to a Master Browser. The resulting replication traffic could consume The "ResetBrowser Frame" vulnerability, which affects both Windows NT 4.0 and Windows 2000. Like most implementations, the Windows implementation provides the ability for a Master Browser to shut down other browsers via the ResetBrowser frame. However, there is no capability to configure a browser to ignore ResetBrowser frames. This could allow a malicious user to shut down browsers on his subnet as a denial of service attack against the browser service, or, in the worst case, to shut down all browsers and declare his machine the new Master Browser. The HostAnnouncement Flooding vulnerability, which does not affect Windows 2000. Because there is no means of limiting the size of the browse table in Windows NT 4.0, a malicious user could send a huge number of bogus HostAnnouncement frames to a Master Browser. The resulting replication traffic could consume most or all of the network bandwidth and cause other problems in processing the table as well.

===== 262694 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Professional
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: Q262694_W2K_SP2_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q262694/nt5/en-us/q262694_w2k_sp2_x86_en.exe
===== 262694 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q262694i.EXE'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;263307
===== 262694 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q262694ts.exe'''

* http://www.microsoft.com/technet/security/bulletin


-----

==== MS00-037 - HTML Help File Code Execution Vulnerability ====
''Posted: 2000/06/02''

The HTML Help facility provides the ability to launch code via shortcuts included in HTML Help files. If a compiled HTML Help (.chm) file were referenced by a malicious web site, it could potentially be used to launch code on a visiting user's computer without the user's approval. Such code could take any actions that the user could take, including adding, changing or deleting data, or communicating with a remote web site.

===== 259166 =====
'''Affected Products:'''

* Internet Explorer 4.0
** Internet Explorer 4.0 Gold
* Internet Explorer 4.01
** Internet Explorer 4.01 Gold
* Internet Explorer 5
** Internet Explorer 5 Gold

'''Patch: hhupd.exe'''

* http://download.microsoft.com/download/ie5/patch/1.0/w9xnt4/en-us/hhupd.exe
===== 259166 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 Gold

'''Patch: Q259166_W2K_SP1_x86_en.EXE'''

* http://download.microsoft.com/download/ie501/patch/1.0/nt5/en-us/q259166_w2k_sp1_x86_en.exe


-----

==== MS00-038 - Malformed Windows Media Encoder Request Vulnerability ====
''Posted: 2000/05/30''

===== 264133 =====
'''Affected Products:'''

* Windows Media Encoder 4.0
** Windows Media Encoder 4.0 Gold
* Windows Media Encoder 4.1
** Windows Media Encoder 4.1 Gold

'''Patch: WMSU20935a.EXE'''

* http://download.microsoft.com/download/winmediatech40/update/20935a/win98/en-us/wmsu20935a.exe


-----

==== MS00-039 - SSL Certificate Validation Vulnerabilities ====
''Posted: 2000/06/05''

===== 269368 =====
'''Affected Products:'''

* Internet Explorer 4.01
** Internet Explorer 4.01 SP2

'''Patch: q269368.exe'''

* http://download.microsoft.com/download/ie55/secpac11/5.5/win98/en-us/q269368.exe
===== 269368 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 Gold

'''Patch: Q269368.exe'''

* http://www.microsoft.com/windows/ie/download/critical/patch11.htm


-----

==== MS00-040 - Remote Registry Access Authentication Vulnerability ====
''Posted: 2000/06/08''

===== 264684 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q264684i.EXE'''

* http://download.microsoft.com/download/winntsp/patch/q264684/nt4/en-us/q264684i.exe
===== 264684 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q264684ts.exe'''

* http://www.microsoft.com/technet/security/bulletin


-----

==== MS00-041 - DTS Password Vulnerability ====
''Posted: 2000/06/13''

===== 264880 =====
'''Affected Products:'''

* SQL Server 7.0
** SQL Server 7.0 SP1
** SQL Server 7.0 SP2

'''Patch: DTSUIi.exe'''

* http://download.microsoft.com/download/sql70/DTSPWFix/7.0/WIN98/EN-US/DTSUIi.exe


-----

==== MS00-042 - Active Setup Download Vulnerability ====
''Posted: 2000/06/29''

The flaws in downloading .cab file would allow a malicious web site operator to download a Microsoft-signed .cab file as a means of overwriting a file on the user's machine. By overwriting system files, this could allow the malicious user to render the machine unusable.

===== 265258 =====
'''Affected Products:'''

* Internet Explorer 4.01
** Internet Explorer 4.01 SP2

'''Patch: q265258.exe'''

* http://download.microsoft.com/download/ie501sp1/secpach8/5.01_sp1/win98/en-us/q265258.exe
===== 265258 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP1

'''Patch: q265258.Exe'''

* http://www.microsoft.com/windows/ie/download/critical/patch8.htm
===== 265258 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 Gold

'''Patch: Q265258.exe'''

* http://www.microsoft.com/windows/ie/download/critical/patch8.htm
===== 269368 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 Gold

'''Patch: Q269368.Exe'''

* http://www.microsoft.com/windows/ie/download/critical/patch11.htm


-----

==== MS00-043 - Malformed E-mail Header Vulnerability ====
''Posted: 2000/07/18''

Under certain conditions, the vulnerability could allow a malicious user to cause code of his choice to execute on another user's computer.

===== 261255 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 Gold
* Outlook Express 5.01
** Internet Explorer 5.01 Gold

'''Patch: q261255.exe'''

* http://www.microsoft.com/windows/ie/download/critical/patch9.htm
===== 261255 =====
'''Affected Products:'''

* Internet Explorer 4.01
** Internet Explorer 4.01 SP2
* Outlook Express 4.01
** Internet Explorer 4.01 SP2

'''Patch: Q261255.exe'''

* http://www.microsoft.com/windows/ie/downloads/critical/patch9/default.asp


-----

==== MS00-044 - Absent Directory Browser Argument Vulnerability ====
''Posted: 2000/07/14''

The vulnerabilities could allow a malicious user to stop the web server from providing useful service, or to extract certain types of information from it.

===== 267559 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: htrdos4i.exe'''

* http://download.microsoft.com/download/winntsp/patch/q267559/nt4alpha/en-us/htrdos4i.exe
===== 267559 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: Q267559_W2K_SP2_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q267559/nt5/en-us/q267559_w2k_sp2_x86_en.exe


-----

==== MS00-045 - Persistent Mail-Browser Link Vulnerability ====
''Posted: 2000/07/20''

This could allow the browser window to retrieve the text of mails subsequently displayed in the preview pane, and relay it to the malicious user.

===== 261255 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 Gold
* Outlook Express 5.01
** Internet Explorer 5.01 Gold

'''Patch: q261255.exe'''

* http://www.microsoft.com/windows/ie/download/critical/patch9.htm
===== 261255 =====
'''Affected Products:'''

* Internet Explorer 4.01
** Internet Explorer 4.01 SP2
* Outlook Express 4.01
** Internet Explorer 4.01 SP2

'''Patch: Q261255.exe'''

* http://www.microsoft.com/windows/ie/downloads/critical/patch9/default.asp


-----

==== MS00-046 - Cache Bypass Vulnerability ====
''Posted: 2000/07/20''

If an HTML mail created an HTML file outside the cache, it would run in the Local Computer Zone when opened. This could allow it to open a file on the user's computer and send it a malicious user's web site. The vulnerability also could be used as a way of placing an executable file on the user's machine, which the malicious user would then seek to launch via some other means.

===== 261255 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 Gold
* Outlook Express 5.01
** Internet Explorer 5.01 Gold

'''Patch: q261255.exe'''

* http://www.microsoft.com/windows/ie/download/critical/patch9.htm
===== 261255 =====
'''Affected Products:'''

* Internet Explorer 4.01
** Internet Explorer 4.01 SP2
* Outlook Express 4.01
** Internet Explorer 4.01 SP2

'''Patch: Q261255.exe'''

* http://www.microsoft.com/windows/ie/downloads/critical/patch9/default.asp


-----

==== MS00-047 - NetBIOS Name Server Protocol Spoofing Vulnerability ====
''Posted: 2000/07/27''

By design, NBNS allows network peers to assist in managing name conflicts. Also by design, it is an unauthenticated protocol and therefore subject to spoofing. A malicious user could misuse the Name Conflict and Name Release mechanisms to cause another machine to conclude that its name was in conflict. Depending on the scenario, the machine would as a result either be unable to register a name on the network, or would relinquish a name it already had registered. The result in either case would be the same - the machine would not respond requests sent to the conflicted name anymore.  This will reduce but not eliminate the threat of spoofing. Customers needing additional protection may wish to consider using IPSec in Windows 2000 to authenticate all sessions on ports 137-139

===== 269239 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Professional
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: Q269239_W2K_SP2_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q269239/nt5/en-us/q269239_w2k_sp2_x86_en.exe
===== 269239 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: q269239i.exe'''

* http://download.microsoft.com/download/winntsp/patch/q269239/nt4alpha/en-us/q269239i.exe
===== 269239 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q269239i.exe'''

* http://download.microsoft.com/download/winntterminal/patch/q269239/nt4/en-us/q269239i.exe


-----

==== MS00-048 - Stored Procedure Permissions Vulnerability ====
''Posted: 2000/07/07''

===== 266766 =====
'''Affected Products:'''

* Microsoft Data Engine (MSDE)
** SQL Server 7.0 SP2
* SQL Server 7.0
** SQL Server 7.0 SP2

'''Patch: S70843i.exe'''

* http://download.microsoft.com/download/sql70/satspfix/7.0/WIN98/EN-US/S70843i.exe


-----

==== MS00-049 - Office HTML Script and IE Script Vulnerabilities ====
''Posted: 2000/07/13''

===== 268365 =====
'''Affected Products:'''

* Excel 2000
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a
* Office 2000
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a
* PowerPoint 2000
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a

'''Patch: Addinsec.exe'''

* http://office.microsoft.com/downloads/2000/addinsec.aspx
===== 268365 =====
'''Affected Products:'''

* Office 97
** Office 97 Gold
* PowerPoint 97
** Office 97 Gold

'''Patch: ppt97sec.EXE'''

* http://office.microsoft.com/downloads/9798/ppt97sec.aspx
===== 269368 =====
'''Affected Products:'''

* Internet Explorer 4.01
** Internet Explorer 4.01 SP2

'''Patch: q269368.exe'''

* http://download.microsoft.com/download/ie55/secpac11/5.5/win98/en-us/q269368.exe
===== 269368 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP1

'''Patch: q269368.Exe'''

* http://www.microsoft.com/windows/ie/download/critical/patch11.htm
===== 269368 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 Gold

'''Patch: Q269368.exe'''

* http://www.microsoft.com/windows/ie/download/critical/patch11.htm
===== 269368 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 Gold

'''Patch: Q269368.Exe'''

* http://www.microsoft.com/windows/ie/download/critical/patch11.htm


-----

==== MS00-050 - Telnet Server Flooding Vulnerability ====
''Posted: 2000/07/24''

The denial of service can occur when a malicious client sends a particular malformed string to the server through the Telnet service provided as part of Windows 2000 products.

===== 267843 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Professional
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: q267843_w2k_sp2_x86_en.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q267843/nt5/en-us/q267843_w2k_sp2_x86_en.exe


-----

==== MS00-051 - Excel REGISTER.ID Function Vulnerability ====
''Posted: 2000/07/26''

===== 269252 =====
'''Affected Products:'''

* Excel 97
** Office 97 SR-2/SR-2b
* Office 97
** Office 97 SR-2/SR-2b

'''Patch: xl8p10pkg.exe'''

* http://download.microsoft.com/download/excel97win/xl8p10pk/97/win98/en-us/xl8p10pkg.exe
===== 269263 =====
'''Affected Products:'''

* Excel 2000
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a
* Office 2000
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a

'''Patch: xl9p3pkg.exe'''

* http://download.microsoft.com/download/excel2000/xl9p3pkg/2000/win98/en-us/xl9p3pkg.exe


-----

==== MS00-052 - Relative Shell Path Vulnerability ====
''Posted: 2000/07/28''

Because of the circumstances in place at system startup time, the normal search order would cause any file named Explorer.exe in the %Systemdrive%\ directory to be loaded in place of the bona fide version. This could provide an opportunity for a malicious user to cause code of his choice to run when another user subsequently logged onto the same machine.

===== 269049 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Professional
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: q269049_w2k_sp2_x86_en.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q269049/nt5/en-us/q269049_w2k_sp2_x86_en.exe
===== 269049 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: q269049i.exe'''

* http://download.microsoft.com/download/winntterminal/patch/q269049/nt4alpha/en-us/q269049i.exe
===== 269049 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q269049i.EXE'''

* http://download.microsoft.com/download/winntsp/patch/q269049/nt4alpha/en-us/q269049i.exe


-----

==== MS00-053 - Service Control Manager Named Pipe Impersonation Vulnerability ====
''Posted: 2000/08/02''

The Service Control Manager (services.exe) is an administrative tool provided in Windows 2000 that allows system services (Server, Workstation, Alerter, ClipBook, etc.) to be created or modified. The SCM creates a named pipe for each service as it starts, however, should a malicious program predict and create the named pipe for a specific service before the service starts, the program could impersonate the privileges of the service. This could allow the malicious program to run in the context of the given service, with either specific user or LocalSystem privileges. The primary risk from this vulnerability is that a malicious user could exploit this vulnerability to gain additional privileges on the local machine. A malicious user would require the ability to log onto the target machine interactively and run arbitrary programs in order to exploit this vulnerability, and as a result, workstations and terminal servers would be at greatest risk.

===== 269523 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Professional
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: Q269523_W2K_SP2_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q269523/nt5/en-us/q269523_w2k_sp2_x86_en.exe


-----

==== MS00-054 - Malformed IPX Ping Packet Vulnerability ====
''Posted: 2000/08/03''

===== 265334 =====
'''Affected Products:'''

* Windows 95
** Windows 95 Gold
** Windows 95 SR 2.1
** Windows 95 SR 2.5

'''Patch: 265334US5.EXE'''

* http://download.microsoft.com/download/win95/update/8982/w95/en-us/265334us5.exe
===== 265334 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold

'''Patch: 265334USA8.EXE'''

* http://download.microsoft.com/download/win98/update/8982/w98/en-us/265334usa8.exe


-----

==== MS00-055 - Scriptlet Rendering Vulnerability ====
''Posted: 2000/08/09''

===== 269368 =====
'''Affected Products:'''

* Internet Explorer 4.01
** Internet Explorer 4.01 SP2

'''Patch: q269368.exe'''

* http://download.microsoft.com/download/ie55/secpac11/5.5/win98/en-us/q269368.exe
===== 269368 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP1

'''Patch: q269368.Exe'''

* http://www.microsoft.com/windows/ie/download/critical/patch11.htm
===== 269368 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 Gold

'''Patch: Q269368.exe'''

* http://www.microsoft.com/windows/ie/download/critical/patch11.htm
===== 269368 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 Gold

'''Patch: Q269368.Exe'''

* http://www.microsoft.com/windows/ie/download/critical/patch11.htm


-----

==== MS00-056 - Microsoft Office HTML Object Tag Vulnerability ====
''Posted: 2000/08/09''

===== 269880 =====
'''Affected Products:'''

* Excel 2000
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a
* Office 2000
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a
* PowerPoint 2000
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a
* Word 2000
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a

'''Patch: Of9data.exe'''

* http://office.microsoft.com/downloads/2000/of9data.aspx


-----

==== MS00-057 - File Permission Canonicalization Vulnerability ====
''Posted: 2000/08/10''

A canonicalization error can, under certain conditions, cause IIS 4.0 or 5.0 to apply incorrect permissions to certain types of files. If an affected file residing in a folder with restrictive permissions were requested via a particular type of malformed URL, the permissions actually used would be those of a folder in the file's parentage chain, but not those of the folder the file actually resides in. If the ancestor folder's permissions were more permissive than those of the correct folder, the malicious user would gain additional privileges to the affected file.

===== 269862 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: prmcan4i.exe'''

* http://download.microsoft.com/download/winntsp/patch/q269862/nt4alpha/en-us/prmcan4i.exe
===== 269862 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: Q269862_W2K_SP2_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q269862/nt5/en-us/q269862_w2k_sp2_x86_en.exe


-----

==== MS00-058 - Specialized Header Vulnerability ====
''Posted: 2000/08/14''

If an IIS server receives a file request that contains a specialized header as well as one of several particular characters at the end, the expected ISAPI extension processing may not occur. The result is that the source code of the file would be sent to the browser.

===== 256888 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Gold

'''Patch: Q256888_W2K_SP1_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q256888/nt5/en-us/q256888_w2k_sp1_x86_en.exe


-----

==== MS00-059 - Java VM Applet Vulnerability ====
''Posted: 2000/08/21''

This vulnerability would allow an applet to bypass this restriction. If a user visited a web site operated by a malicious user, the site could start an applet that would be able to establish a connection with another web site and forward any information from the web session to the malicious user?s site.

===== 271752 =====
'''Affected Products:'''

* Microsoft Virtual Machine (VM)
** Microsoft Virtual Machine (VM) Gold
* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold
* Windows Me
** Windows Me Gold
* Windows NT Server 4.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: msjavx86.exe'''

* http://www.microsoft.com/java/vm/dl_vm40.htm
===== 271752 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
* Windows 2000 Professional
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Service Pack 1

'''Patch: Q287030_W2K_SP2_x86_EN.exe'''

* http://windowsupdate.microsoft.com


-----

==== MS00-060 - IIS Cross-Site Scripting Vulnerabilities ====
''Posted: 2000/08/25''

If a malicious web site operator were able to lure a user to his site, and had identified a third-party web site that was vulnerable to CSS, he could potentially use the vulnerability to "inject" script into a web page created by the other web site, which would then be delivered to the user. The net effect would be to cause the malicious user's script to run on the user's machine using the trust afforded the other site. The vulnerability can affect any software that runs on a web server, accepts user input, and blindly uses it to generate web pages.

===== 260347 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: crsscri.exe'''

* http://download.microsoft.com/download/winntsp/patch/q275657/nt4/en-us/crsscri.exe
===== 275657 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: Q275657_W2K_SP2_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q275657/nt5/en-us/q275657_w2k_sp2_x86_en.exe


-----

==== MS00-061 - Money Password Vulnerability ====
''Posted: 2000/08/25''

===== 272232 =====
'''Affected Products:'''

* Money 2000
** Money 2000 Gold
* Money 2001
** Money 2001 Gold

'''Patch: 272232_MON_8.0'''

* on the tools menu, click update internet information.


-----

==== MS00-062 - Local Security Policy Corruption Vulnerability ====
''Posted: 2000/08/28''

This vulnerability could allow a malicious user to corrupt parts of a Windows 2000 system's local security policy, with the effect of disrupting domain membership and trust relationship information. If a workstation or member server were attacked via this vulnerability, it would effectively remove the machine from the domain; if a domain controller were attacked, it could no longer process domain logon requests.

===== 269609 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
* Windows 2000 Server
** Windows 2000 Gold

'''Patch: Q269609_W2K_SP1_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q269609/nt5/en-us/q269609_w2k_sp1_x86_en.exe


-----

==== MS00-063 - Invalid URL Vulnerability ====
''Posted: 2000/09/05''

===== 271652 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q271652i.EXE'''

* http://www.microsoft.com/ntserver/nts/downloads/critical/q271652/xdownload.asp
===== 271652 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q271652I.EXE'''

* http://download.microsoft.com/download/winntsp/patch/q271652/nt4/en-us/q271652i.exe


-----

==== MS00-064 - Unicast Service Race Condition Vulnerability ====
''Posted: 2000/09/06''

===== 273014 =====
'''Affected Products:'''

* Windows Media Services 4.0
** Windows NT4 Service Pack 6a
* Windows Media Services 4.1
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows NT4 Service Pack 6a

'''Patch: WMSU27678.EXE'''

* http://download.microsoft.com/download/winmediatech40/update/27678/nt45/en-us/wmsu27678.exe


-----

==== MS00-065 - Still Image Service Privilege Escalation Vulnerability ====
''Posted: 2000/09/06''

An unchecked buffer exists in the 'Still Image Service' on Windows 2000 hosts. A locally logged-on user can execute malicious code that will use the still image service to escalate their permissions equal to that of the Still Image Service, namely, LocalSystem.

===== 272736 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Professional
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: q272736_w2k_sp2_x86_en.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q272736/nt5/en-us/q272736_w2k_sp2_x86_en.exe


-----

==== MS00-066 - Malformed RPC Packet Vulnerability ====
''Posted: 2000/09/11''

A denial of service can occur when a malicious client sends a particular malformed RPC (Remote Procedure Call) packet to the server, causing the RPC service to fail.  A server behind a firewall that blocks ports 135-139 and 445 will not be affected by this vulnerability from the Internet.

===== 272303 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Professional
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: q272303_w2k_sp2_x86_en.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q272303/nt5/en-us/q272303_w2k_sp2_x86_en.exe


-----

==== MS00-067 - Windows 2000 Telnet Client NTLM Authentication Vulnerability ====
''Posted: 2000/09/14''

A vulnerability exists because the client will, by default, perform NTLM authentication when connecting to the remote telnet server. This could allow a malicious user to obtain another user's NTLM authentication credentials without the user's knowledge. A malicious user could exploit this behavior by creating a carefully-crafted HTML document that, when opened, could attempt to initiate a Telnet session to a rogue telnet server - automatically passing NTLM authentication credentials to the malicious server's owner. The malicious user could then use an offline brute force attack to derive the password or, with specialized tools, could submit a variant of these credentials in an attempt to access protected resources.

===== 272743 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Professional
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: q272743_w2k_sp2_x86_en.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q299553/nt5/en-us/q299553_w2k_sp3_x86_en.exe


-----

==== MS00-068 - OCX Attachment Vulnerability ====
''Posted: 2000/09/26''

===== 274303 =====
'''Affected Products:'''

* Windows Media Player 7.0
** Windows Media Player 7.0 Gold

'''Patch: WMSU28412.EXE'''

* http://download.microsoft.com/download/winmediaplayer/update/28412/w982kme/en-us/wmsu28412.exe


-----

==== MS00-069 - Simplified Chinese IME State Recognition Vulnerability ====
''Posted: 2000/09/29''

Input Method Editors (IMEs) enable character-based languages such as Chinese to be entered via a standard 101-key keyboard. When an IME is installed as part of the system setup, it is available by default as part of the logon screen. In such a case, the IME should recognize that it is running in the context of the LocalSystem and not in the context of a user, and restrict certain functions.  This vulnerability only affects the Simplified Chinese version of Windows 2000 by default - customers using any other version of Windows 2000 are not affected. Even if the Simplified Chinese IMEs were installed after setup as part of a language pack, it would not be present as part of the logon screen and therefore would not pose a security threat. The vulnerability allows only the local machine to be compromised, but does not grant any domain privileges (unless, of course, the local machine happens to be a domain controller). Because the vulnerability is exposed as part of the logon screen, it could only be exploited by a user who had physical access to a keyboard, or who could start a terminal server session on an affected machine.

===== 270676 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Professional
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: q270676_w2k_sp2_x86_en.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q270676/nt5/en-us/q270676_w2k_sp2_x86_en.exe


-----

==== MS00-070 - Multiple LPC and LPC Ports Vulnerabilities ====
''Posted: 2000/10/03''

The "Invalid LPC Request" vulnerability, which affects only Windows NT 4.0. By levying an invalid LPC request, it would be possible to make the affected system fail. The "LPC Memory Exhaustion" vulnerability, which affects both Windows NT 4.0 and Windows 2000. By levying spurious LPC requests, it could be possible to increase the number of queued LPC messages to the point where kernel memory was depleted. The "Predictable LPC Message Identifier" vulnerability, which affects both Windows NT 4.0 and Windows 2000. Any process that knows the identifier of an LPC message can access it; however, the identifiers can be predicted. In the simplest case, a malicious user could access other process' LPC ports and feed them random data as a denial of service attack. In the worst case, it could be possible under certain conditions to send bogus requests to a privileged process in order to gain additional local privileges.  A new variant of the previously-reported "Spoofed LPC Port Request" vulnerability. This vulnerability affects Windows NT 4.0 and Windows 2000, and could, under a very restricted set of conditions, allow a malicious user to create a process that would run under the security context of an already-running process, potentially including System processes. Because LPC can only be used on the local machine, none of these vulnerabilities could be exploited remotely. Instead, a malicious user could only exploit them on machines that he could log onto interactively. Typically, workstations and terminal servers would be chiefly at risk, because, if normal security practices have been followed, normal users will not be allowed to log onto critical servers interactively. This also means that, even in the worst case, the vulnerability would only confer additional local - not domain - privileges on the malicious user

===== 266433 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Professional
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: q266433_w2k_sp2_x86_en.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q266433/nt5/en-us/q266433_w2k_sp2_x86_en.exe
===== 266433 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: q266433i.exe'''

* http://download.microsoft.com/download/winntsp/patch/q266433/nt4/en-us/q266433i.exe


-----

==== MS00-071 - Word Mail Merge Vulnerability ====
''Posted: 2000/10/05''

===== 272749 =====
'''Affected Products:'''

* Word 97
** Office 97 SR-2/SR-2b

'''Patch: wdac97.exe'''

* http://download.microsoft.com/download/word97win/patch/4.71.1015.0/w98nt42kme/en-us/wd97mcrs.exe
===== 274226 =====
'''Affected Products:'''

* Word 2000
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a

'''Patch: wrdacc.exe'''

* http://download.microsoft.com/download/word2000/wrdacc/2000/win98/en-us/wrdacc.exe


-----

==== MS00-072 - Share Level Password Vulnerability ====
''Posted: 2000/10/10''

===== 273991 =====
'''Affected Products:'''

* Windows 95
** Windows 95 Gold

'''Patch: 273991USA5.EXE'''

* http://download.microsoft.com/download/win95/update/11958/w95/en-us/273991usa5.exe
===== 273991 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
* Windows 98 SE
** Windows 98 Gold

'''Patch: 273991USA8.EXE'''

* http://download.microsoft.com/download/win98se/update/11958/w98/en-us/273991usa8.exe
===== 273991 =====
'''Affected Products:'''

* Windows Me
** Windows Me Gold

'''Patch: 273991usam.exe'''

* http://download.microsoft.com/download/winme/update/11958/winme/en-us/273991usam.exe


-----

==== MS00-073 - Malformed IPX NMPI Packet Vulnerability ====
''Posted: 2000/10/11''

===== 273727 =====
'''Affected Products:'''

* Windows 95
** Windows 95 Gold
** Windows 95 SR 2.1
** Windows 95 SR 2.5

'''Patch: 273727USA5.EXE'''

* http://download.microsoft.com/download/win95/update/11974/w95/en-us/273727usa5.exe
===== 273727 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold

'''Patch: 273727USA8.EXE'''

* http://download.microsoft.com/download/win98/update/11974/w98/en-us/273727usa8.exe
===== 273727 =====
'''Affected Products:'''

* Windows Me
** Windows Me Gold

'''Patch: 273727USAM.EXE'''

* http://download.microsoft.com/download/winme/update/11974/winme/en-us/273727usam.exe


-----

==== MS00-074 - WebTV for Windows Denial of Service Vulnerability ====
''Posted: 2000/10/11''

===== 274113 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold

'''Patch: 274113USA8.EXE'''

* http://download.microsoft.com/download/win98se/update/12278/w98/en-us/274113usa8.exe
===== 274113 =====
'''Affected Products:'''

* Windows Me
** Windows Me Gold

'''Patch: 274113usam.exe'''

* http://download.microsoft.com/download/winme/update/12278/winme/en-us/274113usam.exe


-----

==== MS00-075 - Microsoft VM ActiveX Component Vulnerability ====
''Posted: 2000/10/12''

If a user visited a malicious web site that exploited this vulnerability, a Java applet on one of the web pages could run any desired ActiveX control, even ones that are marked as unsafe for scripting. This would enable the malicious web site operator to take any desired action on the user?s machine.

===== 275609 =====
'''Affected Products:'''

* Microsoft Virtual Machine (VM)
** Microsoft Virtual Machine (VM) Gold
* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold
* Windows Me
** Windows Me Gold
* Windows NT Server 4.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: msjavx86.exe'''

* http://www.microsoft.com/java/vm/dl_vm40.htm
===== 287030 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
* Windows 2000 Professional
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Service Pack 1

'''Patch: Q287030_W2K_SP2_x86_EN.exe'''

* http://windowsupdate.microsoft.com


-----

==== MS00-076 - Cached Web Credentials Vulnerability ====
''Posted: 2000/10/12''

When a user authenticates to a secured web page via Basic Authentication, IE caches the userid and password that were used, in order to minimize the number of times the user must authenticate to the same site. By design, IE should only send the cached credentials to secured pages on the site. However, it will actually send them to non-secure pages on the site as well. If a malicious user had complete control of another user?s network communications, he could wait until another user logged onto a secured site, then spoof a request for a non-secured page in order to collect the credentials.

===== 273868 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP1

'''Patch: q273868.exe'''

* http://download.microsoft.com/download/ie501sp1/q273868/5.01_sp1/win98/en-us/q273868.exe


-----

==== MS00-077 - NetMeeting Desktop Sharing Vulnerability ====
''Posted: 2000/10/13''

The denial of service can occur when a malicious client sends a particular malformed string to a port which the NetMeeting service is listening on and with Remote Desktop Sharing enabled.

===== 273854 =====
'''Affected Products:'''

* NetMeeting
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: NM30.EXE'''

* http://download.microsoft.com/download/netmeeting/sp/3.01/w9xnt4/en-us/nm30.exe
===== 299796 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: Q299796_W2k_SP3_x86_en.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q299796/nt5/en-us/q299796_w2k_sp3_x86_en.exe


-----

==== MS00-078 - Web Server Folder Traversal Vulnerability ====
''Posted: 2000/10/17''

Due to a canonicalization error in IIS 4.0 and 5.0, a particular type of malformed URL could be used to access files and folders that lie anywhere on the logical drive that contains the web folders. This would potentially enable a malicious user who visited the web site to gain additional privileges on the machine ? specifically, it could be used to gain privileges commensurate with those of a locally logged-on user. Gaining these permissions would enable the malicious user to add, change or delete data, run code already on the server, or upload new code to the server and run it. 

===== 269862 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: prmcan4i.exe'''

* http://download.microsoft.com/download/winntsp/patch/q269862/nt4alpha/en-us/prmcan4i.exe
===== 269862 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: Q269862_W2K_SP2_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q269862/nt5/en-us/q269862_w2k_sp2_x86_en.exe


-----

==== MS00-079 - HyperTerminal Buffer Overflow Vulnerability ====
''Posted: 2000/10/18''

===== 304158 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q304158i.exe'''

* http://www.microsoft.com/ntserver/nts/downloads/critical/q304158/download.asp
===== 274548 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold

'''Patch: 274548USA8.EXE'''

* http://download.microsoft.com/download/win98/update/12395/w98/en-us/274548usa8.exe
===== 274548 =====
'''Affected Products:'''

* Windows Me
** Windows Me Gold

'''Patch: 274548usam.exe'''

* http://download.microsoft.com/download/winme/update/12395/winme/en-us/274548usam.exe
===== 276471 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: Q276471_W2K_SP3_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q276471/nt5/en-us/q276471_w2k_sp3_x86_en.exe


-----

==== MS00-080 - Session ID Cookie Marking Vulnerability ====
''Posted: 2000/10/23''

If a user initiated a session with a secure web page, a Session ID cookie would be generated and sent to the user, protected by SSL. But if the user subsequently visited a non-secure page on the same site, the same Session ID cookie would be exchanged, this time in plaintext. If a malicious user had complete control over the communications channel, he could read the plaintext Session ID cookie and use it to connect to the user?s session with the secure page. At that point, he could take any action on the secure page that the user could take.

===== 274149 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: Q274149_W2K_SP2_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q274149/nt5/en-us/q274149_w2k_sp2_x86_en.exe
===== 274149 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 6a

'''Patch: secsesi.exe'''

* http://www.microsoft.com/ntserver/nts/downloads/critical/q274149/download.asp


-----

==== MS00-081 - New Variant of VM File Reading Vulnerability ====
''Posted: 2000/10/25''

The version of the Microsoft VM that ships with Microsoft Internet Explorer 4.x and Internet Explorer 5.x contains a security vulnerability that could allow a Java applet to operate outside the bounds set by the sandbox. A malicious user could write a Java applet that could read ? but not change, delete or add ? files from the computer of a person who visited his site or read web content from inside an intranet if the malicious site is visited by a computer from within that intranet.

===== 277014 =====
'''Affected Products:'''

* Microsoft Virtual Machine (VM)
** Microsoft Virtual Machine (VM) Gold
* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold
* Windows Me
** Windows Me Gold
* Windows NT Server 4.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: msjavx86.Exe'''

* http://www.microsoft.com/java/vm/dl_vm40.htm
===== 287030 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
* Windows 2000 Professional
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Service Pack 1

'''Patch: Q287030_W2K_SP2_x86_EN.exe'''

* http://windowsupdate.microsoft.com


-----

==== MS00-082 - Malformed MIME Header Vulnerability ====
''Posted: 2000/10/31''

===== 248838 =====
'''Affected Products:'''

* Exchange Server 5.5
** Exchange Server 5.5 SP3

'''Patch: Q248838engI.EXE'''

* http://download.microsoft.com/download/exch55/patch/5.5.2653.22/nt45/en-us/q248838engi.exe


-----

==== MS00-083 - Netmon Protocol Parsing Vulnerability ====
''Posted: 2000/11/01''

===== 273476 =====
'''Affected Products:'''

* Systems Management Server 2.0
** Systems Management Server 2.0 Gold
** Systems Management Server 2.0 SP1
** Systems Management Server 2.0 SP2

'''Patch: Q273476c.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q274835/nt5/en-us/q274835_w2k_sp2_x86_en.exe
===== 273476 =====
'''Affected Products:'''

* Systems Management Server 1.2
** Systems Management Server 1.2 SP4

'''Patch: Q273476c.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q274835/nt5/en-us/q274835_w2k_sp2_x86_en.exe
===== 274835 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: Q274835_W2K_SP2_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q274835/nt5/en-us/q274835_w2k_sp2_x86_en.exe
===== 274835 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: Q274835i.EXE'''

* http://www.microsoft.com/ntserver/nts/downloads/critical/q274835/download.asp
===== 274835 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q274835ts.exe'''

* http://www.microsoft.com/technet/security/bulletin


-----

==== MS00-084 - Indexing Services Cross Site Scripting Vulnerability ====
''Posted: 2000/11/02''

The Cross-Site Scripting (CSS) vulnerability results when web applications don?t properly validate inputs before using them in dynamic web pages. If a malicious web site operator were able to lure a user to his site, and had identified a third-party web site that was vulnerable to CSS, he could potentially use the vulnerability to ?inject? script into a web page created by the other web site, which would then be delivered to the user. The net effect would be to cause the malicious user?s script to run on the user?s machine using the trust afforded the other site. The vulnerability can affect any software that runs on a web server, accepts user input, and uses it to generate web pages without sufficient validation. Microsoft has identified an Indexing Service component (CiWebHitsFile) that, when called from a specially crafted URL, is vulnerable to this scenario.

===== 278499 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q278499i.EXE'''

* http://download.microsoft.com/download/2/6/2/26287382-4eff-4e39-b331-624eba8abdae/Q278499i.EXE
===== 278499 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: MS00-084-1'''

* NA
===== 278499 =====
'''Affected Products:'''

* Indexing Services for Windows 2000
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Professional
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: Q278499_W2K_SP2_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q278499/nt5/en-us/q278499_w2k_sp2_x86_en.exe


-----

==== MS00-085 - ActiveX Parameter Validation Vulnerability ====
''Posted: 2000/11/02''

An ActiveX control that ships as part of Windows 2000 contains an unchecked buffer. If the control was called from a web page or HTML mail using a specially-malformed parameter, it would be possible to cause code to execute on the machine via a buffer overrun. This could potentially enable a malicious user to take any desired action on the user's machine, limited only by the permissions of the user.

===== 278511 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Professional
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: Q278511_W2K_SP2_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q278511/nt5/en-us/q278511_w2k_sp2_x86_en.exe


-----

==== MS00-086 - Web Server File Request Parsing Vulnerability ====
''Posted: 2000/11/06''

The ability to execute operating system commands on the web server would enable a malicious user to take virtually any action that an interactively-logged on user could take.  He could, for instance, add, delete or change files on the server, run code that was already on the server, or upload code of his choice and run it.

===== 277873 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: arbexei.exe'''

* http://download.microsoft.com/download/winntsp/patch/q277873/nt4/en-us/arbexei.exe
===== 277873 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: Q277873_W2K_SP2_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q293826/nt5/en-us/q293826_w2k_sp3_x86_en.exe


-----

==== MS00-087 - Terminal Server Login Buffer Overflow Vulnerability ====
''Posted: 2000/11/08''

===== 277910 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 4
** Windows NT4 Terminal Server Service Pack 5
** Windows NT4 Terminal Server Service Pack 6

'''Patch: q277910i.exe'''

* http://download.microsoft.com/download/winntterminal/patch/q277910/nt4/en-us/q277910i.exe


-----

==== MS00-088 - Exchange User Account Vulnerability ====
''Posted: 2000/11/16''

===== 278523 =====
'''Affected Products:'''

* Exchange 2000 Enterprise Server
** Exchange 2000 Gold
* Exchange 2000 Server
** Exchange 2000 Gold

'''Patch: Q278523ENGI.EXE'''

* http://download.microsoft.com/download/exchangeentserver/patch/06.00.26.4418/nt5/en-us/q278523engi.exe
===== 278523 =====
'''Affected Products:'''

* Exchange Server 5.0
** Exchange Server 5.0 SP1
** Exchange Server 5.0 SP2

'''Patch: ES50-278523'''

* NA


-----

==== MS00-089 - Domain Account Lockout Vulnerability ====
''Posted: 2000/11/21''

===== 274372 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
* Windows 2000 Professional
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Service Pack 1

'''Patch: q274372_w2k_sp2_x86_en.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q274372/nt5/en-us/q274372_w2k_sp2_x86_en.exe


-----

==== MS00-090 - .ASX Buffer Overrun and .WMS Script Execution Vulnerabilities ====
''Posted: 2000/11/22''

===== 280419 =====
'''Affected Products:'''

* Windows Media Player 6.4
** Windows Media Player 6.4 Gold

'''Patch: Wmsu33995.exe'''

* http://www.microsoft.com/downloads/release.asp?releaseid=26069
===== 280419 =====
'''Affected Products:'''

* Windows Media Player 7.0
** Windows Media Player 7.0 Gold

'''Patch: wmsu34419.EXE'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;298598


-----

==== MS00-091 - Incomplete TCP/IP Packet Vulnerability ====
''Posted: 2000/11/30''

There is a denial of service vulnerability that affects Windows NT 4.0 Windows 95, 98, 98 Second Edition and Windows Me. By sending a flood of specially malformed TCP/IP packets to a victim?s machine a malicious user could cause either of two effects. In the most likely case, the flood would temporarily prevent any networking resources on an affected computer from responding to client requests; as soon as the packets stopped arriving, the machine would resume normal operation. In a less likely case, the system could hang, and remain unresponsive until it was rebooted. This vulnerability could only be exploited if TCP port 139 was open on the target machine. If the server service or File/Print sharing were disabled on a computer it would not be susceptible to this vulnerability

===== 275567 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: q275567i.exe'''

* http://download.microsoft.com/download/winntsp/patch/q275567/nt4/en-us/q275567i.exe
===== 275567 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold
* Windows Me
** Windows Me Gold

'''Patch: q275567i.exE'''

* http://download.microsoft.com/download/winntsp/patch/q275567/nt4/en-us/q275567i.exe
===== 275567 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q275567ts.exe'''

* http://www.microsoft.com/technet/security/bulletin


-----

==== MS00-092 - Extended Stored Procedure Parameter Parsing Vulnerability ====
''Posted: 2000/12/01''

===== 280380 =====
'''Affected Products:'''

* SQL Server 7.0
** SQL Server 7.0 SP2

'''Patch: s70918i.exE'''

* http://download.microsoft.com/download/sql70/patch/7.0/win98me/en-us/s70918i.exe
===== 280380 =====
'''Affected Products:'''

* Microsoft SQL Server 2000 Desktop Engine (MSDE 2000)
** Microsoft SQL Server 2000 Desktop Engine (MSDE 2000) Gold
* SQL Server 2000
** SQL Server 2000 Gold

'''Patch: s80233i.exe'''

* http://download.microsoft.com/download/sqlsvr2000/ss2kxp/2000/w98nt42kme/en-us/s80233i.exe


-----

==== MS00-093 - Browser Print Template and File Upload via Form Vulnerabilities ====
''Posted: 2000/12/01''

===== 279328 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP1

'''Patch: q279328.exe'''

* http://download.microsoft.com/download/ie501sp1/q279328/5.01_sp1/win98/en-us/q279328.exe
===== 279328 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP1

'''Patch: q279328.Exe'''

* http://download.microsoft.com/download/ie55sp1/q279328/5.5_sp1/win98me/en-us/q279328.exe
===== 279328 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 Gold

'''Patch: Q279328.exe'''

* http://download.microsoft.com/download/ie55/q279328/5.5/win98me/en-us/q279328.exe


-----

==== MS00-094 - Phone Book Service Buffer Overflow Vulnerability ====
''Posted: 2000/12/04''

===== 276575 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: Q276575_W2K_SP2_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q276575/nt5/en-us/q276575_w2k_sp2_x86_en.exe
===== 276575 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: q276575i.exe'''

* http://download.microsoft.com/download/winntsp/patch/q276575/nt4/en-us/q276575i.exe
===== 276575 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q276575ts.exe'''

* http://www.microsoft.com/technet/security/bulletin


-----

==== MS00-095 - Registry Permissions Vulnerability ====
''Posted: 2000/12/06''

===== 265714 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q265714i.exe'''

* http://www.microsoft.com/downloads/release.asp?releaseid=28812
===== 265714 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q265714i.EXE'''

* http://download.microsoft.com/download/winntterminal/patch/q265714/nt4/en-us/q265714i.exe


-----

==== MS00-096 - SNMP Parameters Vulnerability ====
''Posted: 2000/12/06''

This vulnerability is virtually identical to the SNMP Parameters vulnerability affecting Windows NT 4.0 systems and discussed in Microsoft Security Bulletin MS00-095. The SNMP Parameters key, HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SNMP\Parameters, provides the SNMP community name and SNMP management station identifiers, if they exist. SNMP community strings may allow either read or read-write access to the SNMP service. If no read-write access strings exist, the user could only use this vulnerability to read information through SNMP that is normally available to local users. If read-write access strings do exist, a malicious user could use this vulnerability to make changes to any system using the same community string for read-write access. It is important to remember that SNMP v1.0 has no security by design, and any user who could monitor network traffic could also obtain the SNMP community strings. SNMP is not installed on Windows NT 4.0 machines by default. It should be noted that the information revealed by this vulnerability is normally transmitted in plaintext across SNMP-managed networks. As a result, even in the absence of incorrect registry permissions, a malicious user could carry out the same attack if she could monitor network communicatio

===== 266794 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Professional
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: Q266794_W2K_SP2_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q266794/nt5/en-us/q266794_w2k_sp2_x86_en.exe


-----

==== MS00-097 - Severed Windows Media Server Connection Vulnerability ====
''Posted: 2000/12/15''

===== 281256 =====
'''Affected Products:'''

* Windows Media Services 4.0
** Windows NT4 Service Pack 6a
* Windows Media Services 4.1
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows NT4 Service Pack 6a

'''Patch: WMSU35924.EXE'''

* http://download.microsoft.com/download/winmediatech40/update/35924/nt45/en-us/wmsu35924.exe


-----

==== MS00-098 - Indexing Service File Enumeration Vulnerability ====
''Posted: 2000/12/19''

An ActiveX control that ships as part of Indexing Service is incorrectly marked as safe for scripting, thereby enabling it to be executed by web site applications. The control at issue here could be used to enumerate files and folders, and to view their properties. It would not be necessary for Indexing Service to be running in order for the vulnerability to be exploited; however, if it were running, the control also could be used to search for files containing specific words. The vulnerability could not be used to read files, except via a fairly unlikely scenario discussed in detail in the FAQ. It could not be used under any conditions to change, add or delete information on the user?s computer.

===== 280838 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Professional
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: Q280838_W2K_SP2_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q280838/nt5/en-us/q280838_w2k_sp2_x86_en.exe


-----

==== MS00-099 - Directory Service Restore Mode Password Vulnerability ====
''Posted: 2000/12/20''

===== 271641 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: Q271641_W2K_SP2_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q271641/nt5/en-us/q271641_w2k_sp2_x86_en.exe


-----

==== MS00-100 - Malformed Web Form Submission Vulnerability ====
''Posted: 2000/12/22''

The FrontPage Server Extensions (FPSE) ship with and are installed by default as part of IIS 4.0 and 5.0. The most familiar FPSE functions allow web site and content management; however, FPSE also provides browse-time support functions. Among the functions included in the latter category are ones that help process web forms that have been submitted by a user. A vulnerability exists in one of these functions. If a malicious user levied a specially-malformed form submission to an affected server, it would cause the IIS service to fail. The vulnerability does not provide the opportunity to misuse any of the FPSE administrative or content management functions.

===== 280322 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q280322'''

* http://download.microsoft.com/download/office2000pro/fpwec2/2000/w98nt42kme/en-us/fpwec.exe
===== 280322 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: Q280322_W2K_SP2_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q280322/nt5/en-us/q280322_w2k_sp2_x86_en.exe
===== 280322 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q280322i.EXE'''

* http://www.microsoft.com/ntserver/nts/downloads/critical/q280322/default.asp


-----

==== MS01-001 - Web Client Will Perform NTLM Authentication Regardless of Security Settings ====
''Posted: 2001/01/11''

The Web Extender Client (WEC) is a component that ships as part of Office 2000, Windows 2000, and Windows Me. WEC allows IE to view and publish files via web folders, similar to viewing and adding files in a directory through Windows Explorer. Due to an implementation flaw, WEC does not respect the IE Security settings regarding when NTLM authentication will be performed instead, WEC will perform NTLM authentication with any server that requests it. If a user established a session with a malicious user?s web site ? either by browsing to the site or by opening an HTML mail that initiated a session with it an application on the site could capture the user?s NTLM credentials. The malicious user could then use an offline brute force attack to derive the password or, with specialized tools, could submit a variant of these credentials in an attempt to access protected resources. The vulnerability would only provide the malicious user with the cryptographically protected NTLM authentication credentials of another user. 

===== 282132 =====
'''Affected Products:'''

* Windows Me
** Windows Me Gold

'''Patch: 282132usam.exe'''

* http://download.microsoft.com/download/winme/update/14733/winme/en-us/282132usam.exe
===== 282132 =====
'''Affected Products:'''

* Office 2000
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a

'''Patch: fpwec'''

* http://office.microsoft.com/downloads/2000/wecsec.aspx
===== 282132 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Professional
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: Q282132_W2K_SP2_x86_en'''

* http://download.microsoft.com/download/win2000platform/patch/q282132/nt5/en-us/q282132_w2k_sp2_x86_en.exe


-----

==== MS01-002 - PowerPoint 2000 File Parser Contains Unchecked Buffer ====
''Posted: 2001/01/22''

If an attacker inserted specially chosen data into a PowerPoint file and could entice another user into opening the file on his machine, the data would overrun the buffer, causing either of two effects.

===== 285978 =====
'''Affected Products:'''

* PowerPoint 2000
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a

'''Patch: ppt2ksec.exe'''

* http://download.microsoft.com/download/powerpoint2000/update/sr-1a/win98me/en-us/ppt2ksec.exe
===== 285978 =====
'''Affected Products:'''

* PowerPoint 97
** Office 97 Gold

'''Patch: ppt97sec.exe'''

* http://download.microsoft.com/download/powerpoint97win95/ppt97sec/97/win98/en-us/ppt97sec.exe


-----

==== MS01-003 - Weak Permissions on Winsock Mutex Can Allow Service Failure ====
''Posted: 2001/01/24''

This could enable an attacker who had the ability to run code on a local machine to monopolize the mutex, thereby preventing any other processes from using the resource that it controlled. This would have the effect of preventing the machine from participating in the network. 

===== 279336 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q279336i.exe'''

* http://www.microsoft.com/ntserver/terminalserver/downloads/critical/q279336/download.asp
===== 279336 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q279336i.EXE'''

* http://www.microsoft.com/ntserver/nts/downloads/critical/q279336/download.asp


-----

==== MS01-004 - Malformed .HTR Request Allows Reading of File Fragments ====
''Posted: 2001/01/29''

This one could enable an attacker to request a file in a way that would cause it to be processed by the .HTR ISAPI extension. The result of doing this is that fragments of server-side files like .ASP files could potentially be sent to the attacker.

===== 285985 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: frgvuli.exe'''

* http://download.microsoft.com/download/winntsp/patch/q285985/nt4/en-us/frgvuli.exe
===== 285985 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: Q285985_W2K_SP3_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q285985/nt5/en-us/q285985_w2k_sp3_x86_en.exe


-----

==== MS01-005 - Packaging Anomaly Could Cause Hotfixes to be Removed ====
''Posted: 2001/01/30''

Microsoft packages all Windows 2000 hotfixes (including security patches) with a catalog file that lists all of the valid hotfixes that have been issued to date. The catalog is digitally signed to ensure its integrity, and Windows File Protection uses the signed catalog to determine which hotfixes are valid. An error in the production of the catalog files for English language Windows 2000 Post Service Pack 1 hotfixes made available through December 18, 2000 could, under very unlikely circumstances, cause Windows File Protection to remove a valid hotfix from a system. The removal of a hotfix could cause a customer?s system to revert to a version of a Windows 2000 module that contained a security vulnerability. Windows File Protection will only remove valid hotfixes from a Windows 2000 system under a very restrictive set of circumstances

===== 281767 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
* Windows 2000 Professional
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Service Pack 1

'''Patch: Q281767_W2K_SP2_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q281767/nt5/en-us/q281767_w2k_sp2_x86_en.exe
===== 285083 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
* Windows 2000 Datacenter Server
** Windows 2000 Gold
* Windows 2000 Professional
** Windows 2000 Gold
* Windows 2000 Server
** Windows 2000 Gold

'''Patch: Q285083_W2K_SP2_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q285083/nt5/en-us/q285083_w2k_sp2_x86_en.exe


-----

==== MS01-006 - Invalid RDP Data Can Cause Terminal Server Failure ====
''Posted: 2001/01/31''

===== 286132 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: Q286132_W2K_SP2_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q286132/nt5/en-us/q286132_w2k_sp2_x86_en.exe


-----

==== MS01-007 - Network DDE Agent Requests Can Enable Code to Run in System Context ====
''Posted: 2001/02/05''

A vulnerability exists because, in Windows 2000, the Network DDE Agent runs using the Local System security context and processes all requests using this context, rather than that of the user. This would give an attacker an opportunity to cause the Network DDE Agent to run code of her choice in Local System context, as a means of gaining complete control over the local machine. 

===== 285851 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: Q285851_W2K_SP3_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q285851/nt5/en-us/q285851_w2k_sp3_x86_en.exe


-----

==== MS01-008 - Malformed NTLMSSP Request Can Enable Code to Run with System Privileges ====
''Posted: 2001/02/07''

A flaw in the NTLM Security Support Provider (NTLMSSP) service could potentially allow a non-administrative user to gain administrative control over the system. In order to perform this attack the user would need a valid login account and the ability to execute arbitrary code on the system. This vulnerability could only be exploited by an attacker who could log onto the affected machine interactively. However, best practices strongly suggest that unprivileged users not be allowed to interactively log onto business-critical servers like domain controllers, ERP servers, print and file servers, database servers, and others. If this recommendation has been followed, machines such as these would not be at risk from this vulnerability and, as a result, the machines most likely to be affected would be workstations and terminal servers.

===== 280119 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q280119i.exe'''

* http://www.microsoft.com/ntserver/terminalserver/downloads/critical/q280119/download.asp
===== 280119 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q280119i.EXE'''

* http://download.microsoft.com/download/winntsp/patch/q280119/nt4/en-us/q280119i.exe


-----

==== MS01-009 - Malformed PPTP Packet Stream Can Cause Kernel Exhaustion ====
''Posted: 2001/02/13''

The PPTP service in Windows NT 4.0 has a flaw in a part of the code that handles a particular type of data packet, which results in a leak of kernel memory resulting in a denial of service vulnerability.

===== 283001 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q283001i.exe'''

* http://www.microsoft.com/ntserver/nts/downloads/critical/q283001/download.asp
===== 283001 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q283001ts.exe'''

* http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms01-009.asp


-----

==== MS01-010 - Windows Media Player Skins Files Can Enable Java Code to Execute ====
''Posted: 2001/02/14''

If a Windows Media Player skin (.WMZ) file were downloaded from a malicious web site, it could potentially cause the deployment of zipped Java code to a known location on the visiting user?s machine. Since the Java code would reside in a known location on the machine, script hosted on a hostile web site or embedded in a hostile HTML mail message could potentially invoke the script in the local computer security zone to take arbitrary action on the user?s machine.

===== 287045 =====
'''Affected Products:'''

* Windows Media Player 7.0
** Windows Media Player 7.0 Gold

'''Patch: wmsu38041'''

* http://download.microsoft.com/download/winmediaplayer/update/38041/w982kme/en-us/wmsu38041.exe


-----

==== MS01-011 - Malformed Request to Domain Controller Can Cause CPU Exhaustion ====
''Posted: 2001/02/20''

A core service running on all Windows 2000 domain controllers (but not on any other machines) contains a flaw affecting how it processes a certain type of invalid service request. Specifically, the service should handle the request at issue here by determining that it is invalid and simply dropping it; in fact, the service performs some resource-intensive processing and then sends a response. If an attacker sent a continuous stream of such requests to an affected machine, it could consume most or all of the machine?s CPU availability. This could cause the domain controller to process requests for service slowly or not at all, and could limit the number of new logons the machine could process and the number of Kerberos tickets that could be issued. 

===== 299687 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: Q299687_W2K_SP3_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q299687/nt5/en-us/q299687_w2k_sp3_x86_en.exe


-----

==== MS01-012 - Outlook - Outlook Express VCard Handler Contains Unchecked Buffer ====
''Posted: 2001/02/22''

Outlook Express provides several components that are used both by it and, if installed on the machine, Outlook. One such component, used to process vCards, contains an unchecked buffer. By creating a vCard and editing it to contain specially chosen data, then sending it to another user, an attacker could cause either of two effects to occur if the recipient opened it. In the less serious case, the attacker could cause the mail client to fail. If this happened, the recipient could resume normal operation by restarting the mail client and deleting the offending mail. In the more serious case, the attacker could cause the mail client to run code of her choice on the user?s machine. Such code could take any desired action, limited only by the permissions of the recipient on the machine. 

===== 283908 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP1
* Outlook Express 5.5
** Internet Explorer 5.5 SP1

'''Patch: q283908.exe'''

* http://download.microsoft.com/download/ie55sp1/secpac14/5.5_sp1/win98me/en-us/q283908.exe
===== 283908 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP1
* Outlook Express 5.01
** Internet Explorer 5.01 SP1

'''Patch: Q283908.exe'''

* http://download.microsoft.com/download/ie55sp1/secpac14/5.5_sp1/win98me/en-us/q283908.exe


-----

==== MS01-013 - Windows 2000 Event Viewer Contains Unchecked Buffer ====
''Posted: 2001/02/26''

This is a buffer overrun vulnerability. By entering a specially malformed record into a machine?s event log, an attacker could cause either of two effects to occur when the record was subsequently opened. In the least serious case, he could cause the event viewer to fail. In the more serious case, he could cause the event viewer?s functionality to be modified while running, in order to perform a task of his choosing on the other user?s machine.

===== 285156 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: Q285156_W2K_SP3_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q285156/nt5/en-us/q285156_w2k_sp3_x86_en.exe


-----

==== MS01-014 - Malformed URL Can Cause Service Failure in IIS 5.0 and Exchange 2000 ====
''Posted: 2001/03/01''

This is a denial of service vulnerability. It could enable an attacker to temporarily disrupt service on an affected web, or to temporarily disrupt web-based access to an affected mail server. Although the server in either case would automatically resume normal operation, any sessions in progress at the time of the attack would be lost. The vulnerability does not provide any opportunity for the attacker to usurp administrative control over the server, or to add, change or delete data on it.

===== 286818 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: Q286818_W2K_SP3_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q286818/nt5/en-us/q286818_w2k_sp3_x86_en.exe
===== 287678 =====
'''Affected Products:'''

* Exchange 2000 Enterprise Server
** Exchange 2000 Gold
* Exchange 2000 Server
** Exchange 2000 Gold

'''Patch: Q287678engi386.EXE'''

* http://download.microsoft.com/download/exchangeentserver/patch/06.00.54.4418/nt5/en-us/q287678engi386.exe


-----

==== MS01-015 - IE Can Divulge Location of Cached Content ====
''Posted: 2001/03/06''

The IE security architecture provides a caching mechanism that is used to store content that needs to be downloaded and processed on the user's local machine. The purpose of the cache is to obfuscate the physical location of the cached content, in order to ensure that the web page or HTML e-mail will work through the IE security architecture to access the information. This ensures that the uses of the information can be properly restricted. A vulnerability exists because it is possible for a web page or HTML e-mail to learn the physical location of cached content. Armed with this information, an attacker could cause the cached content to be opened in the Local Computer Zone. This would enable him to launch compiled HTML help (.CHM) files that contain shortcuts to executables, thereby enabling him to run the executables.

===== 279328 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP1

'''Patch: q279328.exe'''

* http://download.microsoft.com/download/ie501sp1/q279328/5.01_sp1/win98/en-us/q279328.exe
===== 286045 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP1

'''Patch: q286045.exe'''

* http://download.microsoft.com/download/ie55sp1/secpac15/5.5_sp1/w98nt42kme/en-us/q286045.exe
===== 279328 =====
'''Affected Products:'''

* Windows Script 5.5
** Windows 95 SR 2.1
** Windows 95 SR 2.5
** Windows 98 Gold
** Windows 98 SP1
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Scr55en.exe'''

* http://www.microsoft.com/devonly/prodinfo/scripting/downloads/v55/other/scr55en.exe
===== 279328 =====
'''Affected Products:'''

* Windows Script 5.1
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: scripten.exe'''

* http://www.microsoft.com/devonly/prodinfo/scripting/downloads/v51/windows2000/scripten.exe
===== 279328 =====
'''Affected Products:'''

* Windows Script 5.5
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: Scripten.exe'''

* http://www.microsoft.com/devonly/prodinfo/scripting/downloads/v51/windows2000/scripten.exe
===== 279328 =====
'''Affected Products:'''

* Windows Script 5.1
** Windows 95 SR 2.1
** Windows 95 SR 2.5
** Windows 98 Gold
** Windows 98 SP1
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
** Windows NT4 Terminal Server Service Pack 6

'''Patch: ste51en.exe'''

* http://www.microsoft.com/devonly/prodinfo/scripting/downloads/v51/other/ste51en.exe


-----

==== MS01-016 - Malformed WebDAV Request Can Cause IIS to Exhaust CPU Resources ====
''Posted: 2001/03/08''

WebDAV is an extension to the HTTP protocol that allows remote authoring and management of web content. In the Windows 2000 implementation of the protocol, IIS 5.0 performs initial processing of all WebDAV requests, then forwards the appropriate commands to the WebDAV process. However, a flaw exists in the way WebDAV handles a particular type of malformed request. If a stream of such requests were directed at an affected server, it would consume all CPU availability on the server.

===== 291845 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: Q291845_W2K_SP2_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q291845/nt5/en-us/q291845_w2k_sp2_x86_en.exe


-----

==== MS01-017 - Erroneous VeriSign-Issued Digital Certificates Pose Spoofing Hazard ====
''Posted: 2001/03/22''

VeriSign, Inc., recently advised Microsoft that on January 29 and 30, 2001, it issued two VeriSign Class 3 code-signing digital certificates to an individual who fraudulently claimed to be a Microsoft employee. The common name assigned to both certificates is ?Microsoft Corporation?. The ability to sign executable content using keys that purport to belong to Microsoft would clearly be advantageous to an attacker who wished to convince users to allow the content to run. The certificates could be used to sign programs, ActiveX controls, Office macros, and other executable content. Of these, signed ActiveX controls and Office macros would pose the greatest risk, because the attack scenarios involving them would be the most straightforward. Both ActiveX controls and Word documents can be delivered via either web pages or HTML mails. ActiveX controls can be automatically invoked via script, and Word documents can be automatically opened via script unless the user has applied the Office Document Open Confirmation Tool. However, even though the certificates say they are owned by Microsoft, they are not bona fide Microsoft certificates, and content signed by them would not be trusted by default. Trust is defined on a certificate-by-certificate basis, rather than on the basis of the common name. As a result, a warning dialogue would be displayed before any of the signed content could be executed, even if the user had previously agreed to trust other certificates with the common name ?Microsoft Corporation?. The danger, of course, is that even a security-conscious user might agree to let the content execute, and might agree to always trust the bogus certificates. VeriSign has revoked the certificates, and they are listed in VeriSign?s current Certificate Revocation List (CRL). However, because VeriSign?s code-signing certificates do not specify a CRL Distribution Point (CDP), it is not possible for any browser?s CRL-checking mechanism to download the VeriSign CRL and use it. Microsoft is developing an update that rectifies this problem. The update package includes a CRL containing the two certificates, and an installable revocation handler that consults the CRL on the local machine, rather than attempting to use the CDP mechanism.

===== 293818 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 4
** Windows NT4 Terminal Server Service Pack 5
** Windows NT4 Terminal Server Service Pack 6

'''Patch: crlupdts.exe'''

* http://download.microsoft.com/download/win2000platform/update/q293818/win98me/en-us/crlupd.exe
===== 293818 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 3
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: crlupd.exe'''

* http://download.microsoft.com/download/win2000platform/update/q293818/win98me/en-us/crlupd.exe
===== 293818 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Professional
** Windows 2000 Gold
** Windows 2000 Service Pack 1
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: crlupD.exe'''

* http://download.microsoft.com/download/win2000platform/update/q293818/win98me/en-us/crlupd.exe
===== 293818 =====
'''Affected Products:'''

* Windows 95
** Windows 95 Gold
** Windows 95 SR 2.1
** Windows 95 SR 2.5
* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold
* Windows Me
** Windows Me Gold

'''Patch: Crlupd.exe'''

* http://download.microsoft.com/download/win2000platform/update/q293818/win98me/en-us/crlupd.exe


-----

==== MS01-018 - Visual Studio VB-TSQL Object Contains Unchecked Buffer ====
''Posted: 2001/03/27''

The VB-TSQL debugger object that ships with Visual Studio 6.0 Enterprise Edition has an unchecked buffer in the code that processes parameters for one of the object?s methods. The object can, by design, be programmatically accessed remotely. If the object were to be referenced by a program that contained specially malformed data within the parameter, either of two outcomes would result. In the less serious case, the attacker could cause the object to fail on the hosting machine. In the more serious case, the attacker could exploit the buffer overrun to run code of the attacker's choice on the hosting machine. The debugger object (vbsdicli.exe) is installed by default with Visual Studio 6.0 Enterprise Edition and runs in the context of the interactively logged-on user. The attacker could only execute a successful attack if he knew that a user had the component installed and that the user was logged in at the time of the attack.

===== 281297 =====
'''Affected Products:'''

* Visual Basic 6.0
** Visual Basic 6.0 Gold
* Visual Studio 6.0
** Visual Studio 6.0 SP 5

'''Patch: Q281297.EXE'''

* http://download.microsoft.com/download/vstudio60ent/patch/6.0/win98me/en-us/q281297.exe


-----

==== MS01-019 - Passwords for Compressed Folders are Recoverable ====
''Posted: 2001/03/28''

Plus! 98, an optional package that extends Windows 98 and Windows 98 Second Edition, introduced a data compression feature called Compressed Folders that was also included in Windows Me. For interoperability with leading third-party compression tools, it provides a password protection option for folders that have been compressed. However, due to a flaw in the package?s implementation, the passwords used to protect the folders are recorded in a file on the user?s system. If an attacker gained access to an affected machine on which password-protected folders were stored, she could learn the passwords and access the files. It is important to understand that, although this flaw does constitute a security vulnerability, the password protection feature is not intended to provide strong security. It was included in the products to enable interoperability with password-protection features in other third-party data compression products, and is only intended to provide protection against casual inspection. Customers who need strong protection for files should use Windows® 2000. The patch will prevent passwords from being written to the user?s system in the future. However, as discussed in the FAQ, after applying the patch, it is important to also delete c:\windows\dynazip.log, in order to ensure that all previously-recorded passwords are deleted.

===== 252694 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold

'''Patch: 252694usa8.exe'''

* http://download.microsoft.com/download/win98/update/14715/w98/en-us/252694usa8.exe
===== 252694 =====
'''Affected Products:'''

* Windows Me
** Windows Me Gold

'''Patch: 252694usam.exe'''

* http://download.microsoft.com/download/winme/update/14715/winme/en-us/252694usam.exe


-----

==== MS01-020 - Incorrect MIME Header Can Cause IE to Execute E-mail Attachment ====
''Posted: 2001/03/29''

Because HTML e-mails are simply web pages, IE can render them and open binary attachments in a way that is appropriate to their MIME types. However, a flaw exists in the type of processing that is specified for certain unusual MIME types. If an attacker created an HTML e-mail containing an executable attachment, then modified the MIME header information to specify that the attachment was one of the unusual MIME types that IE handles incorrectly, IE would launch the attachment automatically when it rendered the e-mail. An attacker could use this vulnerability in either of two scenarios. She could host an affected HTML e-mail on a web site and try to persuade another user to visit it, at which point script on a web page could open the mail and initiate the executable. Alternatively, she could send the HTML mail directly to the user. In either case, the executable attachment, if it ran, would be limited only by user?s permissions on the system.

===== 290108 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP1

'''Patch: q290108.exe'''

* http://download.microsoft.com/download/ie501sp1/secpac17/5.01_sp1/win98/en-us/q290108.exe
===== 290108 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP1

'''Patch: Q290108.exe'''

* http://download.microsoft.com/download/ie55sp1/secpac17/5.5_sp1/win98me/en-us/q290108.exe


-----

==== MS01-021 - Web Request Can Cause Access Violation in ISA Server Web Proxy Service ====
''Posted: 2001/04/16''

The ISA Server Web Proxy service does not correctly handle web requests that contain a particular type of malformed argument. Processing such a request would result in an access violation, which would cause the Web Proxy service to fail. This would disrupt all ingoing and outgoing web proxy requests until the service was restarted. 

===== 295279 =====
'''Affected Products:'''

* ISA Server 2000
** ISA Server 2000 Gold

'''Patch: isahf63.exe'''

* http://download.microsoft.com/download/isaserver2000/webproxy/q295279/nt5/en-us/isahf63.exe


-----

==== MS01-022 - WebDAV Service Provider Can Allow Scripts to Levy Requests as User ====
''Posted: 2001/04/18''

The Microsoft Data Access Component Internet Publishing Provider provides access to WebDAV resources over the Internet. By design, it should differentiate between requests made by a user and those made by a script running in the user?s browser. However, because of an implementation flaw, it handles all requests in the security context of the user. As a result, if a user browsed to a web page or opened an HTML e-mail that contained script, that script could access web-based resources as the user. The specific actions an attacker could take via this vulnerability would depend on the Web-based resources available to the user, and the user?s privileges on them. However, it is likely that at a minimum, the attacker could browse the user?s intranet, and potentially access web-based e-mail as well.

===== 296441 =====
'''Affected Products:'''

* Windows 95
** Windows 95 Gold
** Windows 95 SR 2.1
** Windows 95 SR 2.5
* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold
* Windows Me
** Windows Me Gold

'''Patch: rbupdate.exe'''

* http://download.microsoft.com/download/win2000platform/update/1.5/win98me/en-us/rbupdate.exe
===== 296441 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: Rbupdate.exe'''

* http://download.microsoft.com/download/win2000platform/update/1.5/win98me/en-us/rbupdate.exe


-----

==== MS01-023 - Unchecked Buffer in ISAPI Extension Could Enable Compromise of IIS 5.0 Server ====
''Posted: 2001/05/01''

Windows 2000 introduced native support for the Internet Printing Protocol (IPP), an industry-standard protocol for submitting and controlling print jobs over HTTP. The protocol is implemented in Windows 2000 via an ISAPI extension that is installed by default as part of Windows 2000 but which can only be accessed via IIS 5.0. A security vulnerability results because the ISAPI extension contains an unchecked buffer in a section of code that handles input parameters. This could enable a remote attacker to conduct a buffer overrun attack and cause code of her choice to run on the server. Such code would run in the Local System security context. This would give the attacker complete control of the server, and would enable her to take virtually any action she chose. The attacker could exploit the vulnerability against any server with which she could conduct a web session. No other services would need to be available, and only port 80 (HTTP) or 443 (HTTPS) would need to be open. Clearly, this is a very serious vulnerability, and Microsoft strongly recommends that all IIS 5.0 administrators install the patch immediately. Customers who cannot install the patch can protect their systems by removing the mapping for the Internet Printing ISAPI extension. However, it is important to understand that if Web Printing is enabled via Group Policy, this would override the settings made in the Internet Services Manager. As the FAQ discusses in more detail, customers who have enabled Web Printing via Group Policy should disable it first, then unmap the Internet Printing ISAPI extension.

===== 296576 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Gold
** Windows 2000 Service Pack 1

'''Patch: Q296576_W2K_SP2_x86_en.EXE'''

* http://www.microsoft.com/ntserver/nts/downloads/critical/q296185/download.asp


-----

==== MS01-024 - Malformed Request to Domain Controller Can Cause Memory Exhaustion ====
''Posted: 2001/05/08''

A core service running on all Windows 2000 domain controllers (but not on any other machines) contains a memory leak, which can be triggered when it attempts to process a certain type of invalid service request. By repeatedly sending such a request, an attacker could deplete the available memory on the server. If memory were sufficiently depleted, the domain controller could become unresponsive, which would prevent it from processing logon requests or issuing new Kerberos tickets. An affected machine could be put back into service by rebooting. 

===== 299687 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: Q299687_W2K_SP3_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q299687/nt5/en-us/q299687_w2k_sp3_x86_en.exe


-----

==== MS01-025 - Index Server Search Function Contains Unchecked Buffer ====
''Posted: 2001/05/10''

The patches discussed below address two security vulnerabilities that are unrelated to each other except in the sense that both affect Index Server 2.0. The first vulnerability is a buffer overrun vulnerability. Index Server 2.0 has an unchecked buffer in a function that processes search requests. If an overly long value were provided for a particular search parameter, it would overrun the buffer. If the buffer were overrun with random data, it would cause Index Server to fail. If it were overrun with carefully selected data, code of the attacker?s choice could be made to run on the server, in the Local System security context. The second vulnerability affects both Index Server 2.0 and Indexing Service in Windows 2000, and is a new variant of the ?Malformed Hit-Highlighting? vulnerability discussed in Microsoft Security Bulletin MS00-006. The new variant has almost the same scope as the original vulnerability, but potentially exposes a new file type If an attacker provided an invalid search request, she could read ?include? files residing on the web server. The new patch eliminates all known variants of the vulnerability.

===== 296185 =====
'''Affected Products:'''

* Indexing Services for Windows 2000
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: MS01-025-1'''

* NA
===== 294472 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q294472i.exe'''

* http://www.microsoft.com/ntserver/nts/downloads/critical/q294472/download.asp
===== 296185 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: Q296185_W2K_SP3_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q296185/nt5/en-us/q296185_w2k_sp3_x86_en.exe
===== 296185 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q296185i.exe'''

* http://www.microsoft.com/ntserver/nts/downloads/critical/q296185/download.asp


-----

==== MS01-026 - 14 May 2001 Cumulative Patch for IIS ====
''Posted: 2001/05/14''

This update eliminates three new vulnerabilities: A vulnerability that could enable a malicious user to run operating system commands on an affected server. A vulnerability that could allow a malicious user to enter a File Transfer Protocol (FTP) command, which can cause IIS 5.0 to fail. FTP is the protocol used for copying files to and from remote computer systems on a network. A vulnerability that can enable a malicious user to access a guest account using the FTP service. 

===== 293826 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: Q293826_W2K_SP3_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q293826/nt5/en-us/q293826_w2k_sp3_x86_en.exe
===== 295534 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q295534i.exe'''

* http://www.microsoft.com/ntserver/nts/downloads/critical/q293826/download.asp


-----

==== MS01-027 - Flaws in Web Server Certificate Validation Could Enable Spoofing ====
''Posted: 2001/05/16''

A patch is available to eliminate two newly discovered vulnerabilities affecting Internet Explorer, both of which could enable an attacker to spoof trusted web sites. 

===== 295106 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP2

'''Patch: q295106.exe'''

* http://download.microsoft.com/download/ie501sp2/secpac18/5.01_sp2/win98/en-us/q295106.exe
===== 299618 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP1

'''Patch: q299618.exe'''

* http://download.microsoft.com/download/ie55sp1/secpac19/5.5_sp1/win98me/en-us/q299618.exe


-----

==== MS01-028 - RTF Document Linked to Template Can Run Macros Without Warning ====
''Posted: 2001/05/21''

The Word 2000 Security Update: Macro Vulnerability addresses a vulnerability that could allow malicious code to run in a Rich Text Format (RTF) document without warning. Under normal circumstances, you will see a warning in Word 2000 when you open a document attached to a template containing macros. However, it is possible for an RTF document to be linked to a template containing macros in such a way that a macro can run with no warning issued. This could cause damage to data or allow unauthorized retrieval of data from your system when you visit a Web site or open an e-mail message. 

===== 288266 =====
'''Affected Products:'''

* Word 2000
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a

'''Patch: wd2kmsec.exe'''

* http://download.microsoft.com/download/word2000/wd2kmse/1/win98me/en-us/wd2kmsec.exe
===== 288266 =====
'''Affected Products:'''

* Word 97
** Office 97 SR-2/SR-2b

'''Patch: wd97mcrs.exe'''

* http://download.microsoft.com/download/word97win/patch/4.71.1015.0/w98nt42kme/en-us/wd97mcrs.exe


-----

==== MS01-029 - Windows Media Player .ASX Processor Contains Unchecked Buffer ====
''Posted: 2001/05/23''

This update addresses two security vulnerabilities that are related to each other only by the fact that they both affect Windows Media Player. The two vulnerabilities are a buffer overrun in the functionality used to process Active Stream Redirector (.ASX) files, and a vulnerability affecting how Windows Media Player handles Internet shortcuts. In addition, this update addresses a potential privacy vulnerability that was recently identified. 

===== 296138 =====
'''Affected Products:'''

* Windows Media Player 7.0
** Windows Media Player 7.0 Gold

'''Patch: mp71.exe'''

* http://download.microsoft.com/download/winmediaplayer/wmp71/7.1/w982kme/en-us/mp71.exe
===== 296138 =====
'''Affected Products:'''

* Windows Media Player 6.4
** Windows Media Player 6.4 Gold

'''Patch: WMSU47357.exe'''

* http://download.microsoft.com/download/winmediaplayer/update/47357/win98/en-us/wmsu47357.exe


-----

==== MS01-030 - Incorrect Attachment Handling in Exchange OWA Can Execute Script ====
''Posted: 2001/06/06''

OWA is a service of Exchange 5.5 and 2000 Server that allows users to use a web browser to access their Exchange mailbox. However, a flaw exists in the interaction between OWA and IE for message attachments. If an attachment contains HTML code including script, the script will be executed when the attachment is opened, regardless of the attachment type. Because OWA requires that scripting be enabled in the zone where the OWA server is located, this script could take action against the users Exchange mailbox. An attacker could use this flaw to construct an attachment containing malicious script code. The attacker could then send the attachment in a message to the user. If the user opened the attachment in OWA, the script would execute and could take action against the user?s mailbox as if it were the user, including, under certain circumstances, manipulation of messages or folders.

===== 299535 =====
'''Affected Products:'''

* Exchange 2000 Enterprise Server
** Exchange 2000 Gold
* Exchange 2000 Server
** Exchange 2000 Gold

'''Patch: Q299535engi386.EXE'''

* http://download.microsoft.com/download/exchangeentserver/patch/06.00.27.4419/nt5/en-us/q299535engi386.exe
===== 301361 =====
'''Affected Products:'''

* Exchange Server 5.5
** Exchange Server 5.5 SP4

'''Patch: Q301361i386.EXE'''

* http://download.microsoft.com/download/exch55/patch/05.05.12.2655/nt45/en-us/q301361i386.exe


-----

==== MS01-031 - Predictable Named Pipes Could Enable Privilege Elevation via Telnet ====
''Posted: 2001/06/07''

===== 299553 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: Q299553_W2K_SP3_x86_en.EXE'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;282806


-----

==== MS01-032 - SQL Query Method Enables Cached Administrator Connection to be Reused ====
''Posted: 2001/06/12''

===== 299717 =====
'''Affected Products:'''

* Microsoft SQL Server 2000 Desktop Engine (MSDE 2000)
** Microsoft SQL Server 2000 Desktop Engine (MSDE 2000) Gold

'''Patch: MS01-032-1'''

* NA
===== 299717 =====
'''Affected Products:'''

* SQL Server 7.0
** SQL Server 7.0 SP3

'''Patch: s70996i.exe'''

* http://download.microsoft.com/download/sql70/patch/s70996i/win98me/en-us/s70996i.exe
===== 299717 =====
'''Affected Products:'''

* SQL Server 2000
** SQL Server 2000 Gold

'''Patch: s80296i.exe'''

* http://download.microsoft.com/download/sqlsvr2000/patch/s80296i/w98nt42kme/en-us/s80296i.exe


-----

==== MS01-033 - Unchecked Buffer in Index Server ISAPI Extension Could Enable Web Server Compromise ====
''Posted: 2001/06/18''

===== 300972 =====
'''Affected Products:'''

* Index Server 2.0
** Windows NT4 Service Pack 6a

'''Patch: MS01-033-1'''

* NA
===== 300972 =====
'''Affected Products:'''

* Indexing Services for Windows 2000
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: MS01-033-2'''

* NA
===== 300972 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: Q300972_W2K_SP3_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q300972/nt5/en-us/q300972_w2k_sp3_x86_en.exe
===== 300972 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q300972i.exe'''

* http://www.microsoft.com/ntserver/nts/downloads/critical/q300972/download.asp
===== 300972 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q300972ts.exe'''

* http://www.microsoft.com/technet/security/bulletin


-----

==== MS01-034 - Malformed Word Document Could Enable Macro to Run Automatically ====
''Posted: 2001/06/21''

===== 288266 =====
'''Affected Products:'''

* Word 2000
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a

'''Patch: wd2kmsec.exe'''

* http://download.microsoft.com/download/word2000/wd2kmse/1/win98me/en-us/wd2kmsec.exe
===== 288266 =====
'''Affected Products:'''

* Word 97
** Office 97 SR-2/SR-2b

'''Patch: wd97mcrs.exe'''

* http://download.microsoft.com/download/word97win/patch/4.71.1015.0/w98nt42kme/en-us/wd97mcrs.exe
===== 302294 =====
'''Affected Products:'''

* Word 2002
** Office XP Gold

'''Patch: WRD1001.exe'''

* http://office.microsoft.com/downloads/2002/wrd1001.aspx


-----

==== MS01-035 - FrontPage Server Extension Sub-Component Contains Unchecked Buffer ====
''Posted: 2001/06/21''

===== 300477 =====
'''Affected Products:'''

* FrontPage 2000 Server Extensions
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q300477.exe'''

* http://www.microsoft.com/downloads/release.asp?releaseid=31038
===== 300477 =====
'''Affected Products:'''

* FrontPage 2000 Server Extensions
** Windows 2000 Service Pack 2

'''Patch: Q300477_W2K_SP3_x86_en.EXE'''

* http://www.microsoft.com/downloads/release.asp?releaseid=30727


-----

==== MS01-036 - Function Exposed via LDAP over SSL Could Enable Passwords to be Changed ====
''Posted: 2001/06/25''

===== 299687 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: Q299687_W2K_SP3_x86_en.EXE'''

* http://download.microsoft.com/download/win2000platform/patch/q299687/nt5/en-us/q299687_w2k_sp3_x86_en.exe


-----

==== MS01-037 - Authentication Error in SMTP Service Could Allow Mail Relaying ====
''Posted: 2001/07/05''

===== 302755 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: Q302755_W2k_SP3_x86_en.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q302755/nt5/en-us/q302755_w2k_sp3_x86_en.exe


-----

==== MS01-038 - Outlook View Control Exposes Unsafe Functionality ====
''Posted: 2001/07/12''

===== 303825 =====
'''Affected Products:'''

* Outlook 2002
** Office XP Gold

'''Patch: olk1003.exe'''

* http://office.microsoft.com/downloads/2002/olk1003.aspx
===== 303833 =====
'''Affected Products:'''

* Outlook 2000
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a

'''Patch: outlctlx.exe'''

* http://download.microsoft.com/download/outlook2000/outlctlx/1/win98me/en-us/outlctlx.exe


-----

==== MS01-039 - Services for Unix 2.0 Telnet and NFS Services Contain Memory Leaks ====
''Posted: 2001/07/24''

===== 294380 =====
'''Affected Products:'''

* Services for Unix 2.0 (NT)
** Services for Unix 2.0 (NT) Gold

'''Patch: q294380_sfu_2_x86.exe'''

* http://download.microsoft.com/download/winntsp/patch/q294380/nt4/en-us/q294380_sfu_2_x86.exe
===== 294380 =====
'''Affected Products:'''

* Services for Unix 2.0 (Win2K)
** Services for Unix 2.0 (Win2K) Gold

'''Patch: q294380_sfu_2_x86.Exe'''

* http://download.microsoft.com/download/win2000platform/patch/q294380/nt5/en-us/q294380_sfu_2_x86.exe
===== 301514 =====
'''Affected Products:'''

* Services for Unix 2.0 (NT)
** Services for Unix 2.0 (NT) Gold

'''Patch: q301514_sfu_2_x86.exe'''

* http://download.microsoft.com/download/winntsp/patch/q301514/nt4/en-us/q301514_sfu_2_x86.exe
===== 301514 =====
'''Affected Products:'''

* Services for Unix 2.0 (Win2K)
** Services for Unix 2.0 (Win2K) Gold

'''Patch: q301514_sfu_2_x86.Exe'''

* http://www.microsoft.com/technet/security/bulletin


-----

==== MS01-040 - Invalid RDP Data Can Cause Memory Leak in Terminal Services ====
''Posted: 2001/07/25''

===== 292435 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: q292435_w2k_sp3_x86_en.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q292435/nt5/en-us/q292435_w2k_sp3_x86_en.exe
===== 292435 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 5
** Windows NT4 Terminal Server Service Pack 6

'''Patch: q292435i.exe'''

* http://download.microsoft.com/download/winntsp/patch/q292435/nt4/en-us/q292435i.exe


-----

==== MS01-041 - Malformed RPC Request Can Cause Service Failure ====
''Posted: 2001/07/26''

===== 299444 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q299444i.exe'''

* http://www.microsoft.com/downloads/release.asp?releaseid=31240
===== 298012 =====
'''Affected Products:'''

* SQL Server 2000
** SQL Server 2000 Gold

'''Patch: q298012_sql2000_x86_en.exe'''

* http://download.microsoft.com/download/sqlsvr2000/hotfix/q298012/win98mexp/en-us/q298012_sql2000_x86_en.exe
===== 298012 =====
'''Affected Products:'''

* SQL Server 7.0
** SQL Server 7.0 SP2

'''Patch: q298012_sql70sp2_x86_en.exe'''

* http://download.microsoft.com/download/sql70/hotfix/q298012/win98mexp/en-us/q298012_sql70sp2_x86_en.exe
===== 298012 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: q298012_w2k_sp3_x86_en.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q298012/nt5/en-us/q298012_w2k_sp3_x86_en.exe
===== 299444 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q299444I.exe'''

* http://www.microsoft.com/ntserver/nts/downloads/critical/q299444/download.asp
===== 299444 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q299444ts.exe'''

* http://www.microsoft.com/technet/security/bulletin
===== 304062 =====
'''Affected Products:'''

* Exchange Server 5.5
** Exchange Server 5.5 SP4

'''Patch: q304062engi386.exe'''

* http://download.microsoft.com/download/exch55/patch/5.5.2654.51/nt45/en-us/q304062engi386.exe
===== 304063 =====
'''Affected Products:'''

* Exchange 2000 Enterprise Server
** Exchange 2000 Gold
* Exchange 2000 Server
** Exchange 2000 Gold

'''Patch: q304063engi386.exe'''

* http://download.microsoft.com/download/exchangeentserver/patch/06.00.06.4419/nt5/en-us/q304063engi386.exe
===== 304062 =====
'''Affected Products:'''

* Exchange Server 5.0
** Exchange Server 5.0 SP1
** Exchange Server 5.0 SP2

'''Patch: 304062engi386.exe'''

* NA


-----

==== MS01-042 - Windows Media Player .NSC Processor Contains Unchecked Buffer ====
''Posted: 2001/07/26''

===== 304404 =====
'''Affected Products:'''

* Windows Media Player 7.0
** Windows Media Player 7.0 Gold

'''Patch: wmSu55362.exe'''

* http://download.microsoft.com/download/winmediaplayer/update/55362/win98/en-us/wmsu55362.exe
===== 304404 =====
'''Affected Products:'''

* Windows Media Player 7.1
** Windows Media Player 7.1 Gold

'''Patch: wMsu55362.exe'''

* http://download.microsoft.com/download/winmediaplayer/update/55362/win98/en-us/wmsu55362.exe
===== 304404 =====
'''Affected Products:'''

* Windows Media Player 6.4
** Windows Media Player 6.4 Gold

'''Patch: Wmsu55362.exe'''

* http://download.microsoft.com/download/winmediaplayer/update/55362/win98/en-us/wmsu55362.exe


-----

==== MS01-043 - NNTP Service in Windows NT 4.0 and Windows 2000 Contains Memory Leak ====
''Posted: 2001/08/14''

===== 303984 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: q303984_w2k_sp3_x86_en.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q303984/nt5/en-us/q303984_w2k_sp3_x86_en.exe
===== 303984 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: q304876engi386.exe'''

* http://www.microsoft.com/ntserver/nts/downloads/critical/q304876/download.asp


-----

==== MS01-044 - 15 August 2001 Cumulative Patch for IIS ====
''Posted: 2001/08/15''

===== 301625 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: q301625_w2k_sp3_x86_en.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q301625/nt5/en-us/q301625_w2k_sp3_x86_en.exe
===== 301625 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: q301625i.exe'''

* http://www.microsoft.com/ntserver/nts/downloads/critical/q301625/download.asp


-----

==== MS01-045 - ISA Server H.323 Gatekeeper Service Contains Memory Leak ====
''Posted: 2001/08/16''

===== 289503 =====
'''Affected Products:'''

* ISA Server 2000
** ISA Server 2000 Gold

'''Patch: isahf68.exe'''

* http://download.microsoft.com/download/isaserver2000/patch/q295389-q289503/nt5/en-us/isahf68.exe


-----

==== MS01-046 - Access Violation in Windows 2000 IRDA Driver Can Cause System to Restart ====
''Posted: 2001/08/21''

===== 252795 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: Q252795_W2K_SP3_x86_en.EXE'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;252795


-----

==== MS01-047 - OWA Function Allows Unauthenticated User to Enumerate Global Address List ====
''Posted: 2001/09/06''

===== 307195 =====
'''Affected Products:'''

* Exchange Server 5.5
** Exchange Server 5.5 SP4

'''Patch: Q307195engi386.EXE'''

* http://download.microsoft.com/download/exch55/patch/05.05.39.2655/nt45/en-us/q307195engi386.exe


-----

==== MS01-048 - Malformed Request to RPC Endpoint Mapper Can Cause RPC Service to Fail ====
''Posted: 2001/09/10''

===== 305399 =====
'''Affected Products:'''

* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q305399i.exe'''

* http://download.microsoft.com/download/7/4/8/7482f535-0754-4795-bf13-f059f262066c/q305399i.exe
===== 305399 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: q305399i.exe'''

* http://www.microsoft.com/technet/security/bulletin
===== 305399 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: Q305399i.EXE'''

* http://download.microsoft.com/download/7/4/8/7482f535-0754-4795-bf13-f059f262066c/q305399i.exe


-----

==== MS01-049 - Deeply-nested OWA Request Can Consume Server CPU Availability ====
''Posted: 2001/09/26''

===== 303451 =====
'''Affected Products:'''

* Exchange 2000 Enterprise Server
** Exchange 2000 SP1
* Exchange 2000 Server
** Exchange 2000 SP1

'''Patch: Q303451engi386.EXE'''

* http://download.microsoft.com/download/exchangeentserver/patch/06.00.50.4720/nt5/en-us/q303451engi386.exe


-----

==== MS01-050 - Malformed Excel or PowerPoint Document Can Bypass Macro Security ====
''Posted: 2001/10/04''

===== 306603 =====
'''Affected Products:'''

* PowerPoint 2000
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a

'''Patch: Ppt2000'''

* http://download.microsoft.com/download/powerpoint2000/p2kmac/1/w98nt42kme/en-us/p2kmac.exe
===== 306606 =====
'''Affected Products:'''

* PowerPoint 2002
** Office XP Gold

'''Patch: Ppt2002'''

* http://download.microsoft.com/download/powerpoint2002/ppt1001/1/w98nt42kme/en-us/ppt1001.exe
===== 306604 =====
'''Affected Products:'''

* Excel 2000
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a

'''Patch: xl2000'''

* http://download.microsoft.com/download/excel2000/e2kmac/1/w98nt42kme/en-us/e2kmac.exe
===== 306606 =====
'''Affected Products:'''

* Excel 2002
** Office XP Gold

'''Patch: xl2002'''

* http://download.microsoft.com/download/excel2002/exc1001/1/w98nt42kme/en-us/exc1001.exe


-----

==== MS01-051 - Malformed Dotless IP Address Can Cause Web Page to be Handled in Intranet Zone ====
''Posted: 2001/10/10''

===== 306121 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP2

'''Patch: q306121.exe'''

* http://download.microsoft.com/download/ie501sp2/secpac20/5.01sp2/win98/en-us/q306121.exe
===== 306121 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 Gold

'''Patch: q306121.Exe'''

* http://download.microsoft.com/download/ie60/secpac20/6/w98nt42kmexp/en-us/q306121.exe
===== 306121 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP2

'''Patch: Q306121.exe'''

* http://download.microsoft.com/download/ie55sp2/secpac20/5.5_sp2/win98me/en-us/q306121.exe


-----

==== MS01-052 - Invalid RDP Data Can Cause Terminal Service Failure ====
''Posted: 2001/10/18''

===== 307454 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: Q307454_W2K_SP3_x86_en.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q307454/nt5/en-us/q307454_w2k_sp3_x86_en.exe
===== 307454 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q307454i.exe'''

* http://download.microsoft.com/download/4/B/5/4B5812E7-68D0-4636-8EC6-1C290948C225/WindowsNT4TerminalServer-KB307454-x86-ENU.EXE


-----

==== MS01-053 - Downloaded Applications Can Execute on Mac IE 5.1 for OS X ====
''Posted: 2001/10/23''

===== 311052 =====
'''Affected Products:'''

* Internet Explorer 5.1 for Macintosh OS X
** Internet Explorer 5.1 for Macintosh OS X Gold

'''Patch: MacIE501'''

* http://www.apple.com/macosx/upgrade/softwareupdates.html


-----

==== MS01-054 - Invalid Universal Plug and Play Request Can Disrupt System Operation ====
''Posted: 2001/11/01''

===== 309521 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold

'''Patch: 309073USA8.EXE'''

* http://download.microsoft.com/download/win98/Patch/Q309073/W98/EN-US/309073USA8.EXE
===== 309521 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: Q309521_x86.exe'''

* http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms01-054.asp
===== 309521 =====
'''Affected Products:'''

* Windows Me
** Windows Me Gold

'''Patch: WinMEUPnP'''

* http://download.microsoft.com/download/winme/update/21388/winme/en-us/311311usam.exe


-----

==== MS01-055 - 13 November 2001 Cumulative Patch for IE ====
''Posted: 2001/11/08''

===== 312461 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 Gold

'''Patch: q312461.exe'''

* http://download.microsoft.com/download/ie60/secpac23/6/w98nt42kmexp/en-us/q313675.exe
===== 312461 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP2

'''Patch: Q312461.exe'''

* http://download.microsoft.com/download/ie55sp2/secpac23/5.5_sp2/win98me/en-us/q313675.exe


-----

==== MS01-056 - Windows Media Player .ASF Processor Contains Unchecked Buffer ====
''Posted: 2001/11/20''

===== 309521 =====
'''Affected Products:'''

* Windows Media Player for Windows XP
** Windows XP Gold

'''Patch: WinXPUPnP'''

* http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms01-054.asp
===== 308567 =====
'''Affected Products:'''

* Windows Media Player 7.1
** Windows Media Player 7.1 Gold

'''Patch: wm308567.exe'''

* http://download.microsoft.com/download/winmediaplayer/update/308567/win98mexp/en-us/wm308567.exe
===== 308567 =====
'''Affected Products:'''

* Windows Media Player 7.0
** Windows Media Player 7.0 Gold

'''Patch: wM308567.exe'''

* http://download.microsoft.com/download/winmediaplayer/update/308567/win98mexp/en-us/wm308567.exe
===== 308567 =====
'''Affected Products:'''

* Windows Media Player 6.4
** Windows Media Player 6.4 Gold

'''Patch: Wm308567.exe'''

* http://download.microsoft.com/download/winmediaplayer/update/308567/win98mexp/en-us/wm308567.exe


-----

==== MS01-057 - Specially Formed Script in HTML Mail Can Execute in Exchange 5.5 OWA ====
''Posted: 2001/12/06''

===== 313576 =====
'''Affected Products:'''

* Exchange Server 5.5
** Exchange Server 5.5 SP4

'''Patch: Q313576i386.exe'''

* http://download.microsoft.com/download/exch55/patch/05.05.77.2655/nt45/en-us/q313576engi386.exe


-----

==== MS01-058 - 13 December 2001 Cumulative Patch for IE ====
''Posted: 2001/12/13''

===== 313675 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP2

'''Patch: q313675.exe'''

* http://download.microsoft.com/download/ie55sp2/secpac23/5.5_sp2/win98me/en-us/q313675.exe
===== 313675 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 Gold

'''Patch: Q313675.exe'''

* http://download.microsoft.com/download/ie60/secpac23/6/w98nt42kmexp/en-us/q313675.exe


-----

==== MS01-059 - Unchecked Buffer in Universal Plug and Play Can Lead to System Compromise ====
''Posted: 2001/12/19''

===== 315000 =====
'''Affected Products:'''

* Windows Me
** Windows Me Gold

'''Patch: 314757USAM.EXE'''

* http://download.microsoft.com/download/winme/update/22940/winme/en-us/314757usam.exe
===== 315000 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold

'''Patch: 314941USA8.EXE'''

* http://download.microsoft.com/download/win98se/patch/q314941/w98/en-us/314941usa8.exe
===== 315000 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: Q315000_WXP_SP1_x86_ENU.exe'''

* http://download.microsoft.com/download/whistler/patch/q315000/wxp/en-us/q315000_wxp_sp1_x86_enu.exe


-----

==== MS01-060 - SQL Server Text Formatting Functions Contain Unchecked Buffers ====
''Posted: 2001/12/20''

===== 304850 =====
'''Affected Products:'''

* SQL Server 2000
** SQL Server 2000 SP1

'''Patch: s80428i.exe'''

* http://download.microsoft.com/download/sqlsvr2000/patch/1.0/w98nt42kmexp/en-us/s80428i.exe
===== 304851 =====
'''Affected Products:'''

* SQL Server 7.0
** SQL Server 7.0 SP3

'''Patch: sql7'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;304851


-----

==== MS02-001 - Trusting Domains Do Not Verify Domain Membership of SIDs in Authorization Data ====
''Posted: 2002/01/22''

===== 317636 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q317636i.EXE'''

* http://www.microsoft.com/ntserver/terminalserver/downloads/critical/q317636/download.asp
===== 311401 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 2

'''Patch: w2kSP2SRP1.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q311401/nt5/en-us/w2ksp2srp1.exe
===== 311401 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Service Pack 2

'''Patch: w2kSP2SRP1.Exe'''

* http://download.microsoft.com/download/win2000platform/patch/q311401/nt5/en-us/w2ksp2srp1.exe


-----

==== MS02-002 - Malformed Network Request Can Cause Office v. X for Mac to Fail ====
''Posted: 2002/02/06''

===== 317879 =====
'''Affected Products:'''

* Office v. X for Macintosh
** Office v. X for Macintosh Gold

'''Patch: MacPatch'''

* http://www.microsoft.com/mac/download


-----

==== MS02-003 - Exchange 2000 System Attendant Incorrectly Sets Remote Registry Permissions ====
''Posted: 2002/02/07''

===== 316056 =====
'''Affected Products:'''

* Exchange 2000 Enterprise Server
** Exchange 2000 SP2
* Exchange 2000 Server
** Exchange 2000 SP2

'''Patch: Q316056engi386.EXE'''

* http://download.microsoft.com/download/exchangeentserver/patch/06.00.21.5770/nt5/en-us/q316056engi386.exe


-----

==== MS02-004 - Unchecked Buffer in Telnet Server Could Lead to Arbitrary Code Execution ====
''Posted: 2002/02/07''

===== 307298 =====
'''Affected Products:'''

* Interix 2.2
** Interix 2.2 Gold
* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: Q307298_W2K_SP3_x86_en.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q307298/nt5/en-us/q307298_w2k_sp3_x86_en.exe


-----

==== MS02-005 - 11 February 2002 Cumulative Patch for Internet Explorer ====
''Posted: 2002/02/11''

===== 316059 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 Gold

'''Patch: q316059.exe'''

* http://download.microsoft.com/download/ie60/secpac25/6/w98nt42kmexp/en-us/q316059.exe
===== 316059 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP1

'''Patch: q316059.Exe'''

* http://download.microsoft.com/download/ie55sp1/secpac25/5.5_sp1/win98me/en-us/q316059.exe
===== 316059 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP2

'''Patch: Q316059.exe'''

* http://download.microsoft.com/download/ie55sp2/secpac25/5.5_sp2/win98me/en-us/q316059.exe
===== 316059 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP2

'''Patch: Q316059.Exe'''

* http://download.microsoft.com/download/ie501sp2/secpac25/5.01_sp2/nt5/en-us/q316059.exe


-----

==== MS02-006 - Unchecked Buffer in SNMP Service Could Enable Arbitrary Code to be Run ====
''Posted: 2002/02/12''

===== 314147 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 4
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q314147i.exe'''

* http://download.microsoft.com/download/winntsp/patch/q314147/nt4/en-us/q314147i.exe
===== 314147 =====
'''Affected Products:'''

* Windows 95
** Windows 95 Gold
** Windows 95 SR 2.1
** Windows 95 SR 2.5
* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold
* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 4
** Windows NT4 Terminal Server Service Pack 5
** Windows NT4 Terminal Server Service Pack 6

'''Patch: nopatch'''

* http://download.microsoft.com/download/win98/update/23433/w98/en-us/314147usa8.exe
===== 314147 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: Q314147_W2K_SP3_X86_EN.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q314147/nt5/en-us/q314147_w2k_sp3_x86_en.exe
===== 314147 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: Q314147_WXP_SP1_x86_ENU.exe'''

* http://download.microsoft.com/download/whistler/patch/q314147/wxp/en-us/q314147_wxp_sp1_x86_enu.exe


-----

==== MS02-007 - SQL Server Remote Data Source Function Contain Unchecked Buffers ====
''Posted: 2002/02/20''

===== 317979 =====
'''Affected Products:'''

* Microsoft SQL Server 2000 Desktop Engine (MSDE 2000)
** Microsoft SQL Server 2000 Desktop Engine (MSDE 2000) SP2
* SQL Server 2000
** SQL Server 2000 SP2

'''Patch: 8.00.0578.exe'''

* http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms02-007.asp
===== 317979 =====
'''Affected Products:'''

* Microsoft Data Engine (MSDE)
** SQL Server 7.0 SP3
* SQL Server 7.0
** SQL Server 7.0 SP3

'''Patch: s71021a.exe'''

* http://download.microsoft.com/download/sql70/update/s71021a/alpha/en-us/s71021a.exe


-----

==== MS02-008 - XMLHTTP Control Can Allow Access to Local Files ====
''Posted: 2002/02/21''

===== 317244 =====
'''Affected Products:'''

* MSXML 4.0
** MSXML 4.0 Gold

'''Patch: msxml4qfe.exe'''

* http://download.microsoft.com/download/xml/patch/q317244/w9xnt4mexp/en-us/msxml4qfe.exe
===== 318202 =====
'''Affected Products:'''

* MSXML 2.6
** MSXML 2.6 Gold

'''Patch: Q318202_MSXML20_x86_en.exe'''

* http://download.microsoft.com/download/xml/patch/2.6/w9xnt4mexp/en-us/q318202_msxml20_x86.exe
===== 318203 =====
'''Affected Products:'''

* MSXML 3.0
** MSXML 3.0 Gold
** MSXML 3.0 SP1
** MSXML 3.0 SP2
** Office XP SP1
** Office XP SP2

'''Patch: Q318203_MSXML30_x86.exe'''

* http://download.microsoft.com/download/xml/patch/3.0/w9xnt4mexp/en-us/q318203_msxml30_x86.exe


-----

==== MS02-009 - Incorrect VBScript Handling in IE Can Allow Web Pages to Read Local Files ====
''Posted: 2002/02/21''

===== 318089 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP2

'''Patch: vbs51nen.exe'''

* http://www.microsoft.com/windows/ie/downloads/critical/q318089/download.asp
===== 318089 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP1

'''Patch: vbs55nen.exe'''

* http://www.microsoft.com/windows/ie/downloads/critical/q318089/download.asp
===== 318089 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP2

'''Patch: Vbs55nen.exe'''

* http://www.microsoft.com/windows/ie/downloads/critical/q318089/default.asp
===== 318089 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 Gold

'''Patch: vbs56nen.exe'''

* http://www.microsoft.com/windows/ie/downloads/critical/q318089/download.asp


-----

==== MS02-010 - Unchecked Buffer in ISAPI Filter Could Allow Commerce Server Compromise ====
''Posted: 2002/02/21''

===== 317615 =====
'''Affected Products:'''

* Commerce Server 2000
** Commerce Server 2000 Gold
** Commerce Server 2000 SP1
** Commerce Server 2000 SP2

'''Patch: Q317615_COMMERCE_2000_EN'''

* http://download.microsoft.com/download/comserver/patch/1.0/nt5/en-us/q317615_commerce_2000_en.exe


-----

==== MS02-011 - Authentication Flaw Could Allow Unauthorized Users To Authenticate To SMTP Service ====
''Posted: 2002/02/27''

===== 289258 =====
'''Affected Products:'''

* Exchange Server 5.5
** Exchange Server 5.5 SP4

'''Patch: Q289258engi386.EXE'''

* http://download.microsoft.com/download/exch55/patch/05.05.55.2655/nt45/en-us/q289258engi386.exe
===== 313450 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Service Pack 2

'''Patch: Q313450_W2K_SP3_X86_EN.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q313450/nt5/en-us/q313450_w2k_sp3_x86_en.exe


-----

==== MS02-012 - Malformed Data Transfer Request Can Cause Windows SMTP Service to Fail ====
''Posted: 2002/02/27''

===== 313450 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Service Pack 2

'''Patch: Q313450_W2K_SP3_X86_EN.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q313450/nt5/en-us/q313450_w2k_sp3_x86_en.exe
===== 313450 =====
'''Affected Products:'''

* Internet Information Services 5.1
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: Q313450_WXP_SP1_x86_ENU.exe'''

* http://download.microsoft.com/download/whistler/patch/q313450/wxp/en-us/q313450_wxp_sp1_x86_enu.exe


-----

==== MS02-013 - 04 March 2002 Cumulative VM Update ====
''Posted: 2002/03/04''

===== 300845 =====
'''Affected Products:'''

* Microsoft Virtual Machine (VM)
** Microsoft Virtual Machine (VM) Gold
* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold
* Windows Me
** Windows Me Gold
* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a
* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: msjavx86.eXe'''

* http://www.microsoft.com/java/vm/dl_vm40.htm
===== 300845 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 2

'''Patch: Q300845_W2K_SP3_X86_EN.exe'''

* http://www.microsoft.com/java/vm/dl_vm40.htm


-----

==== MS02-014 - Unchecked Buffer in Windows Shell Could Lead to Code Execution ====
''Posted: 2002/03/07''

===== 313829 =====
'''Affected Products:'''

* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q313829i.exe'''

* http://download.microsoft.com/download/winntsp/patch/q313829/nt4/en-us/q313829i.exe
===== 313829 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: Q313829i.eXE'''

* http://download.microsoft.com/download/winntsp/patch/q313829/nt4/en-us/q313829i.exe
===== 313829 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 2

'''Patch: Q313829_W2K_SP3_X86_EN.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q313829/nt5/en-us/q313829_w2k_sp3_x86_en.exe
===== 313829 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: q313829i.exe'''

* http://download.microsoft.com/download/winntsp/patch/q313829/nt4/en-us/q313829i.exe
===== 313829 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold

'''Patch: win9802-014'''

* http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/w9xnt4/en-us/q313829.exe


-----

==== MS02-015 - 28 March 2002 Cumulative Patch for Internet Explorer ====
''Posted: 2002/03/28''

===== 319182 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 Gold

'''Patch: q319182.exe'''

* http://download.microsoft.com/download/ie60/secpac26/6/w98nt42kmexp/en-us/q319182.exe
===== 319182 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP1

'''Patch: q319182.Exe'''

* http://download.microsoft.com/download/ie55sp1/secpac26/5.5_sp1/win98me/en-us/q319182.exe
===== 319182 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP2
** Internet Explorer 5.01 SP3
** Windows 2000 Service Pack 3

'''Patch: Q319182.exe'''

* http://download.microsoft.com/download/ie501sp2/secpac26/5.01_sp2/w982knt4/en-us/q319182.exe
===== 319182 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP2

'''Patch: Q319182.EXE'''

* http://download.microsoft.com/download/ie55sp2/secpac26/5.5_sp2/win98me/en-us/q319182.exe


-----

==== MS02-016 - Opening Group Policy Files for Exclusive Read Blocks Policy Application (Q318593) ====
''Posted: 2002/04/04''

===== 318593 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 2

'''Patch: Q318593_W2K_SP3_X86_EN.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q318593/nt5/en-us/q318593_w2k_sp3_x86_en.exe


-----

==== MS02-017 - Unchecked Buffer in the Multiple UNC Provider Could Enable Code Execution (Q311967) ====
''Posted: 2002/04/04''

===== 311967 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q312895i.exe'''

* http://www.microsoft.com/ntserver/nts/downloads/critical/q311967/download.asp
===== 311967 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: Q311967_W2K_SP3_X86_EN.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q311967/nt5/en-us/q311967_w2k_sp3_x86_en.exe
===== 311967 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: Q311967_WXP_SP1_x86_ENU.exe'''

* http://download.microsoft.com/download/whistler/patch/q311967/wxp/en-us/q311967_wxp_sp1_x86_enu.exe
===== 311967 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: q312895i.exe'''

* http://www.microsoft.com/ntserver/terminalserver/downloads/critical/q311967/download.asp


-----

==== MS02-018 - Cumulative Patch for Internet Information Service (Q319733) ====
''Posted: 2002/04/10''

===== 319733 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: Q319733_W2K_SP3_X86_EN.exe'''

* http://download.microsoft.com/download/iis50/patch/q319733/nt5/en-us/q319733_w2k_sp3_x86_en.exe
===== 319733 =====
'''Affected Products:'''

* Internet Information Services 5.1
** Windows XP Gold

'''Patch: Q319733_WXP_SP1_x86_ENU.exe'''

* http://download.microsoft.com/download/iis50/patch/q319733/wxp/en-us/q319733_wxp_sp1_x86_enu.exe
===== 319733 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 5
** Windows NT4 Service Pack 6a

'''Patch: Q319733i.exe'''

* http://www.microsoft.com/ntserver/nts/downloads/security/q319733/download.asp
===== 319733 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q319733ts.exe'''

* http://www.microsoft.com/ntserver/terminalserver/downloads/critical/q317636/download.asp


-----

==== MS02-019 - Unchecked Buffer in Internet Explorer and Office for Mac Can Cause Code to Execute (Q321309) ====
''Posted: 2002/04/16''

===== 321309 =====
'''Affected Products:'''

* Entourage 2001 for Macintosh
** Office 2001 for Macintosh Gold
* Entourage v. X for Macintosh
** Office v. X for Macintosh Gold
* Excel 2001 for Macintosh
** Office 2001 for Macintosh Gold
* Excel v. X for Macintosh
** Office v. X for Macintosh Gold
* Internet Explorer 5.1 for Machintosh OS 8 and 9
** Internet Explorer 5.1 for Machintosh OS 8 and 9 Gold
* Internet Explorer 5.1 for Macintosh OS X
** Internet Explorer 5.1 for Macintosh OS X Gold
* Outlook Express 5 for Macintosh
** Outlook Express 5 for Macintosh Gold
* PowerPoint 2001 for Macintosh
** Office 2001 for Macintosh Gold
* PowerPoint 98 for Macintosh
** Office 98 for Macintosh Gold
* PowerPoint v. X for Macintosh
** Office v. X for Macintosh Gold

'''Patch: macpatches'''

* http://support.microsoft.com/default.aspx?scid=fh;en-us;kbhowto&sd=tech&ln=en-us&fr=0


-----

==== MS02-020 - SQL Extended Procedure Functions Contain Unchecked Buffers (Q319507) ====
''Posted: 2002/04/17''

===== 319507 =====
'''Affected Products:'''

* Microsoft Data Engine (MSDE)
** SQL Server 7.0 SP3
* SQL Server 7.0
** SQL Server 7.0 SP3

'''Patch: 7.00.1030_SQL7_sp3_x86_enu.exe'''

* http://download.microsoft.com/download/sql70/patch/sp3/win98mexp/en-us/7.00.1030_sql7_sp3_x86_enu.exe
===== 319507 =====
'''Affected Products:'''

* Microsoft SQL Server 2000 Desktop Engine (MSDE 2000)
** Microsoft SQL Server 2000 Desktop Engine (MSDE 2000) SP2
* SQL Server 2000
** SQL Server 2000 SP2

'''Patch: 8.00.0608_SQL2K_sp2_x86_enu.exe'''

* http://download.microsoft.com/download/sqlsvr2000/patch/sp2/win98mexp/en-us/8.00.0608_sql2k_sp2_x86_enu.exe


-----

==== MS02-021 - E-mail Editor Flaw Could Lead to Script Execution on Reply or Forward (Q321804) ====
''Posted: 2002/04/25''

===== 320536 =====
'''Affected Products:'''

* Word 2000
** Office 2000 Gold
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a

'''Patch: wrd0901.exe'''

* http://download.microsoft.com/download/word2000/patch/wrd0901/win98mexp/en-us/wrd0901.exe
===== 320441 =====
'''Affected Products:'''

* Word 2002
** Office XP Gold

'''Patch: wrd1003.exe'''

* http://download.microsoft.com/download/word2002/patch/wrd1003/w982kmexp/en-us/wrd1003.exe


-----

==== MS02-022 - Unchecked Buffer in MSN Chat Control Can Lead to Code Execution (Q321661) ====
''Posted: 2002/05/08''

===== 321661 =====
'''Affected Products:'''

* MSN Messenger
** MSN Messenger Gold

'''Patch: messenger'''

* http://download.microsoft.com/download/chat/patch/4.1/w98xp/en-us/msnchatsecfix.exe


-----

==== MS02-023 - 15 May 2002 Cumulative Patch for Internet Explorer (Q321232) ====
''Posted: 2002/05/15''

===== 321232 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 Gold

'''Patch: q321232.exe'''

* http://download.microsoft.com/download/ie60/secpac27/6/w98nt42kmexp/en-us/q321232.exe
===== 321232 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP2

'''Patch: q321232.Exe'''

* http://download.microsoft.com/download/ie501sp2/secpac27/5.01_sp2/nt45/en-us/q321232.exe
===== 321232 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP3
** Windows 2000 Service Pack 3

'''Patch: q321232.ExE'''

* http://windowsupdate.microsoft.com/
===== 321232 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP2

'''Patch: Q321232.exe'''

* http://download.microsoft.com/download/ie55sp2/secpac27/5.5_sp2/w98nt42kme/en-us/q321232.exe
===== 321232 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP1

'''Patch: Q321232.Exe'''

* http://download.microsoft.com/download/ie55sp1/secpac27/5.5_sp1/w98nt42kme/en-us/q321232.exe


-----

==== MS02-024 - Authentication Flaw in Windows Debugger Can Lead to Elevated Privileges (Q320206) ====
''Posted: 2002/05/22''

===== 320206 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q320206i.exe'''

* http://download.microsoft.com/download/winntsp/patch/q320206/nt4/en-us/q320206i.exe
===== 320206 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: Q320206_W2K_SP4_X86_EN.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q320206/nt5/en-us/q320206_w2k_sp4_x86_en.exe
===== 320206 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: q320206i.exe'''

* http://download.microsoft.com/download/winntterminal/patch/q320206/nt4/en-us/q320206i.exe


-----

==== MS02-025 - Malformed Mail Attribute Can Cause Exchange 2000 to Exhaust CPU Resources (Q320436) ====
''Posted: 2002/05/28''

===== 320436 =====
'''Affected Products:'''

* Exchange 2000 Enterprise Server
** Exchange 2000 SP2
* Exchange 2000 Server
** Exchange 2000 SP2

'''Patch: Q320436enui386.EXE'''

* http://download.microsoft.com/download/exchangeentserver/patch/06.00.91.5770/nt5/en-us/q320436enui386.exe


-----

==== MS02-026 - Unchecked Buffer in ASP.NET Worker Process (Q322289) ====
''Posted: 2002/06/06''

===== 322289 =====
'''Affected Products:'''

* .NET Framework
** .NET Framework Gold

'''Patch: NDP10_QFEM_Q322289_En.exe'''

* http://download.microsoft.com/download/netframeworkredistributable/patch/1/nt45xp/en-us/ndp10_qfem_q322289_en.exe


-----

==== MS02-027 - Unchecked Buffer in Gopher Protocol Handler Can Run Code of Attacker's Choice (Q323889) ====
''Posted: 2002/06/11''

===== 323889 =====
'''Affected Products:'''

* Proxy Server 2.0
** Proxy Server 2.0 Gold

'''Patch: 29106_ENU_i386_zip.exe'''

* http://download.microsoft.com/download/proxy20/patch/2.0.177/nt45/en-us/29106_enu_i386_zip.exe
===== 323889 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP2

'''Patch: 323889_IE5.01_SP2'''

* http://download.microsoft.com/download/ie501sp2/p28_ie/5.01_sp2/nt5/en-us/q323759.exe
===== 323889 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP3
** Windows 2000 Service Pack 3

'''Patch: 323889_IE5.01_SP3'''

* http://download.microsoft.com/download/ie501sp2/p28_ie/5.01_sp2/nt5/en-us/q323759.exe
===== 323889 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP1

'''Patch: 323889_IE5.5_SP1'''

* http://download.microsoft.com/download/ie55sp1/p28_ie/5.5_sp1/w98nt42kme/en-us/q323759.exe
===== 323889 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP2

'''Patch: 323889_IE5.5_SP2'''

* http://download.microsoft.com/download/ie55sp2/p28_ie/5.5_sp2/w98nt42kme/en-us/q323759.exe
===== 323889 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 Gold

'''Patch: 323889_IE6.0'''

* http://download.microsoft.com/download/ie60/p28_ie/6/w98nt42kmexp/en-us/q323759.exe
===== 323889 =====
'''Affected Products:'''

* ISA Server 2000
** ISA Server 2000 SP1

'''Patch: isahf177.exe'''

* http://download.microsoft.com/download/isaserver2000/patch/3.0.1200.177/nt5/en-us/isahf177.exe


-----

==== MS02-028 - Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise (Q321599) ====
''Posted: 2002/06/11''

===== 321599 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: Q321599_W2K_SP4_X86_EN.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q321599/nt5/en-us/q321599_w2k_sp4_x86_en.exe
===== 321599 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q321599i.exe'''

* http://www.microsoft.com/ntserver/nts/downloads/security/q321599/download.asp


-----

==== MS02-029 - Unchecked Buffer in Remote Access Service Phonebook Could Lead to Code Execution (Q318138) ====
''Posted: 2002/06/11''

===== 318138 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q318138i.exe'''

* http://www.microsoft.com/ntserver/nts/downloads/security/q318138/download.asp
===== 318138 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2

'''Patch: Q318138_W2K_SP3_X86_EN.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q318138/nt5/en-us/q318138_w2k_sp3_x86_en.exe
===== 318138 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: Q318138_WXP_SP1_x86_ENU.exe'''

* http://download.microsoft.com/download/whistler/patch/q318138/wxp/en-us/q318138_wxp_sp1_x86_enu.exe
===== 318138 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: q318138i.exe'''

* http://www.microsoft.com/ntserver/terminalserver/downloads/security/q318138/download.asp
===== 318138 =====
'''Affected Products:'''

* Microsoft Routing and Remote Access Server for Windows NT 4.0
** Windows NT4 Service Pack 6a
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q318138i.Exe'''

* http://www.microsoft.com/ntserver/nts/downloads/security/q318138/default.asp


-----

==== MS02-030 - Unchecked Buffer in SQLXML Could Lead to Code Execution (Q321911) ====
''Posted: 2002/06/12''

===== 321911 =====
'''Affected Products:'''

* SQL Server 2000
** SQL Server 2000 SP2

'''Patch: 321911_SQL_2000.80_SP2'''

* http://www.microsoft.com/downloads/release.asp?releaseid=39547


-----

==== MS02-031 - Cumulative Patches for Excel and Word for Windows (Q324458) ====
''Posted: 2002/06/19''

===== 324126 =====
'''Affected Products:'''

* Excel 2000
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a

'''Patch: exc0901.exe'''

* http://download.microsoft.com/download/excel2000/patch/exc0901/w982kmexp/en-us/exc0901.exe
===== 323548 =====
'''Affected Products:'''

* Excel 2002
** Office XP SP1

'''Patch: exc1002.exe'''

* http://download.microsoft.com/download/excel2002/patch/exc1002/w982kmexp/en-us/exc1002.exe
===== 323547 =====
'''Affected Products:'''

* Word 2002
** Office XP SP1

'''Patch: wrd1004.exe'''

* http://download.microsoft.com/download/word2002/patch/wrd1004/w982kmexp/en-us/wrd1004.exe


-----

==== MS02-032 - Cumulative Patch for Windows Media Player (Q320920) ====
''Posted: 2002/06/26''

===== 320920 =====
'''Affected Products:'''

* Windows Media Player 6.4 for Windows 2000
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows Media Player 6.4 for Windows XP
** Windows XP Gold

'''Patch: wm320920_64.exe'''

* http://download.microsoft.com/download/winmediaplayer/update/320920/w98nt42kme/en-us/wm320920_64.exe
===== 320920 =====
'''Affected Products:'''

* Windows Media Player 6.4
** Windows Media Player 6.4 Gold

'''Patch: Wm320920_64.exe'''

* http://download.microsoft.com/download/winmediaplayer/update/320920/w98nt42kme/en-us/wm320920_64.exe
===== 320920 =====
'''Affected Products:'''

* Windows Media Player 7.1
** Windows Media Player 7.1 Gold

'''Patch: wm320920_71.exe'''

* http://download.microsoft.com/download/1/c/e/1ce6e116-7ef1-4006-bc78-f4ebd7f55a14/wm320920_71.exe
===== 320920 =====
'''Affected Products:'''

* Windows Media Player for Windows XP
** Windows XP Gold

'''Patch: wm320920_8.exe'''

* http://download.microsoft.com/download/winmediaplayer/update/320920/wxp/en-us/wm320920_8.exe


-----

==== MS02-033 - Unchecked Buffer in Profile Service Could Allow Code Execution in Commerce Server (Q322273) ====
''Posted: 2002/06/26''

===== 322273 =====
'''Affected Products:'''

* Commerce Server 2002
** Commerce Server 2002 Gold

'''Patch: Q322273_CS2002_EN.exe'''

* http://download.microsoft.com/download/comserver/patch/1.1/nt5/en-us/q322273_en.exe
===== 322273 =====
'''Affected Products:'''

* Commerce Server 2000
** Commerce Server 2000 Gold
** Commerce Server 2000 SP1
** Commerce Server 2000 SP2

'''Patch: Q322273_EN.EXE'''

* http://download.microsoft.com/download/commerceserver2002/patch/1.1/nt5/en-us/q322273_cs2002_en.exe


-----

==== MS02-034 - Cumulative Patch for SQL Server (Q316333) ====
''Posted: 2002/07/10''

===== 322853 =====
'''Affected Products:'''

* Microsoft SQL Server 2000 Desktop Engine (MSDE 2000)
** Microsoft SQL Server 2000 Desktop Engine (MSDE 2000) SP2
* SQL Server 2000
** SQL Server 2000 SP2

'''Patch: 8.00.0650_enu.exe'''

* http://download.microsoft.com/download/sqlsvr2000/update/8.00.0650/w98nt42kmexp/en-us/8.00.0650_enu.exe


-----

==== MS02-035 - SQL Server Installation Process May Leave Passwords on System (Q263968) ====
''Posted: 2002/07/10''

===== 263968 =====
'''Affected Products:'''

* SQL Server 7.0
** SQL Server 7.0 Gold
** SQL Server 7.0 SP1
** SQL Server 7.0 SP2
** SQL Server 7.0 SP3
** SQL Server 7.0 SP4

'''Patch: killpwd.exe'''

* http://download.microsoft.com/download/sqlsvr2000/utility/2.0/w98nt42kmexp/en-us/killpwd.exe
===== 263968 =====
'''Affected Products:'''

* SQL Server 2000
** SQL Server 2000 Gold
** SQL Server 2000 SP1
** SQL Server 2000 SP2

'''Patch: SQL2kKillPwd.exe'''

* http://download.microsoft.com/download/sqlsvr2000/utility/2.0/w98nt42kmexp/en-us/killpwd.exe


-----

==== MS02-036 - Authentication Flaw in Microsoft Metadirectory Services Could Allow Privilege Elevation (Q317138) ====
''Posted: 2002/07/24''

===== 317138 =====
'''Affected Products:'''

* Microsoft Metadirectory Services 2.2
** Microsoft Metadirectory Services 2.2 SP1

'''Patch: Q317138.EXE'''

* http://download.microsoft.com/download/mms22/patch/q317138/nt5/en-us/q317138.exe


-----

==== MS02-037 - Server Response To SMTP Client EHLO Command Results In Buffer Overrun (Q326322) ====
''Posted: 2002/07/24''

===== 326322 =====
'''Affected Products:'''

* Exchange Server 5.5
** Exchange Server 5.5 SP4

'''Patch: Q326322enui386.EXE'''

* http://download.microsoft.com/download/exch55/patch/05.05.59.2656/nt45/en-us/q326322enui386.exe


-----

==== MS02-038 - Unchecked Buffer in SQL Server 2000 Utilities Could Allow Code Execution (Q316333) ====
''Posted: 2002/07/24''

===== 316333 =====
'''Affected Products:'''

* Microsoft SQL Server 2000 Desktop Engine (MSDE 2000)
** Microsoft SQL Server 2000 Desktop Engine (MSDE 2000) SP2
* SQL Server 2000
** SQL Server 2000 SP2

'''Patch: 8.00.0686_enu.exe'''

* http://download.microsoft.com/download/1/8/9/1896f7e7-9431-470c-bad7-212b021d0123/sql-msde-criticalupdate_enu.msi


-----

==== MS02-039 - Buffer Overruns in SQL Server 2000 Resolution Service Could Enable Code Execution (Q323875) ====
''Posted: 2002/07/24''

===== 323875 =====
'''Affected Products:'''

* SQL Server 2000
** SQL Server 2000 SP2

'''Patch: Q319243_MDAC27_x86.exe'''

* http://download.microsoft.com/download/sqlsvr2000/patch/q323875/w98nt42kmexp/en-us/q323875_sql2000_sp2_en.exe


-----

==== MS02-040 - Unchecked Buffer in MDAC Function Could Enable SQL Server Compromise (Q326573) ====
''Posted: 2002/07/30''

===== 326573 =====
'''Affected Products:'''

* MDAC 2.7
** MDAC 2.7 Gold

'''Patch: Q323263_MDAC27_x86_en.exe'''

* http://download.microsoft.com/download/dasdk/patch/q323263/w98nt42kme/en-us/q323263_mdac27_x86_en.exe
===== 326573 =====
'''Affected Products:'''

* MDAC 2.5
** MDAC 2.5 SP2

'''Patch: Q323264_MDAC25_x86_en.exe'''

* http://download.microsoft.com/download/dasdk/patch/q323264/w9xnt4/en-us/q323264_mdac25_x86_en.exe
===== 326573 =====
'''Affected Products:'''

* MDAC 2.6
** MDAC 2.6 SP2

'''Patch: Q323266_MDAC26_x86_en.exe'''

* http://download.microsoft.com/download/dasdk/patch/q323266/win98me/en-us/q323266_mdac26_x86_en.exe


-----

==== MS02-041 - Unchecked Buffer in Content Management Server Could Enable Server Compromise (Q326075) ====
''Posted: 2002/08/06''

===== 326075 =====
'''Affected Products:'''

* Content Management Server 2001
** Content Management Server 2001 Gold
** Content Management Server 2001 SP1
** Content Management Server 2001 SRP1

'''Patch: mcms2001srp1.exe'''

* http://download.microsoft.com/download/contentmanagementser/sp/1.0/nt5/en-us/mcms2001srp1.exe


-----

==== MS02-042 - Flaw in Network Connection Manager Could Enable Privilege Elevation (Q326886) ====
''Posted: 2002/08/15''

===== 326886 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3

'''Patch: Q326886_W2K_SP4_X86_EN.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q326886/nt5/en-us/q326886_w2k_sp4_x86_en.exe


-----

==== MS02-043 - Cumulative Patch for SQL Server (Q316333) ====
''Posted: 2002/08/15''

===== 327068 =====
'''Affected Products:'''

* Microsoft Data Engine (MSDE)
** SQL Server 7.0 SP4
* SQL Server 7.0
** SQL Server 7.0 SP4

'''Patch: 7.00.1076_enu.exe'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;327068
===== 316333 =====
'''Affected Products:'''

* Microsoft SQL Server 2000 Desktop Engine (MSDE 2000)
** Microsoft SQL Server 2000 Desktop Engine (MSDE 2000) SP2
* SQL Server 2000
** SQL Server 2000 SP2

'''Patch: 8.00.0686_enu.exe'''

* http://download.microsoft.com/download/1/8/9/1896f7e7-9431-470c-bad7-212b021d0123/sql-msde-criticalupdate_enu.msi


-----

==== MS02-044 - Unsafe Functions in Office Web Components (Q328130) ====
''Posted: 2002/08/21''

===== 328130 =====
'''Affected Products:'''

* BackOffice Server 2000
** BackOffice Server 2000 Gold
* BizTalk Server 2000
** BizTalk Server 2000 Gold
** BizTalk Server 2000 SP1
** BizTalk Server 2000 SP2
* BizTalk Server 2002
** BizTalk Server 2002 Gold
** BizTalk Server 2002 SP1
* Commerce Server 2000
** Commerce Server 2000 Gold
** Commerce Server 2000 SP1
** Commerce Server 2000 SP2
* Commerce Server 2002
** Commerce Server 2002 Gold
* ISA Server 2000
** ISA Server 2000 Gold
** ISA Server 2000 SP1
* Office 2000
** Office 2000 Gold
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a
* Office Web Components 2000
** Office Web Components 2000 Gold
* Office Web Components 2002
** Office Web Components 2002 Gold
* Office XP
** Office XP Gold
** Office XP SP1
* Small Business Server 2000
** Small Business Server 2000 Gold

'''Patch: owcupd.exe'''

* http://download.microsoft.com/download/office2000/patch/owcupd/win98mexp/en-us/owcupd.exe
===== 328130 =====
'''Affected Products:'''

* Project 2002
** Project 2002 Gold

'''Patch: prj1001.exe'''

* http://download.microsoft.com/download/msftproject2002/prj1001/10/win98mexp/en-us/prj1001.exe
===== 328130 =====
'''Affected Products:'''

* Project Server 2002
** Project Server 2002 Gold

'''Patch: ps1001en.exe'''

* http://download.microsoft.com/download/microsoftproject2002/ps1001en/10/win98mexp/en-us/ps1001en.exe


-----

==== MS02-045 - Unchecked Buffer in Network Share Provider can lead to Denial of Service (Q326830) ====
''Posted: 2002/08/21''

===== 326830 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q326830i.exe'''

* http://download.microsoft.com/download/winntsp/Patch/Q326830/NT4/EN-US/Q326830i.exe
===== 326830 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3

'''Patch: Q326830_W2K_SP4_X86_EN.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q326830/nt5/en-us/q326830_w2k_sp4_x86_en.exe
===== 326830 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: Q326830_WXP_SP1_x86_ENU.exe'''

* http://download.microsoft.com/download/whistler/patch/q326830/wxp/en-us/q326830_wxp_sp1_x86_enu.exe
===== 326830 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q326830i.Exe'''

* http://www.microsoft.com/downloads/release.asp?releaseid=41519


-----

==== MS02-046 - Buffer Overrun in TSAC ActiveX Control Could Allow Code Execution (Q327521) ====
''Posted: 2002/08/21''

===== 327521 =====
'''Affected Products:'''

* Microsoft Terminal Services Advanced Client (TSAC) ActiveX control
** Microsoft Terminal Services Advanced Client (TSAC) ActiveX control Gold

'''Patch: tswebsetup.exe'''

* http://www.microsoft.com/windowsxp/pro/downloads/rdwebconn.asp


-----

==== MS02-047 - Cumulative Patch for Internet Explorer (Q323759) ====
''Posted: 2002/08/21''

===== 323759 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP2

'''Patch: q323759.exe'''

* http://download.microsoft.com/download/ie501sp2/p28_ie/5.01_sp2/nt5/en-us/q323759.exe
===== 323759 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP2

'''Patch: q323759.Exe'''

* http://download.microsoft.com/download/ie55sp2/p28_ie/5.5_sp2/w98nt42kme/en-us/q323759.exe
===== 323759 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP3
** Windows 2000 Service Pack 3

'''Patch: q323759.EXe'''

* http://www.microsoft.com/windows/ie/downloads/critical/q323759ie/default.asp
===== 323759 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP1

'''Patch: Q323759.exe'''

* http://download.microsoft.com/download/ie55sp1/p28_ie/5.5_sp1/w98nt42kme/en-us/q323759.exe
===== 323759 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 Gold

'''Patch: Q323759.Exe'''

* http://download.microsoft.com/download/ie60/p28_ie/6/w98nt42kmexp/en-us/q323759.exe


-----

==== MS02-048 - Flaw in Certificate Enrollment Control Could Allow Deletion of Digital Certificates (Q323172) ====
''Posted: 2002/08/28''

===== 323172 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q323172i.exe'''

* http://www.microsoft.com/ntserver/nts/downloads/critical/q323172/default.asp
===== 323172 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold

'''Patch: 323172USA8.EXE'''

* http://www.microsoft.com/windows98/downloads/contents/wucritical/q323172/default.asp
===== 323172 =====
'''Affected Products:'''

* Windows Me
** Windows Me Gold

'''Patch: 323172USAM.EXE'''

* http://www.microsoft.com/windows98/downloads/contents/wucritical/q323172/default.asp
===== 323172 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3

'''Patch: q323172_W2K_SP4_X86_EN.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q323172/nt5/en-us/q323172_w2k_sp4_x86_en.exe
===== 323172 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: Q323172_WXP_SP1_x86_ENU.exe'''

* http://download.microsoft.com/download/whistler/Patch/Q323172/WXP/EN-US/Q323172_WXP_SP1_x86_ENU.exe
===== 323172 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q323172i.Exe'''

* http://download.microsoft.com/download/winntterminal/patch/q323172/nt4/en-us/q323172i.exe


-----

==== MS02-049 - Flaw Could Enable Web Page to Launch Visual FoxPro 6.0 Application Without Warning (Q326568) ====
''Posted: 2002/09/04''

===== 326568 =====
'''Affected Products:'''

* Visual FoxPro 6.0
** Visual FoxPro 6.0 Gold

'''Patch: vfp_q326568_en.exe'''

* http://www.microsoft.com/release.asp?releaseid=42297


-----

==== MS02-050 - Certificate Validation Flaw Could Enable Identity Spoofing (Q329115) ====
''Posted: 2002/09/04''

===== 329115 =====
'''Affected Products:'''

* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q329115i.Exe'''

* http://www.microsoft.com/ntserver/nts/downloads/critical/q329115/default.asp
===== 329115 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: Q329115i.ExE'''

* http://www.microsoft.com/ntserver/nts/downloads/critical/q329115/default.asp
===== 329115 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3

'''Patch: Q329115_W2K_SP4_X86_EN.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q329115/nt5/en-us/q329115_w2k_sp4_x86_en.exe
===== 329115 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Gold
** Windows XP Service Pack 1

'''Patch: Q329115_WXP_SP2_x86_ENU.exe'''

* http://download.microsoft.com/download/whistler/Patch/Q329115/WXP/EN-US/Q329115_WXP_SP2_x86_ENU.exe
===== 329115 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: q329115i.EXE'''

* http://www.microsoft.com/ntserver/terminalserver/downloads/critical/q329115/default.asp
===== 329115 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
* Windows 98 SE
** Windows 98 Gold

'''Patch: Q329115-Win98'''

* http://www.microsoft.com/windows98/downloads/contents/wucritical/q329115/default.asp
===== 329115 =====
'''Affected Products:'''

* Windows Me
** Windows Me Gold

'''Patch: Q329115-WinME'''

* http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms02-050.asp
===== 329115 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB329115-x86-ENU.exe'''

* http://download.microsoft.com/download/8/8/4/884b78b8-130c-4565-b93b-54ed854c0497/Windows2000-KB329115-x86-ENU.exe


-----

==== MS02-051 - Cryptographic Flaw in RDP Protocol can Lead to Information Disclosure (Q324380) ====
''Posted: 2002/09/18''

===== 324380 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3

'''Patch: Q324380_W2K_SP4_X86_EN.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q324380/nt5/en-us/q324380_w2k_sp4_x86_en.exe
===== 324380 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: Q324380_WXP_SP1_x86_ENU.exe'''

* http://download.microsoft.com/download/whistler/patch/q324380/wxp/en-us/q324380_wxp_sp1_x86_enu.exe


-----

==== MS02-052 - Flaw in Java VM JDBC Classes Could Allow Code Execution (Q329077) ====
''Posted: 2002/09/18''

===== 329077 =====
'''Affected Products:'''

* Microsoft Virtual Machine (VM)
** Microsoft Virtual Machine (VM) Gold

'''Patch: vm-sfix3.exe'''

* http://windowsupdate.microsoft.com


-----

==== MS02-053 - Buffer Overrun in SmartHTML Interpreter Could Allow Code Execution (Q324096) ====
''Posted: 2002/09/24''

===== 324096 =====
'''Affected Products:'''

* FrontPage 2000 Server Extensions
** FrontPage 2000 Server Extensions Gold
* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold
* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: FPSE0901.exe'''

* http://download.microsoft.com/download/fp2000fd2000/patch/1/w9xnt4me/en-us/fpse0901.exe
===== 324096 =====
'''Affected Products:'''

* FrontPage Server Extensions 2002
** FrontPage Server Extensions 2002 Gold

'''Patch: MS02-053FPSE2002'''

* http://www.microsoft.com/technet/security/bulletin
===== 324096 =====
'''Affected Products:'''

* FrontPage 2000 Server Extensions
** FrontPage 2000 Server Extensions Gold
* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3

'''Patch: Q324096_W2K_SP4_X86_EN.exe'''

* http://download.microsoft.com/download/win2000pro/patch/q324096/nt5/en-us/q324096_w2k_sp4_x86_en.exe
===== 324096 =====
'''Affected Products:'''

* FrontPage 2000 Server Extensions
** FrontPage 2000 Server Extensions Gold
* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: Q324096_WXP_SP1_x86_ENU.exe'''

* http://download.microsoft.com/download/whistler/patch/q324096/wxp/en-us/q324096_wxp_sp1_x86_enu.exe


-----

==== MS02-054 - Unchecked Buffer in File Decompression Functions Could Lead to Code Execution (Q329048) ====
''Posted: 2002/10/02''

===== 329048 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold

'''Patch: 329048USA8.EXE'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;329048
===== 329048 =====
'''Affected Products:'''

* Windows Me
** Windows Me Gold

'''Patch: 329048USAM.EXE'''

* http://windowsupdate.microsoft.com
===== 329048 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: q329048_WXP_SP2_x86_ENU.exe'''

* http://download.microsoft.com/download/whistler/Patch/Q329048/WXP/EN-US/Q329048_WXP_SP2_x86_ENU.exe
===== 329048 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: Q329048_WXP_SP2_x86_ENU.exe'''

* http://download.microsoft.com/download/whistler/Patch/Q329048/WXP/EN-US/Q329048_WXP_SP2_x86_ENU.exe


-----

==== MS02-055 - Unchecked Buffer in Windows Help Facility Could Enable Code Execution (Q323255) ====
''Posted: 2002/10/02''

===== 323255 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: Hhupd.exe'''

* http://download.microsoft.com/download/winntsrv40/install/q323255/nt4/en-us/hhupd.exe
===== 323255 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold

'''Patch: 323255USA8.EXE'''

* http://www.microsoft.com/windows98/downloads/contents/wucritical/q323255/default.asp
===== 323255 =====
'''Affected Products:'''

* Windows Me
** Windows Me Gold

'''Patch: 323255USAM.EXE'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;323255#win9x
===== 323255 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3

'''Patch: Q323255_W2K_SP4_X86_EN.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q323255/nt5/en-us/q323255_w2k_sp4_x86_en.exe
===== 323255 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Gold
** Windows XP Service Pack 1

'''Patch: Q323255_WXP_SP2_x86_ENU.exe'''

* http://download.microsoft.com/download/whistler/patch/q323255/wxp/en-us/q323255_wxp_sp2_x86_enu.exe


-----

==== MS02-056 - Cumulative Patch for SQL Server (Q316333) ====
''Posted: 2002/10/02''

===== 316333 =====
'''Affected Products:'''

* Microsoft Data Engine (MSDE)
** SQL Server 7.0 SP4
* SQL Server 7.0
** SQL Server 7.0 SP4

'''Patch: 7.00.1078_enu.exe'''

* http://download.microsoft.com/download/sql70/patch/7.00.1078/win98mexp/en-us/7.00.1078_enu.exe
===== 316333 =====
'''Affected Products:'''

* Microsoft SQL Server 2000 Desktop Engine (MSDE 2000)
** Microsoft SQL Server 2000 Desktop Engine (MSDE 2000) SP2
* SQL Server 2000
** SQL Server 2000 SP2

'''Patch: 8.00.0686_enu.exe'''

* http://download.microsoft.com/download/1/8/9/1896f7e7-9431-470c-bad7-212b021d0123/sql-msde-criticalupdate_enu.msi


-----

==== MS02-057 - Flaw in Services for Unix 3.0 Interix SDK Could Allow Code Execution (Q329209) ====
''Posted: 2002/10/02''

===== 329209 =====
'''Affected Products:'''

* Services For Unix 3.0 Interix SDK
** Services For Unix 3.0 Interix SDK Gold

'''Patch: q329209_sfu_3_x86_en.exe'''

* http://download.microsoft.com/download/winntunx/patch/3.0/nt45xp/en-us/q329209_sfu_3_x86_en.exe


-----

==== MS02-058 - Unchecked Buffer in Outlook Express S/MIME Parsing Could Enable System Compromise (Q328676) ====
''Posted: 2002/10/09''

===== 328676 =====
'''Affected Products:'''

* Outlook Express 5.5
** Internet Explorer 5.5 SP2

'''Patch: OE55-Q328676'''

* http://download.microsoft.com/download/ie55sp2/oepac_29/5.5_sp2/w98nt42kme/en-us/q328389.exe
===== 328676 =====
'''Affected Products:'''

* Outlook Express 6.0
** Internet Explorer 6 Gold

'''Patch: OE60-Q328676'''

* http://download.microsoft.com/download/ie55sp2/oepac_29/5.5_sp2/w98nt42kme/en-us/q328389.exe


-----

==== MS02-059 - Flaw in Word Fields and Excel External Updates Could Lead to Information Disclosure (Q330008) ====
''Posted: 2002/10/16''

===== 330008 =====
'''Affected Products:'''

* Excel 2002
** Office XP SP2

'''Patch: Excel2002MS02-059'''

* http://download.microsoft.com/download/excel2002/patch/exc1003/w98nt42kmexp/en-us/exc1003.exe
===== 330008 =====
'''Affected Products:'''

* Word 2000
** Office 2000 Service Pack 1
** Office 2000 Service Pack 2
** Office 2000 SR-1
** Office 2000 SR-1a

'''Patch: Word2000MS02-059'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;330008#word9x
===== 330008 =====
'''Affected Products:'''

* Word 2001 for Macintosh
** Office 2001 for Macintosh SR1

'''Patch: Word2001MacMS02-059'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;330008#word9x
===== 330008 =====
'''Affected Products:'''

* Word 2002
** Office XP SP2

'''Patch: Word2002MS02-059'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;330008#word9x
===== 330008 =====
'''Affected Products:'''

* Word 97
** Office 97 Gold
* Word 98
** Word 98 Gold

'''Patch: Word98JMS02-059'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;330008#word9x
===== 330008 =====
'''Affected Products:'''

* Word 98 for Macintosh
** Office 98 for Macintosh Gold

'''Patch: Word98MacMS02-059'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;330008#word9x
===== 330008 =====
'''Affected Products:'''

* Word v. X for Macintosh
** Office v. X for Macintosh SR 1

'''Patch: Wordx.VMacMS02-059'''

* http://www.microsoft.com/mac/download/officex/officex_1011.asp


-----

==== MS02-060 - Flaw in Windows XP Help and Support Center Could Enable File Deletion (Q328940) ====
''Posted: 2002/10/16''

===== 328940 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: Q328940_WXP_SP1_x86_ENU.exe'''

* http://download.microsoft.com/download/whistler/patch/q328940/wxp/en-us/q328940_wxp_sp1_x86_enu.exe


-----

==== MS02-061 - Elevation of Privilege in SQL Server Web Tasks (Q316333) ====
''Posted: 2002/10/16''

===== 316333 =====
'''Affected Products:'''

* Microsoft Data Engine (MSDE)
** SQL Server 7.0 SP4
* SQL Server 7.0
** SQL Server 7.0 SP4

'''Patch: 7.00.1078_enu.exe'''

* http://download.microsoft.com/download/sql70/patch/7.00.1078/win98mexp/en-us/7.00.1078_enu.exe
===== 316333 =====
'''Affected Products:'''

* Microsoft SQL Server 2000 Desktop Engine (MSDE 2000)
** Microsoft SQL Server 2000 Desktop Engine (MSDE 2000) SP2
* SQL Server 2000
** SQL Server 2000 SP2

'''Patch: 8.00.0686_enu.exe'''

* http://download.microsoft.com/download/1/8/9/1896f7e7-9431-470c-bad7-212b021d0123/sql-msde-criticalupdate_enu.msi


-----

==== MS02-062 - Cumulative Patch for Internet Information Service (Q327696) ====
''Posted: 2002/10/30''

===== 327696 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3

'''Patch: Q327696_W2K_SP4_X86_EN.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q327696/nt5/en-us/q327696_w2k_sp4_x86_en.exe
===== 327696 =====
'''Affected Products:'''

* Internet Information Services 5.1
** Windows XP Gold
** Windows XP Service Pack 1

'''Patch: Q327696_WXP_SP2_x86_ENU.exe'''

* http://download.microsoft.com/download/whistler/patch/q327696/wxp/en-us/q327696_wxp_sp2_x86_enu.exe
===== 327696 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q327696I.EXE'''

* http://www.microsoft.com/ntserver/nts/downloads/security/q327696/download.asp


-----

==== MS02-063 - Unchecked Buffer in PPTP Implementation Could Enable Denial of Service Attacks (Q329834) ====
''Posted: 2002/10/30''

===== 329834 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3

'''Patch: Q329834_W2K_SP4_X86_EN.exe'''

* http://download.microsoft.com/download/win2000platform/patch/q329834/nt5/en-us/q329834_w2k_sp4_x86_en.exe
===== 329834 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: q329834_WXP_SP2_x86_ENU.exe'''

* http://download.microsoft.com/download/whistler/patch/q329834/wxp/en-us/q329834_wxp_sp2_x86_enu.exe
===== 329834 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: Q329834_WXP_SP2_x86_ENU.exe'''

* http://download.microsoft.com/download/whistler/patch/q329834/wxp/en-us/q329834_wxp_sp2_x86_enu.exe


-----

==== MS02-064 - Windows 2000 Default Permissions Could Allow Trojan Horse Program (Q327522) ====
''Posted: 2002/10/30''

===== 327522 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: W2K_MS02-064'''

* http://support.microsoft.com/default.aspx?scid=kb;en-us;327522


-----

==== MS02-065 - Buffer Overrun in Microsoft Data Access Components Could Lead to Code Execution (Q329414) ====
''Posted: 2002/11/19''

===== 329414 =====
'''Affected Products:'''

* MDAC 2.1
** MDAC 2.1 Gold
** MDAC 2.1 SP1
** MDAC 2.1 SP1A
** MDAC 2.1 SP2

'''Patch: q329414_mdacall_x86.exE'''

* http://download.microsoft.com/download/dasdk/patch/q329414/w98nt42kme/en-us/q329414_mdacall_x86.exe
===== 329414 =====
'''Affected Products:'''

* MDAC 2.5
** MDAC 2.5 Gold
** MDAC 2.5 SP1
** MDAC 2.5 SP2
** MDAC 2.5 SP3

'''Patch: q329414_mdacall_x86.eXE'''

* http://download.microsoft.com/download/dasdk/patch/q329414/w98nt42kme/en-us/q329414_mdacall_x86.exe
===== 329414 =====
'''Affected Products:'''

* MDAC 2.6
** MDAC 2.6 Gold
** MDAC 2.6 SP1
** MDAC 2.6 SP2

'''Patch: q329414_mdacall_x86.exe'''

* http://download.microsoft.com/download/dasdk/patch/q329414/w98nt42kme/en-us/q329414_mdacall_x86.exe


-----

==== MS02-066 - Cumulative Patch for Internet Explorer (Q328970) ====
''Posted: 2002/11/20''

===== 328970 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP3
** Windows 2000 Service Pack 3

'''Patch: q328970.exe'''

* http://www.microsoft.com/windows/ie/downloads/critical/q328970/download.asp
===== 328970 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP2

'''Patch: q328970.Exe'''

* http://www.microsoft.com/windows/ie/downloads/critical/q328970/default.asp
===== 328970 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 Gold

'''Patch: Q328970.Exe'''

* http://www.microsoft.com/windows/ie/downloads/critical/q328970/default.asp
===== 328970 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 SP1

'''Patch: Q328970.EXe'''

* http://www.microsoft.com/windows/ie/downloads/critical/q328970/default.asp


-----

==== MS02-067 - E-mail Header Processing Flaw Could Cause Outlook 2002 to Fail (331866) ====
''Posted: 2002/12/04''

===== 331866 =====
'''Affected Products:'''

* Outlook 2002
** Office XP SP2

'''Patch: MS02-067'''

* http://download.microsoft.com/download/outlook2002/patch/olk1005/w98nt42kmexp/en-us/olk1005n.exe


-----

==== MS02-068 - Cumulative Patch for Internet Explorer (324929) ====
''Posted: 2002/12/04''

===== 324929 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP2

'''Patch: q324929.Exe'''

* http://download.microsoft.com/download/ie55sp2/32secpac/5.5_sp2/w98nt42kme/en-us/q324929.exe
===== 324929 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 Gold

'''Patch: Q324929.Exe'''

* http://download.microsoft.com/download/ie60/32secpac/6/w98nt42kmexp/en-us/q324929.exe
===== 324929 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 SP1

'''Patch: Q324929.EXe'''

* http://download.microsoft.com/download/ie6sp1/32secpac/6_sp1/w98nt42kmexp/en-us/q324929.exe


-----

==== MS02-069 - Flaw in Microsoft VM Could Enable System Compromise (810030) ====
''Posted: 2002/12/11''

===== 810030 =====
'''Affected Products:'''

* Microsoft Virtual Machine (VM)
** Microsoft Virtual Machine (VM) Gold
* Windows 95
** Windows 95 Gold
* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold
* Windows Me
** Windows Me Gold
* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a
* Windows XP Home Edition
** Windows XP Gold
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Gold
** Windows XP Service Pack 1

'''Patch: Q810030_JVM'''

* http://windowsupdate.microsoft.com
===== 810030 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3

'''Patch: Q810030_W2K.exe'''

* http://www.microsoft.com/technet/security/bulletin


-----

==== MS02-070 - Flaw in SMB Signing Could Enable Group Policy to be Modified (329170) ====
''Posted: 2002/12/11''

===== 329170 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3

'''Patch: Q329170_W2K_SP4_X86_EN.exe'''

* http://microsoft.com/downloads/details.aspx?familyid=52eac216-a360-4e2d-9c6b-ad4d31c40ba2&displaylang=en
===== 329170 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: Q329170_WXP_SP2_x86_ENU.exe'''

* http://microsoft.com/downloads/details.aspx?familyid=77b49431-742b-4426-ad45-f09d3aed16cb&displaylang=en
===== 329170 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: Q329170_WXP_SP2_x86_ENU.Exe'''

* http://microsoft.com/downloads/details.aspx?familyid=77b49431-742b-4426-ad45-f09d3aed16cb&displaylang=en


-----

==== MS02-071 - Flaw in Windows WM_TIMER Message Handling Could Enable Privilege Elevation (328310) ====
''Posted: 2002/12/11''

===== 328310 =====
'''Affected Products:'''

* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q328310i.exE'''

* http://download.microsoft.com/download/4/b/6/4b676156-8df8-46f4-a087-f98980d71a32/q328310i.exe
===== 328310 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 2

'''Patch: Q328310_W2K_SP4_X86_EN.exe'''

* http://microsoft.com/downloads/details.aspx?familyid=c663a0ea-f6cb-4ee1-8afa-0c068f84a1d5&displaylang=en
===== 328310 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 3

'''Patch: Q328310_W2K_SP4_X86_EN.exE'''

* http://windowsupdate.microsoft.com/
===== 328310 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: Q328310_WXP_SP2_x86_ENU.exe'''

* http://download.microsoft.com/download/0/5/a/05acaef2-b18f-4d56-aa9d-f140c8e9ef1e/Q328310_WXP_SP2_x86_ENU.exe
===== 328310 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: Q328310_WXP_SP2_x86_ENU.Exe'''

* http://download.microsoft.com/download/0/5/a/05acaef2-b18f-4d56-aa9d-f140c8e9ef1e/Q328310_WXP_SP2_x86_ENU.exe
===== 328310 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: Q328310i.exe'''

* http://download.microsoft.com/download/4/b/6/4b676156-8df8-46f4-a087-f98980d71a32/q328310i.exe
===== 328310 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q328310i.EXE'''

* http://download.microsoft.com/download/b/5/5/b5506aac-f244-4eb8-9e7c-a18b7df563a3/q328310i.exe


-----

==== MS02-072 - Unchecked Buffer in Windows Shell Could Enable System Compromise (Q329390) ====
''Posted: 2002/12/17''

===== 329390 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: Q329390_WXP_SP2_x86_ENU.exe'''

* http://download.microsoft.com/download/f/9/b/f9b8831e-3e57-4557-b6b8-dcf3061f9bec/Q329390_WXP_SP2_x86_ENU.exe
===== 329390 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: Q329390_WXP_SP2_x86_ENU.Exe'''

* http://download.microsoft.com/download/f/9/b/f9b8831e-3e57-4557-b6b8-dcf3061f9bec/Q329390_WXP_SP2_x86_ENU.exe


-----

==== MS03-001 - Unchecked Buffer in Locator Service Could Lead to Code Execution (810833) ====
''Posted: 2003/01/20''

===== 810833 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q810833i.exe'''

* http://download.microsoft.com/download/c/7/9/c79405ee-cc6f-4a32-b4e1-70dc997e5b2f/q810833i.exe
===== 810833 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3

'''Patch: Q810833_W2K_SP4_X86_EN.exe'''

* http://download.microsoft.com/download/6/f/d/6fd40821-e967-4033-860b-4d104d9a863f/q810833_w2k_sp4_x86_en.exe
===== 810833 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: Q810833_WXP_SP2_x86_ENU.exe'''

* http://download.microsoft.com/download/3/f/1/3f18e6d0-52aa-413d-bedf-3bb5879924dc/q810833_wxp_sp2_x86_enu.exe
===== 810833 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: Q810833_WXP_SP2_x86_ENU.Exe'''

* http://download.microsoft.com/download/3/f/1/3f18e6d0-52aa-413d-bedf-3bb5879924dc/q810833_wxp_sp2_x86_enu.exe
===== 810833 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q810833i.Exe'''

* http://download.microsoft.com/download/3/6/d/36d7bf6a-56b3-4e56-b332-e4bd4ced994e/q810833i.exe


-----

==== MS03-002 - Cumulative Patch for Microsoft Content Management Server (810487) ====
''Posted: 2003/01/21''

===== 810487 =====
'''Affected Products:'''

* Content Management Server 2001
** Content Management Server 2001 Gold
** Content Management Server 2001 SP1
** Content Management Server 2001 SRP1

'''Patch: mcms2001srp2.exe'''

* http://download.microsoft.com/download/5/9/3/5936344a-480c-4343-bcea-b3f6aa25fa23/mcms2001srp2.exe


-----

==== MS03-003 - Flaw in how Outlook 2002 handles V1 Exchange Server Security Certificates could lead to Information Disclosure (812262) ====
''Posted: 2003/01/21''

===== 812262 =====
'''Affected Products:'''

* Outlook 2002
** Office XP SP2

'''Patch: Olk1006.exe'''

* http://download.microsoft.com/download/0/3/d/03dcc183-a46e-4c22-9fbd-1fcb32f0fd91/olk1006.exe


-----

==== MS03-004 - Cumulative Patch for Internet Explorer (810847) ====
''Posted: 2003/02/05''

===== 810847 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP3
** Windows 2000 Service Pack 3

'''Patch: q810847.exe'''

* http://download.microsoft.com/download/c/5/0/c502000a-704c-4f05-aae5-abb7fad88b5d/q810847.exe
===== 810847 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP2

'''Patch: q810847.Exe'''

* http://download.microsoft.com/download/5/4/b/54b2d815-b64b-49d5-9f08-3b6155c7814b/q810847.exe
===== 810847 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 Gold

'''Patch: Q810847.Exe'''

* http://download.microsoft.com/download/d/a/8/da89b2b7-8488-4f2f-97f3-c47f1e5dea71/q810847.exe
===== 810847 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 SP1

'''Patch: Q810847.EXe'''

* http://download.microsoft.com/download/b/c/7/bc76c521-f592-4842-bc72-3447656e98da/q810847.exe


-----

==== MS03-005 - Unchecked Buffer in Windows Redirector Could Allow Privilege Elevation (810577) ====
''Posted: 2003/02/05''

===== 810577 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: Q810577_WXP_SP2_x86_ENU.exe'''

* http://download.microsoft.com/download/c/4/0/c40b2fa1-1441-41e6-b73b-ddf19f06f8fb/Q810577_WXP_SP2_x86_ENU.exe
===== 810577 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: Q810577_WXP_SP2_x86_ENU.Exe'''

* http://download.microsoft.com/download/c/4/0/c40b2fa1-1441-41e6-b73b-ddf19f06f8fb/Q810577_WXP_SP2_x86_ENU.exe


-----

==== MS03-006 - Flaw in Windows Me Help and Support Center Could Enable Code Execution (812709) ====
''Posted: 2003/02/26''

===== 812709 =====
'''Affected Products:'''

* Windows Me
** Windows Me Gold

'''Patch: 812709USAM.exe'''

* http://windowsupdate.microsoft.com


-----

==== MS03-007 - Unchecked Buffer In Windows Component Could Cause Server Compromise (815021) ====
''Posted: 2003/03/17''

===== 815021 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q815021i.EXE'''

* http://download.microsoft.com/download/9/3/f/93f82d57-0f2f-40ab-9873-f41d0384e5ee/q815021i.exe
===== 815021 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 2

'''Patch: Q815021_W2K_SP4_X86_EN.EXE'''

* http://download.microsoft.com/download/8/e/5/8e571201-ee1c-47ce-ae05-09c567c6f5a2/q815021_w2k_sp4_x86_en.exe
===== 815021 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 3

'''Patch: Q815021_W2K_SP4_X86_EN.exe'''

* http://download.microsoft.com/download/8/e/5/8e571201-ee1c-47ce-ae05-09c567c6f5a2/q815021_w2k_sp4_x86_en.exe
===== 815021 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: Q815021_WXP_SP2_x86_ENU.exe'''

* http://download.microsoft.com/download/2/9/7/297a9f31-492d-4d52-98d8-6eb84b736654/q815021_wxp_sp2_x86_enu.exe
===== 815021 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: Q815021_WXP_SP2_x86_ENU.Exe'''

* http://download.microsoft.com/download/2/9/7/297a9f31-492d-4d52-98d8-6eb84b736654/q815021_wxp_sp2_x86_enu.exe
===== 815021 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q815021i.exe'''

* http://download.microsoft.com/download/7/5/5/7558f0aa-0351-40fb-b725-cc52842bded2/q815021i.exe


-----

==== MS03-008 - Flaw in Windows Script Engine could allow code execution (814078) ====
''Posted: 2003/03/19''

===== 814078 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
* Windows 98 SE
** Windows 98 Gold
* Windows Me
** Windows Me Gold
* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: js56men.exe'''

* http://download.microsoft.com/download/5/c/f/5cfd55d8-74b2-4338-868b-129ec01b5bd4/js56men.exe
===== 814078 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Gold
** Windows 2000 Service Pack 1
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows XP Home Edition
** Windows XP Gold
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Gold
** Windows XP Service Pack 1

'''Patch: js56nen.exe'''

* http://download.microsoft.com/download/a/0/2/a02d7c05-438d-49cd-853c-e69869d22d7a/js56nen.exe


-----

==== MS03-009 - Flaw in ISA Server DNS intrusion detection filter can cause Denial of Service (331065) ====
''Posted: 2003/03/19''

===== 331065 =====
'''Affected Products:'''

* ISA Server 2000
** ISA Server 2000 SP1

'''Patch: isahf256.exe'''

* http://microsoft.com/downloads/details.aspx?familyid=f62127c5-51e3-4b34-a6d3-b9cf840358bd&displaylang=en


-----

==== MS03-010 - Flaw in RPC Endpoint Mapper Could Allow Denial of Service Attacks (331953) ====
''Posted: 2003/03/26''

===== 331953 =====
'''Affected Products:'''

* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: NT4Workstation Note Message'''

* http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms03-010.asp
===== 331953 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a

'''Patch: NT4 Server Note Message'''

* http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms03-010.asp
===== 331953 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: NT4 TS Note Message'''

* http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms03-010.asp
===== 331953 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 2

'''Patch: Q331953_W2K_SP4_X86_EN.ExE'''

* http://download.microsoft.com/download/2/7/7/27712a2c-a2ce-4230-a0ad-6e5971d0089f/q331953_w2k_sp4_x86_en.exe
===== 331953 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 3

'''Patch: Q331953_W2K_SP4_X86_EN.exe'''

* http://download.microsoft.com/download/2/7/7/27712a2c-a2ce-4230-a0ad-6e5971d0089f/q331953_w2k_sp4_x86_en.exe
===== 331953 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: Q331953_WXP_SP2_x86_ENU.exe'''

* http://download.microsoft.com/download/c/5/7/c57a996c-99ab-4158-b5cc-362cbcf6b016/q331953_wxp_sp2_x86_enu.exe
===== 331953 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: Q331953_WXP_SP2_x86_ENU.Exe'''

* http://download.microsoft.com/download/c/5/7/c57a996c-99ab-4158-b5cc-362cbcf6b016/q331953_wxp_sp2_x86_enu.exe


-----

==== MS03-011 - Flaw in Microsoft VM Could Enable System Compromise (816093) ====
''Posted: 2003/04/09''

===== 816093 =====
'''Affected Products:'''

* Microsoft Virtual Machine (VM)
** Microsoft Virtual Machine (VM) Gold
* Windows 95
** Windows 95 Gold
* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold
* Windows Me
** Windows Me Gold
* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a
* Windows XP Home Edition
** Windows XP Gold
** Windows XP Service Pack 1
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Gold
** Windows XP Service Pack 1
** Windows XP Service Pack 2

'''Patch: msjavwu.exe'''

* http://windowsupdate.microsoft.com/
===== 816093 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3

'''Patch: Q816093_W2K_SP4_X86_EN.exe'''

* http://download.microsoft.com/download/5/7/7/577b7277-227d-4163-9b18-423356321682/Q816093_W2K_SP4_X86_EN.exe


-----

==== MS03-012 - Flaw In Winsock Proxy Service And ISA Firewall Service Can Cause Denial Of Service (331066) ====
''Posted: 2003/04/09''

===== 331066 =====
'''Affected Products:'''

* ISA Server 2000
** ISA Server 2000 SP1

'''Patch: MS03-012MSISAServer'''

* http://microsoft.com/downloads/details.aspx?familyid=3c43fad2-a888-4603-84b7-1053c8663436&displaylang=en
===== 331066 =====
'''Affected Products:'''

* Proxy Server 2.0
** Proxy Server 2.0 SP1

'''Patch: MS03-012MSProxyServer'''

* http://microsoft.com/downloads/details.aspx?familyid=c81688b7-20fb-45eb-bafd-031a0d2923e6&displaylang=en


-----

==== MS03-013 - Buffer Overrun in Windows Kernel Message Handling could Lead to Elevated Privileges (811493) ====
''Posted: 2003/04/16''

===== 811493 =====
'''Affected Products:'''

* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q811493i.EXE'''

* http://download.microsoft.com/download/8/e/4/8e44f497-c947-47c0-b846-1be11c605811/q811493i.exe
===== 811493 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: Q811493i.EXe'''

* http://download.microsoft.com/download/8/e/4/8e44f497-c947-47c0-b846-1be11c605811/q811493i.exe
===== 811493 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 2

'''Patch: Q811493_W2K_SP4_X86_EN.EXE'''

* http://download.microsoft.com/download/8/d/c/8dc79965-dfbc-4b25-9546-e23bc4b791c6/q811493_w2k_sp4_x86_en.exe
===== 811493 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 3

'''Patch: Q811493_W2K_SP4_X86_EN.exe'''

* http://download.microsoft.com/download/8/d/c/8dc79965-dfbc-4b25-9546-e23bc4b791c6/q811493_w2k_sp4_x86_en.exe
===== 811493 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: Q811493_WXP_SP2_x86_ENU.exe'''

* http://download.microsoft.com/download/5/5/c/55c5d75b-f113-42b0-9c37-ae60743d888f/q811493_wxp_sp2_x86_enu.exe
===== 811493 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: Q811493_WXP_SP2_x86_ENU.Exe'''

* http://download.microsoft.com/download/5/5/c/55c5d75b-f113-42b0-9c37-ae60743d888f/q811493_wxp_sp2_x86_enu.exe
===== 811493 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q811493i.exe'''

* http://download.microsoft.com/download/7/6/9/7694876b-3241-4e23-bacc-966ce97b038a/q811493i.exe


-----

==== MS03-014 - Cumulative Patch for Outlook Express (330994) ====
''Posted: 2003/04/23''

===== 330994 =====
'''Affected Products:'''

* Outlook Express 5.5
** Internet Explorer 5.5 SP2

'''Patch: q330994.exe'''

* http://download.microsoft.com/download/d/5/3/d531604f-3074-4140-93eb-345343b9e36a/q330994.exe
===== 330994 =====
'''Affected Products:'''

* Outlook Express 6.0
** Internet Explorer 6 Gold

'''Patch: Q330994.exe'''

* http://download.microsoft.com/download/f/d/1/fd19fc6e-7284-4a02-947e-a014fe473f1a/q330994.exe
===== 330994 =====
'''Affected Products:'''

* Outlook Express 6.0
** Internet Explorer 6 SP1

'''Patch: Q330994.Exe'''

* http://download.microsoft.com/download/1/5/f/15f23ca7-965e-4a10-95a5-5b3d6a83f218/q330994.exe


-----

==== MS03-015 - Cumulative Patch for Internet Explorer (813489) ====
''Posted: 2003/04/23''

===== 813489 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP3
** Windows 2000 Service Pack 3

'''Patch: q813489.exe'''

* http://download.microsoft.com/download/6/4/4/64456dfa-aeac-4651-88f5-12ad38b3e47d/q813489.exe
===== 813489 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP2

'''Patch: Q813489.exe'''

* http://download.microsoft.com/download/6/f/3/6f3ed97b-ef80-4939-8e59-441550d31e0b/q813489.exe
===== 813489 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 Gold

'''Patch: Q813489.Exe'''

* http://download.microsoft.com/download/c/c/4/cc4f0ced-8afd-4a94-9acb-0157e248e9ad/q813489.exe
===== 813489 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 SP1

'''Patch: Q813489.EXe'''

* http://download.microsoft.com/download/3/8/1/381b989a-35a5-4001-9d2f-fb07342a9823/q813489.exe


-----

==== MS03-016 - Cumulative Patch for BizTalk Server (815206) ====
''Posted: 2003/04/30''

===== 815206 =====
'''Affected Products:'''

* BizTalk Server 2000
** BizTalk Server 2000 Gold
** BizTalk Server 2000 SP1
** BizTalk Server 2000 SP2

'''Patch: BTS2000-815207-EN.EXE'''

* http://download.microsoft.com/download/4/e/7/4e7532a0-9d2f-45df-af5e-e48ba4e8b514/bts2000-815207-en.exe
===== 815206 =====
'''Affected Products:'''

* BizTalk Server 2002
** BizTalk Server 2002 Gold

'''Patch: BTS2002-815208-ENU.exe'''

* http://download.microsoft.com/download/e/f/f/eff3237f-9c46-44b4-8211-ec44f61b60a2/bts2002-815208-enu.exe


-----

==== MS03-017 - Flaw in Windows Media Player Skins Downloading Could Allow Code Execution (817787) ====
''Posted: 2003/05/07''

===== 817787 =====
'''Affected Products:'''

* Windows Media Player 7.1
** Windows Media Player 7.1 Gold

'''Patch: WindowsMedia71-KB817787-x86-ENU.exe'''

* http://download.microsoft.com/download/5/7/7/577b1651-989b-4749-9999-a27a445d9372/windowsmedia71-kb817787-x86-enu.exe
===== 817787 =====
'''Affected Products:'''

* Windows Media Player for Windows XP
** Windows XP Gold
** Windows XP Service Pack 1

'''Patch: WindowsMedia8-KB817787-x86-ENU.exe'''

* http://download.microsoft.com/download/e/6/4/e64435f5-8f8b-47e6-9ad8-adef6383d9fb/windowsmedia8-kb817787-x86-enu.exe


-----

==== MS03-018 - Cumulative Patch for Internet Information Service (811114) ====
''Posted: 2003/05/28''

===== 811114 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3

'''Patch: Q811114_W2K_SP4_X86_EN.exe'''

* http://download.microsoft.com/download/3/4/c/34ca2e4e-da75-4844-aa28-179ae00b1ac0/q811114_w2k_sp4_x86_en.exe
===== 811114 =====
'''Affected Products:'''

* Internet Information Services 5.1
** Windows XP Gold
** Windows XP Service Pack 1

'''Patch: Q811114_WXP_SP2_x86_ENU.exe'''

* http://download.microsoft.com/download/1/1/6/11606584-1476-44f7-863f-b578ec12c888/q811114_wxp_sp2_x86_enu.exe
===== 811114 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q811114I.EXE'''

* http://download.microsoft.com/download/e/5/b/e5b34aaa-c05c-4730-a6ef-23819aba0d4b/q811114i.exe


-----

==== MS03-019 - Flaw in ISAPI extension for Windows Media Services could cause denial of service (817772) ====
''Posted: 2003/05/28''

===== 817772 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsMedia41-KB817772-x86-ENU.exe'''

* http://download.microsoft.com/download/7/3/c/73c35094-45f4-469d-9609-2c7288abeec3/windowsmedia41-kb817772-x86-enu.exe
===== 817772 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3

'''Patch: WindowsMedia41-KB817772-x86-ENU.Exe'''

* http://download.microsoft.com/download/c/6/1/c617eba5-33ee-42db-a2e5-f3d1f5a38ebe/windowsmedia41-kb817772-x86-enu.exe


-----

==== MS03-020 - Cumulative Patch for Internet Explorer (818529) ====
''Posted: 2003/06/04''

===== 818529 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP3
** Windows 2000 Service Pack 3

'''Patch: q818529.exe'''

* http://download.microsoft.com/download/e/c/a/eca256fa-85f2-43f9-b37b-59f02b6a5d8a/q818529.exe
===== 818529 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP2

'''Patch: Q818529.exe'''

* http://download.microsoft.com/download/5/f/b/5fba06f5-ee7b-427b-8ba1-bb389e306425/q818529.exe
===== 818529 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 Gold

'''Patch: Q818529.Exe'''

* http://download.microsoft.com/download/d/5/2/d5201ee1-a185-468e-8382-f36b6cd58a24/q818529.exe
===== 818529 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 SP1

'''Patch: Q818529.EXe'''

* http://download.microsoft.com/download/e/e/f/eefaa3cd-7de2-4dd0-8299-229527ab00d3/q818529.exe
===== 818529 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB818529-x86-ENU.exe'''

* http://download.microsoft.com/download/4/8/2/482be253-f07e-422a-a37c-6c4b46727d98/windowsserver2003-kb818529-x86-enu.exe


-----

==== MS03-021 - Flaw In Windows Media Player May Allow Media Library Access (819639) ====
''Posted: 2003/06/25''

===== 819639 =====
'''Affected Products:'''

* Windows Media Player 9 Series
** Windows Media Player 9 Series Gold

'''Patch: WindowsMedia9-KB819639-x86-ENU.exe'''

* http://download.microsoft.com/download/6/6/9/6692c11a-e001-4706-bf86-c37a7111d9de/WindowsMedia9-KB819639-x86-ENU.exe
===== 819639 =====
'''Affected Products:'''

* Windows Media Player 9 Series for Windows Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsMedia9-KB819639-x86-ENU.EXE'''

* http://download.microsoft.com/download/2/e/9/2e90df3e-2d74-4be7-9279-538cfec1b895/windowsmedia9-kb819639-x86-enu.exe


-----

==== MS03-022 - Flaw in ISAPI Extension for Windows Media Services Could Cause Code Execution (822343) ====
''Posted: 2003/06/25''

===== 822343 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: WindowsMedia41-KB822343-x86-ENU.exe'''

* http://download.microsoft.com/download/e/c/8/ec87913f-a6c3-4d20-849c-5b3ead7e40e8/windowsmedia41-kb822343-x86-enu.exe


-----

==== MS03-023 - Buffer Overrun In HTML Converter Could Allow Code Execution (823559) ====
''Posted: 2003/07/09''

===== 823559 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: windows-kb823559-enu.exe'''

* http://download.microsoft.com/download/e/f/2/ef23e6c9-f0fd-494c-a989-1e7ffc006085/windows-kb823559-enu.exe
===== 823559 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
* Windows 98 SE
** Windows 98 Gold

'''Patch: 823559USA8.EXE'''

* http://download.microsoft.com/download/2/2/8/228e7940-a219-4df9-b800-139b11cc3945/windows-kb823559-enu.exe
===== 823559 =====
'''Affected Products:'''

* Windows Me
** Windows Me Gold

'''Patch: 823559USAM.EXE'''

* http://download.microsoft.com/download/2/2/8/228e7940-a219-4df9-b800-139b11cc3945/windows-kb823559-enu.exe
===== 823559 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB823559-x86-ENU.exe'''

* http://download.microsoft.com/download/0/0/6/006cef65-34f3-4db4-8153-e4a5bcc9b62e/windows2000-kb823559-x86-enu.exe
===== 823559 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Windows-KB823559-ENU.exe'''

* http://download.microsoft.com/download/e/4/3/e43b7a5a-3ae4-4a55-81e1-43ce62efbb7e/windows-kb823559-enu.exe
===== 823559 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB823559-x86-ENU.exe'''

* http://download.microsoft.com/download/1/8/2/18247efe-b9d4-4ecb-abf2-405e8f1f3734/windowsserver2003-kb823559-x86-enu.exe
===== 823559 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Gold
** Windows XP Service Pack 1

'''Patch: WindowsXP-KB823559-x86-ENU.exe'''

* http://download.microsoft.com/download/d/4/4/d44637d6-0933-4b1d-be69-4d5277a9fee3/windowsxp-kb823559-x86-enu.exe


-----

==== MS03-024 - Buffer Overrun in Windows Could Lead to Data Corruption (817606) ====
''Posted: 2003/07/09''

===== 817606 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q817606i.EXE'''

* http://download.microsoft.com/download/0/a/9/0a95e33a-2bb7-4e0a-b389-8eaac99ef364/q817606i.exe
===== 817606 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: Q817606_WXP_SP2_x86_ENU.exe'''

* http://download.microsoft.com/download/4/4/9/449f342f-d39b-4eca-8a59-c8600e50d049/q817606_wxp_sp2_x86_enu.exe
===== 817606 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: Q817606_WXP_SP2_x86_ENU.Exe'''

* http://download.microsoft.com/download/4/4/9/449f342f-d39b-4eca-8a59-c8600e50d049/q817606_wxp_sp2_x86_enu.exe
===== 817606 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q817606i.exe'''

* http://download.microsoft.com/download/c/4/6/c461ea9d-5356-4f72-b97d-082cbc228b6d/q817606i.exe
===== 817606 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 3

'''Patch: Windows2000-KB817606-x86-ENU.exe'''

* http://download.microsoft.com/download/0/b/3/0b306d3f-f43e-4086-bc44-feacdfbd46bf/windows2000-kb817606-x86-enu.exe


-----

==== MS03-025 - Flaw in Windows Message Handling through Utility Manager Could Enable Privilege Elevation (822679) ====
''Posted: 2003/07/09''

===== 822679 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 3

'''Patch: Windows2000-KB822679-x86-ENU.exe'''

* http://download.microsoft.com/download/2/6/1/2619dbe3-23c3-4b93-8f24-4bcfe4c4a508/windows2000-kb822679-x86-enu.exe


-----

==== MS03-026 - Buffer Overrun In RPC Interface Could Allow Code Execution (823980) ====
''Posted: 2003/07/16''

===== 823980 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q823980i.exe'''

* http://download.microsoft.com/download/4/6/c/46c9c414-19ea-4268-a430-53722188d489/q823980i.exe
===== 823980 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: Q823980i.EXE'''

* http://download.microsoft.com/download/6/5/1/651c3333-4892-431f-ae93-bf8718d29e1a/q823980i.exe
===== 823980 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 2

'''Patch: Windows2000-KB823980-x86-ENU.exe'''

* http://download.microsoft.com/download/0/1/f/01fdd40f-efc5-433d-8ad2-b4b9d42049d5/windows2000-kb823980-x86-enu.exe
===== 823980 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 3

'''Patch: Windows2000-KB823980-x86-ENU.EXE'''

* http://download.microsoft.com/download/0/1/f/01fdd40f-efc5-433d-8ad2-b4b9d42049d5/windows2000-kb823980-x86-enu.exe
===== 823980 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB823980-x86-ENU.EXE'''

* http://download.microsoft.com/download/0/1/f/01fdd40f-efc5-433d-8ad2-b4b9d42049d5/windows2000-kb823980-x86-enu.exe
===== 823980 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB823980-x86-ENU.exe'''

* http://download.microsoft.com/download/8/f/2/8f21131d-9df3-4530-802a-2780629390b9/windowsserver2003-kb823980-x86-enu.exe
===== 823980 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: WindowsXP-KB823980-x86-ENU.exe'''

* http://download.microsoft.com/download/9/8/b/98bcfad8-afbc-458f-aaee-b7a52a983f01/windowsxp-kb823980-x86-enu.exe
===== 823980 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowsXP-KB823980-x86-ENU.EXE'''

* http://download.microsoft.com/download/9/8/b/98bcfad8-afbc-458f-aaee-b7a52a983f01/windowsxp-kb823980-x86-enu.exe


-----

==== MS03-027 - Unchecked Buffer in Windows Shell Could Enable System Compromise (821557) ====
''Posted: 2003/07/16''

===== 821557 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowsXP-KB821557-x86-ENU.exe'''

* http://download.microsoft.com/download/e/7/c/e7c003d9-1f0e-441d-9a98-ef220399521d/windowsxp-kb821557-x86-enu.exe
===== 821557 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: WindowsXP-KB821557-x86-ENU.EXE'''

* http://download.microsoft.com/download/e/7/c/e7c003d9-1f0e-441d-9a98-ef220399521d/windowsxp-kb821557-x86-enu.exe


-----

==== MS03-028 - Flaw in ISA Server Error Pages Could Allow Cross-Site Scripting Attack (816456) ====
''Posted: 2003/07/16''

===== 816456 =====
'''Affected Products:'''

* ISA Server 2000
** ISA Server 2000 SP1

'''Patch: ISA2000-KB816456-x86.exe'''

* http://download.microsoft.com/download/4/6/4/464c95cd-8488-410d-bacb-69b25eaa7822/isa2000-kb816456-x86.exe


-----

==== MS03-029 - Flaw in Windows Function Could Allow Denial of Service (823803) ====
''Posted: 2003/07/23''

===== 823803 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q823803i.exe'''

* http://download.microsoft.com/download/2/4/c/24cbb182-3d45-4b09-a2b9-a23372dddac4/q823803i.exe
===== 823803 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Server-KB823803-x86-ENU.EXE'''

* http://download.microsoft.com/download/0/c/4/0c43ffdb-58fc-4231-83c6-4bfa69f70680/windowsnt4server-kb823803-x86-enu.exe


-----

==== MS03-030 - Unchecked Buffer in DirectX Could Enable System Compromise (819696) ====
''Posted: 2003/07/23''

===== 819696 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q819696i.EXE'''

* http://www.microsoft.com/technet/security/bulletin
===== 819696 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold
* Windows Me
** Windows Me Gold

'''Patch: DirectX9-KB819696-x86-ENU.exe'''

* http://www.microsoft.com/technet/security/bulletin
===== 819696 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Gold
** Windows XP Service Pack 1

'''Patch: Q819696_WXP_SP2_x86_ENU.exe'''

* http://www.microsoft.com/technet/security/bulletin
===== 819696 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Q819696i.exe'''

* http://www.microsoft.com/technet/security/bulletin
===== 819696 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 3

'''Patch: Windows2000-KB819696-x86-ENU.exe'''

* http://www.microsoft.com/technet/security/bulletin
===== 819696 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB819696-x86-ENU.exe'''

* http://www.microsoft.com/technet/security/bulletin
===== 819696 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB819696-x86-ENU.exe'''

* http://www.microsoft.com/technet/security/bulletin


-----

==== MS03-031 - Cumulative Patch for Microsoft SQL Server (815495) ====
''Posted: 2003/07/23''

===== 815495 =====
'''Affected Products:'''

* Microsoft SQL Server 2000 Desktop Engine (MSDE 2000)
** Microsoft SQL Server 2000 Desktop Engine (MSDE 2000) SP3
** Microsoft SQL Server 2000 Desktop Engine (MSDE 2000) SP3a
* SQL Server 2000
** SQL Server 2000 SP3

'''Patch: SQL2000-KB815495-8.00.0818-ENU.exe'''

* http://download.microsoft.com/download/6/9/e/69e80e6d-fb5e-4e84-9c4f-08a57917bc61/sql2000-kb815495-8.00.0818-enu.exe
===== 815495 =====
'''Affected Products:'''

* Microsoft Data Engine (MSDE)
** SQL Server 7.0 SP4
* SQL Server 7.0
** SQL Server 7.0 SP4

'''Patch: SQL70-KB815495-v7.00.1094-ENU.exe'''

* http://download.microsoft.com/download/3/a/b/3ab00af0-f8a2-433f-9df8-3788dea8bc23/sql70-kb815495-v7.00.1094-enu.exe


-----

==== MS03-032 - Cumulative Patch for Internet Explorer (822925) ====
''Posted: 2003/08/20''

===== 822925 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP3
** Windows 2000 Service Pack 3

'''Patch: q822925.exe'''

* http://windowsupdate.microsoft.com/
===== 822925 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP4

'''Patch: q822925.ExE'''

* http://windowsupdate.microsoft.com/
===== 822925 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP2

'''Patch: q822925.EXE'''

* http://windowsupdate.microsoft.com/
===== 822925 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 Gold

'''Patch: Q822925.exe'''

* http://windowsupdate.microsoft.com/
===== 822925 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 SP1

'''Patch: Q822925.EXE'''

* http://windowsupdate.microsoft.com/
===== 822925 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB822925-x86-ENU.exe'''

* http://download.microsoft.com/download/1/b/b/1bbc8a99-1263-447b-87cc-def7a6cb3591/windowsserver2003-kb822925-x86-enu.exe


-----

==== MS03-033 - Unchecked Buffer in MDAC Function Could Enable System Compromise  (823718) ====
''Posted: 2003/08/20''

===== 823718 =====
'''Affected Products:'''

* MDAC 2.7
** MDAC 2.7 Gold

'''Patch: q823718_MDAC_SecurityPatch.exe'''

* http://download.microsoft.com/download/6/0/5/6057b392-2340-4c8d-b95c-862f2bb9b9db/Q823718_MDAC_SecurityPatch.exe
===== 823718 =====
'''Affected Products:'''

* MDAC 2.7
** MDAC 2.7 SP1

'''Patch: q823718_MDAC_SecurityPatch.EXE'''

* http://download.microsoft.com/download/6/0/5/6057b392-2340-4c8d-b95c-862f2bb9b9db/Q823718_MDAC_SecurityPatch.exe
===== 823718 =====
'''Affected Products:'''

* MDAC 2.6
** MDAC 2.6 SP2

'''Patch: Q823718_mdac_SecurityPatch.EXE'''

* http://download.microsoft.com/download/6/0/5/6057b392-2340-4c8d-b95c-862f2bb9b9db/Q823718_MDAC_SecurityPatch.exe
===== 823718 =====
'''Affected Products:'''

* MDAC 2.5
** MDAC 2.5 SP2

'''Patch: Q823718_MDAC_SecurityPatch.exe'''

* http://download.microsoft.com/download/6/0/5/6057b392-2340-4c8d-b95c-862f2bb9b9db/Q823718_MDAC_SecurityPatch.exe
===== 823718 =====
'''Affected Products:'''

* MDAC 2.5
** MDAC 2.5 SP3

'''Patch: Q823718_MDAC_SecurityPatch.EXE'''

* http://download.microsoft.com/download/6/0/5/6057b392-2340-4c8d-b95c-862f2bb9b9db/Q823718_MDAC_SecurityPatch.exe


-----

==== MS03-034 - Flaw in NetBIOS Could Lead to Information Disclosure (824105) ====
''Posted: 2003/09/03''

===== 824105 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB824105-x86-ENU.exe'''

* http://download.microsoft.com/download/6/1/c/61c0f4f2-0b48-470f-bc44-d2b7f6743a04/windows2000-kb824105-x86-enu.exe
===== 824105 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Server-KB824105-x86-ENU.EXE'''

* http://download.microsoft.com/download/e/b/0/eb0efc08-a68b-4635-9287-7894b33276eb/windowsnt4server-kb824105-x86-enu.exe
===== 824105 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4TerminalServer-KB824105-x86-ENU.EXE'''

* http://download.microsoft.com/download/d/c/d/dcd4f5de-3383-43b3-a3c5-d564740d90eb/windowsnt4terminalserver-kb824105-x86-enu.exe
===== 824105 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB824105-x86-ENU.exe'''

* http://download.microsoft.com/download/9/8/a/98aed36b-2dc7-4e60-873f-e019ee492319/windowsserver2003-kb824105-x86-enu.exe
===== 824105 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: WindowsXP-KB824105-x86-ENU.exe'''

* http://download.microsoft.com/download/2/3/2/232a8505-716c-4bfa-845a-bd9fbc5cc7b1/windowsxp-kb824105-x86-enu.exe
===== 824105 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowsXP-KB824105-x86-ENU.EXE'''

* http://download.microsoft.com/download/2/3/2/232a8505-716c-4bfa-845a-bd9fbc5cc7b1/windowsxp-kb824105-x86-enu.exe


-----

==== MS03-035 - Flaw in Microsoft Word Could Enable Macros to Run Automatically (827653) ====
''Posted: 2003/09/03''

===== 827653 =====
'''Affected Products:'''

* Office 2000
** Office 2000 Service Pack 2
** Office 2000 Service Pack 3
** Office 2000 SR-1
** Office 2000 SR-1a
* Word 2000
** Office 2000 Service Pack 2
** Office 2000 Service Pack 3
** Office 2000 SR-1
** Office 2000 SR-1a
* Works 2001
** Works 2001 Gold

'''Patch: office2000-kb824936-fullfile-enu.exe'''

* http://download.microsoft.com/download/4/d/3/4d3bbe30-65f8-4f21-b6e2-5393515e8e3f/office2000-kb824936-client-enu.exe
===== 827653 =====
'''Affected Products:'''

* Office XP
** Office XP SP2
* Word 2002
** Office XP SP2
* Works 2003
** Works 2003 Gold

'''Patch: officexp-kb824934-fullfile-enu.exe'''

* http://download.microsoft.com/download/b/2/4/b24b3867-2b5b-44d0-a841-f277fd6c41b6/officexp-kb824934-client-enu.exe


-----

==== MS03-036 - Buffer Overrun in WordPerfect Converter Could Allow Code Execution (827103) ====
''Posted: 2003/09/03''

===== 827103 =====
'''Affected Products:'''

* FrontPage 2000
** Office 2000 Service Pack 3
** Office 2000 SR-1
** Office 2000 SR-1a
* Office 2000
** Office 2000 Service Pack 2
** Office 2000 Service Pack 3
** Office 2000 SR-1
** Office 2000 SR-1a
* Publisher 2000
** Office 2000 Service Pack 3
** Office 2000 SR-1
** Office 2000 SR-1a
* Works 2001
** Works 2001 Gold

'''Patch: office2000-kb824993-fullfile-enu.exe'''

* http://www.microsoft.com/technet/security/bulletin
===== 827103 =====
'''Affected Products:'''

* FrontPage 2002
** Office XP SP1
** Office XP SP2
* Office XP
** Office XP SP1
** Office XP SP2
* Publisher 2002
** Office XP SP1
** Office XP SP2
* Works 2002
** Works 2002 Gold
* Works 2003
** Works 2003 Gold

'''Patch: officexp-kb824938-client-enu.exe'''

* http://www.microsoft.com/technet/security/bulletin


-----

==== MS03-037 - Flaw in Visual Basic for Applications Could Allow Arbitrary Code execution (822715) ====
''Posted: 2003/09/03''

===== 822715 =====
'''Affected Products:'''

* Access 97
** Office 97 Gold

'''Patch: MS03-037-1'''

* NA
===== 822715 =====
'''Affected Products:'''

* VBA 6.2
** VBA 6.2 Gold

'''Patch: MS03-037-10'''

* NA
===== 822715 =====
'''Affected Products:'''

* VBA 6.3
** VBA 6.3 Gold

'''Patch: MS03-037-11'''

* NA
===== 822715 =====
'''Affected Products:'''

* Visio 2002
** Visio 2002 Gold

'''Patch: MS03-037-12'''

* NA
===== 822715 =====
'''Affected Products:'''

* Word 97
** Office 97 Gold

'''Patch: MS03-037-13'''

* NA
===== 822715 =====
'''Affected Products:'''

* Word 98
** Word 98 Gold

'''Patch: MS03-037-14'''

* NA
===== 822715 =====
'''Affected Products:'''

* Excel 97
** Office 97 Gold

'''Patch: MS03-037-2'''

* NA
===== 822715 =====
'''Affected Products:'''

* Office 2000
** Office 2000 Service Pack 3

'''Patch: MS03-037-3'''

* NA
===== 822715 =====
'''Affected Products:'''

* Office XP
** Office XP SP2

'''Patch: MS03-037-4'''

* NA
===== 822715 =====
'''Affected Products:'''

* PowerPoint 97
** Office 97 Gold

'''Patch: MS03-037-5'''

* NA
===== 822715 =====
'''Affected Products:'''

* Project 2000
** Project 2000 SR1

'''Patch: MS03-037-6'''

* NA
===== 822715 =====
'''Affected Products:'''

* Project 2002
** Project 2002 Gold

'''Patch: MS03-037-7'''

* NA
===== 822715 =====
'''Affected Products:'''

* VBA 5.0
** VBA 5.0 Gold

'''Patch: MS03-037-8'''

* NA
===== 822715 =====
'''Affected Products:'''

* VBA 6.0
** VBA 6.0 Gold

'''Patch: MS03-037-9'''

* NA


-----

==== MS03-038 - Unchecked buffer in Microsoft Access Snapshot Viewer Could Allow Code Execution (827104) ====
''Posted: 2003/09/03''

===== 827104 =====
'''Affected Products:'''

* Access 2000
** Office 2000 Service Pack 3

'''Patch: office2000-kb826292-fullfile-enu.exe'''

* http://download.microsoft.com/download/2/d/5/2d5a89c9-972f-4135-a8d9-3747188552b2/office2000-kb826292-client-enu.exe
===== 827104 =====
'''Affected Products:'''

* Office XP
** Office XP SP1
** Office XP SP2

'''Patch: officexp-kb826293-client-enu.exe'''

* http://download.microsoft.com/download/2/2/3/223b52aa-0143-4a71-aaf2-ca097a1d2431/officexp-kb826293-client-enu.exe


-----

==== MS03-039 - Buffer Overrun In RPCSS Service Could Allow Code Execution (824146) ====
''Posted: 2003/09/10''

===== 824146 =====
'''Affected Products:'''

* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Workstation-KB824146-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/0/c/30cff3cd-414d-4754-b9db-276de8161eef/windowsnt4workstation-kb824146-x86-enu.exe
===== 824146 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 2

'''Patch: Windows2000-KB824146-x86-ENU.exe'''

* http://download.microsoft.com/download/0/a/6/0a634e35-f29a-4f26-b006-d315e898edef/windows2000-kb824146-x86-enu.exe
===== 824146 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 3

'''Patch: Windows2000-KB824146-x86-ENU.EXE'''

* http://download.microsoft.com/download/0/a/6/0a634e35-f29a-4f26-b006-d315e898edef/windows2000-kb824146-x86-enu.exe
===== 824146 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB824146-x86-ENU.EXE'''

* http://download.microsoft.com/download/0/a/6/0a634e35-f29a-4f26-b006-d315e898edef/windows2000-kb824146-x86-enu.exe
===== 824146 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Server-KB824146-x86-ENU.EXE'''

* http://download.microsoft.com/download/6/2/1/6216d162-1283-4e05-a505-3dc67b70155c/windowsnt4server-kb824146-x86-enu.exe
===== 824146 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4TerminalServer-KB824146-x86-ENU.EXE'''

* http://download.microsoft.com/download/8/b/5/8b534384-5ce7-482d-8886-7c3dac565f51/windowsnt4terminalserver-kb824146-x86-enu.exe
===== 824146 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB824146-x86-ENU.exe'''

* http://download.microsoft.com/download/5/7/d/57d367eb-ee72-41d6-99ec-e96724655976/windowsserver2003-kb824146-x86-enu.exe
===== 824146 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: WindowsXP-KB824146-x86-ENU.exe'''

* http://download.microsoft.com/download/c/d/d/cdd7ac92-e4cc-4b1e-bc2f-7a61b46b23bf/windowsxp-kb824146-x86-enu.exe
===== 824146 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowsXP-KB824146-x86-ENU.EXE'''

* http://download.microsoft.com/download/c/d/d/cdd7ac92-e4cc-4b1e-bc2f-7a61b46b23bf/windowsxp-kb824146-x86-enu.exe


-----

==== MS03-040 - Cumulative Patch for Internet Explorer (828750) ====
''Posted: 2003/10/03''

===== 828750 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 Gold

'''Patch: q828750.exe'''

* http://download.microsoft.com/download/a/4/e/a4ecf739-a31f-4a7a-8ca2-c676b4a9d1b4/q828750.exe
===== 828750 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP4

'''Patch: q828750.EXE'''

* http://download.microsoft.com/download/2/f/8/2f8969d9-e2b4-4350-bd9d-96668434785a/q828750.exe
===== 828750 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 SP1

'''Patch: Q828750.exe'''

* http://download.microsoft.com/download/a/b/b/abb44141-f5d9-4bca-b85c-9cdbee344f14/q828750.exe
===== 828750 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP2

'''Patch: Q828750.Exe'''

* http://download.microsoft.com/download/5/f/d/5fd22c56-00fa-41ab-8067-d9360c432c24/q828750.exe
===== 828750 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP3
** Windows 2000 Service Pack 3

'''Patch: Q828750.EXe'''

* http://download.microsoft.com/download/2/f/8/2f8969d9-e2b4-4350-bd9d-96668434785a/q828750.exe
===== 828750 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB828750-x86-ENU.exe'''

* http://download.microsoft.com/download/2/c/d/2cdb24fe-0308-4854-a3d3-30457402eb6e/windowsserver2003-kb828750-x86-enu.exe


-----

==== MS03-041 - Vulnerability in Authenticode Verification Could Allow Remote Code Execution (823182) ====
''Posted: 2003/10/15''

===== 823182 =====
'''Affected Products:'''

* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Workstation-KB823182-x86-ENU.EXE'''

* http://download.microsoft.com/download/c/e/1/ce16e002-97bd-44b1-83e5-e9f3f5d40a9c/windowsnt4workstation-kb823182-x86-enu.exe
===== 823182 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB823182-x86-ENU.exe'''

* http://download.microsoft.com/download/7/2/b/72b8a6a7-def8-4769-bc4b-2d1fa313b1da/windows2000-kb823182-x86-enu.exe
===== 823182 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 2

'''Patch: Windows2000-KB823182-x86-ENU-CustomServicePackSupport.EXE'''

* http://download.microsoft.com/download/3/f/0/3f0ba5fc-6549-4c3b-a414-eb823aa254e7/windows2000-kb823182-x86-enu-customservicepacksupport.exe
===== 823182 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Server-KB823182-x86-ENU.exe'''

* http://download.microsoft.com/download/0/c/3/0c33cde6-931b-437d-985e-a9351111691f/windowsnt4server-kb823182-x86-enu.exe
===== 823182 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4TerminalServer-KB823182-x86-ENU.exe'''

* http://download.microsoft.com/download/4/8/3/4830ab7c-bcec-4987-b853-1c4a36daa9b2/windowsnt4terminalserver-kb823182-x86-enu.exe
===== 823182 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB823182-x86-ENU.exe'''

* http://download.microsoft.com/download/0/1/2/0126e70b-7872-404c-978e-daa6b3bd8476/windowsserver2003-kb823182-x86-enu.exe
===== 823182 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: WindowsXP-KB823182-x86-ENU.exe'''

* http://download.microsoft.com/download/4/c/f/4cf3724a-ce0e-4553-8f27-0478ad9e1c53/windowsxp-kb823182-x86-enu.exe
===== 823182 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowsXP-KB823182-x86-ENU.Exe'''

* http://download.microsoft.com/download/4/c/f/4cf3724a-ce0e-4553-8f27-0478ad9e1c53/windowsxp-kb823182-x86-enu.exe


-----

==== MS03-042 - Buffer Overflow in Windows Troubleshooter ActiveX Control Could Allow Code Execution (826232) ====
''Posted: 2003/10/15''

===== 826232 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB826232-x86-ENU.exe'''

* http://download.microsoft.com/download/8/4/c/84cd9acc-246c-4a59-b9b2-297c86902a56/windows2000-kb826232-x86-enu.exe
===== 826232 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 2

'''Patch: Windows2000-KB826232-x86-ENU-CustomServicePackSupport.EXE'''

* http://download.microsoft.com/download/8/4/c/84cd9acc-246c-4a59-b9b2-297c86902a56/windows2000-kb826232-x86-enu.exe


-----

==== MS03-043 - Buffer Overrun in Messenger Service Could Allow Code Execution (828035) ====
''Posted: 2003/10/15''

===== 828035 =====
'''Affected Products:'''

* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Workstation-KB828035-x86-ENU.exe'''

* http://download.microsoft.com/download/b/7/8/b782d41c-3baf-49f1-b920-b67e5677723f/windowsnt4workstation-kb828035-x86-enu.exe
===== 828035 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 2

'''Patch: Windows2000-KB828035-x86-ENU'''

* http://download.microsoft.com/download/5/2/3/5231e3ef-ae49-4ee6-aa06-f9f226bc9cfb/windows2000-kb828035-x86-enu.exe
===== 828035 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB828035-x86-ENU.exe'''

* http://download.microsoft.com/download/5/2/3/5231e3ef-ae49-4ee6-aa06-f9f226bc9cfb/windows2000-kb828035-x86-enu.exe
===== 828035 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Server-KB828035-x86-ENU.exe'''

* http://download.microsoft.com/download/9/f/1/9f14b3d5-9d44-47e2-8ba6-e562512ff7e2/windowsnt4server-kb828035-x86-enu.exe
===== 828035 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4TerminalServer-KB828035-x86-ENU.exe'''

* http://download.microsoft.com/download/f/8/f/f8f40f19-6c28-4887-82ab-71d4338bb8eb/windowsnt4terminalserver-kb828035-x86-enu.exe
===== 828035 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB828035-x86-ENU.exe'''

* http://download.microsoft.com/download/b/b/6/bb6151ee-f888-409c-81e0-60bfb601d8e9/WindowsServer2003-KB828035-x86-ENU.exe
===== 828035 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: WindowsXP-KB828035-x86-ENU.exe'''

* http://download.microsoft.com/download/e/a/e/eaea4109-0870-4dd3-88e0-a34035dc181a/windowsxp-kb828035-x86-enu.exe
===== 828035 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowsXP-KB828035-x86-ENU.Exe'''

* http://download.microsoft.com/download/e/a/e/eaea4109-0870-4dd3-88e0-a34035dc181a/windowsxp-kb828035-x86-enu.exe


-----

==== MS03-044 - Buffer Overrun in Windows Help and Support Center Could Lead to System Compromise (825119) ====
''Posted: 2003/10/15''

===== 825119 =====
'''Affected Products:'''

* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Workstation-KB825119-x86-ENU.EXE'''

* http://download.microsoft.com/download/f/2/d/f2dec257-6f3c-4f17-a42e-cf8c71a2efe6/windowsnt4workstation-kb825119-x86-enu.exe
===== 825119 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB825119-x86-ENU.exe'''

* http://download.microsoft.com/download/7/a/5/7a57524c-8aba-474b-9333-ae1d61f020c9/windows2000-kb825119-x86-enu.exe
===== 825119 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 2

'''Patch: Windows2000-KB825119-x86-ENU-CustomServicePackSupport.EXE'''

* http://download.microsoft.com/download/1/8/d/18dec473-bd1c-4e63-adfb-490300de019a/windows2000-kb825119-x86-enu-customservicepacksupport.exe
===== 825119 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Server-KB825119-x86-ENU.exe'''

* http://download.microsoft.com/download/f/0/1/f01c0522-76bd-4889-a620-fd10992489b6/windowsnt4server-kb825119-x86-enu.exe
===== 825119 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4TerminalServer-KB825119-x86-ENU.exe'''

* http://download.microsoft.com/download/a/6/a/a6abfa2b-00d0-4481-a88c-08f1ec67bd67/windowsnt4terminalserver-kb825119-x86-enu.exe
===== 825119 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB825119-x86-ENU.exe'''

* http://download.microsoft.com/download/4/3/1/431452b5-4e2f-4d86-9f5d-6413d755fb34/windowsserver2003-kb825119-x86-enu.exe
===== 825119 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: WindowsXP-KB825119-x86-ENU.exe'''

* http://download.microsoft.com/download/4/3/1/431d912c-6c0b-469c-893d-fc138fee7191/windowsxp-kb825119-x86-enu.exe
===== 825119 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB825119-x86-ENU.exe'''

* http://download.microsoft.com/download/4/3/1/431d912c-6c0b-469c-893d-fc138fee7191/windowsxp-kb825119-x86-enu.exe


-----

==== MS03-045 - Buffer Overrun in the ListBox and in the ComboBox Control Could Allow Code Execution (824141) ====
''Posted: 2003/10/15''

===== 824141 =====
'''Affected Products:'''

* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Workstation-KB824141-x86-ENU.EXE'''

* http://download.microsoft.com/download/4/2/e/42e8acba-923d-4074-a727-85a3cc69a3b2/windowsnt4workstation-kb824141-x86-enu.exe
===== 824141 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Server-KB824141-x86-ENU.exe'''

* http://download.microsoft.com/download/1/6/4/164a5dcf-f241-4bc0-8ed1-31d39fe88d9b/windowsnt4server-kb824141-x86-enu.exe
===== 824141 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4TerminalServer-KB824141-x86-ENU.exe'''

* http://download.microsoft.com/download/6/c/e/6ce02be2-1079-4919-8819-ff6351ee1f7e/windowsnt4terminalserver-kb824141-x86-enu.exe
===== 824141 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 2

'''Patch: Windows2000-KB824141-x86-ENU-CustomServicePackSupport.EXE'''

* http://download.microsoft.com/download/7/6/c/76cc70ee-d36a-4356-8e7c-6ce572d4adb9/windows2000-kb824141-x86-enu-customservicepacksupport.exe
===== 824141 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB824141-x86-ENU.exe'''

* http://download.microsoft.com/download/5/0/a/50acd5b3-b7e4-4262-8e0b-eb7dada676f4/windows2000-kb824141-x86-enu.exe
===== 824141 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: WindowsXP-KB824141-x86-ENU.exe'''

* http://download.microsoft.com/download/9/8/3/9835c5c9-5cab-4181-a821-2c9b8f6ea612/WindowsXP-KB824141-x86-ENU.exe
===== 824141 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB824141-x86-ENU.exe'''

* http://download.microsoft.com/download/0/d/0/0d03f099-3673-42ca-81f9-5533fc5c18fb/windowsserver2003-kb824141-x86-enu.exe
===== 824141 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB824141-x86-ENU.Exe'''

* http://download.microsoft.com/download/9/8/3/9835c5c9-5cab-4181-a821-2c9b8f6ea612/WindowsXP-KB824141-x86-ENU.exe


-----

==== MS03-046 - Vulnerability in Exchange Server Could Allow Arbitrary Code Execution (822363) ====
''Posted: 2003/10/15''

===== 829436 =====
'''Affected Products:'''

* Exchange 2000 Enterprise Server
** Exchange 2000 SP3
* Exchange 2000 Server
** Exchange 2000 SP3

'''Patch: Exchange2000-KB829436-x86-enu.exe'''

* http://www.microsoft.com/downloads/details.aspx?familyid=7baf5394-1b4e-4937-a570-9f232ae49f01&displaylang=en
===== 829436 =====
'''Affected Products:'''

* Exchange Server 5.5
** Exchange Server 5.5 SP4

'''Patch: Exchange5.5-KB829436-x86-enu.exe'''

* http://www.microsoft.com/downloads/details.aspx?familyid=a9e872ea-54b0-4179-8ae9-5648bfb46459&displaylang=en
===== 829436 =====
'''Affected Products:'''

* Exchange Server 5.0
** Exchange Server 5.0 SP1
** Exchange Server 5.0 SP2

'''Patch: Exchange5.0-KB829436'''

* NA


-----

==== MS03-047 - Vulnerability in Exchange Server 5.5 Outlook Web Access Could Allow Cross-Site Scripting Attack (828489) ====
''Posted: 2003/10/15''

===== 828489 =====
'''Affected Products:'''

* Exchange Server 5.5
** Exchange Server 5.5 SP4

'''Patch: Exchange5.5-KB828489-x86-enu.exe'''

* http://www.microsoft.com/downloads/details.aspx?familyid=c516fe75-95ce-4fff-b83d-9b170fcd0c1c&displaylang=en


-----

==== MS03-048 - Cumulative Security Update for Internet Explorer (824145) ====
''Posted: 2003/11/20''

===== 824145 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP3
** Windows 2000 Service Pack 3

'''Patch: q824145.exe'''

* http://download.microsoft.com/download/E/E/1/EE1803B3-F7D2-4663-82A5-CDF210FF267D/q824145.exe
===== 824145 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP4

'''Patch: q824145.exE'''

* http://download.microsoft.com/download/B/D/C/BDC06CEE-54D9-459F-8A1B-31490714863F/q824145.exe
===== 824145 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP2

'''Patch: q824145.eXe'''

* http://download.microsoft.com/download/0/4/6/04666695-8CA6-4D80-BA3D-7FB775135A7E/q824145.exe
===== 824145 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 Gold

'''Patch: q824145.eXE'''

* http://download.microsoft.com/download/C/1/F/C1FF4DAA-A20F-434F-88BA-A1784C05623A/q824145.exe
===== 824145 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP2

'''Patch: q824145.Exe'''

* http://download.microsoft.com/download/D/3/4/D3488B5A-5E27-49DC-A843-FC7576420194/q824145.exe
===== 824145 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 SP1

'''Patch: q824145.ExE'''

* http://download.microsoft.com/download/9/D/7/9D7D9A9B-6B4C-41CF-8DB6-331C1C6606E2/q824145.exe
===== 824145 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB824145-x86-ENU'''

* http://download.microsoft.com/download/7/9/F/79F676BB-EBEC-404B-8961-F225AF9A5B24/WindowsServer2003-KB824145-x86-ENU.exe


-----

==== MS03-049 - Buffer Overrun in the Workstation Service Could Allow Code Execution (828749) ====
''Posted: 2003/11/20''

===== 828749 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB828749-x86-ENU.exe'''

* http://download.microsoft.com/download/3/c/6/3c6d56ff-ff8e-4322-84cb-3bf9a915e6d9/Windows2000-KB828749-x86-ENU.exe
===== 828035 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: WindowsXP-KB828035-x86-ENU.exe'''

* http://download.microsoft.com/download/e/a/e/eaea4109-0870-4dd3-88e0-a34035dc181a/windowsxp-kb828035-x86-enu.exe
===== 828035 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowsXP-KB828035-x86-ENU.Exe'''

* http://download.microsoft.com/download/e/a/e/eaea4109-0870-4dd3-88e0-a34035dc181a/windowsxp-kb828035-x86-enu.exe


-----

==== MS03-050 - Vulnerability in Microsoft Word and Microsoft Excel Could Allow Arbitrary Code to Run (831527) ====
''Posted: 2003/11/20''

===== 831527 =====
'''Affected Products:'''

* Excel 2000
** Office 2000 Service Pack 3

'''Patch: MS03-050-1'''

* NA
===== 831527 =====
'''Affected Products:'''

* Excel 2002
** Office XP SP2

'''Patch: MS03-050-2'''

* NA
===== 831527 =====
'''Affected Products:'''

* Excel 97
** Office 97 SR-2/SR-2b

'''Patch: MS03-050-3'''

* NA
===== 831527 =====
'''Affected Products:'''

* Word 2000
** Office 2000 Service Pack 3

'''Patch: MS03-050-4'''

* NA
===== 831527 =====
'''Affected Products:'''

* Word 2002
** Office XP SP2

'''Patch: MS03-050-5'''

* NA
===== 831527 =====
'''Affected Products:'''

* Word 97
** Office 97 SR-2/SR-2b

'''Patch: MS03-050-6'''

* NA
===== 831527 =====
'''Affected Products:'''

* Works 2001
** Works 2001 Gold

'''Patch: MS03-050-7'''

* NA
===== 831527 =====
'''Affected Products:'''

* Works 2002
** Works 2002 Gold

'''Patch: MS03-050-8'''

* NA
===== 831527 =====
'''Affected Products:'''

* Works 2003
** Works 2003 Gold

'''Patch: MS03-050-9'''

* NA


-----

==== MS03-051 - Buffer Overrun in Microsoft FrontPage Server Extensions Could Allow Code Execution (813360) ====
''Posted: 2003/11/20''

===== 813360 =====
'''Affected Products:'''

* FrontPage 2000 Server Extensions
** FrontPage 2000 Server Extensions Gold

'''Patch: MS03-051-1'''

* NA
===== 813360 =====
'''Affected Products:'''

* FrontPage Server Extensions 2002
** FrontPage Server Extensions 2002 Gold

'''Patch: MS03-051-2'''

* NA
===== 813360 =====
'''Affected Products:'''

* SharePoint Team Services 2002
** SharePoint Team Services 2002 Gold

'''Patch: MS03-051-3'''

* NA
===== 813360 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3

'''Patch: MS03-051-4'''

* NA
===== 813360 =====
'''Affected Products:'''

* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3

'''Patch: MS03-051-5'''

* NA
===== 813360 =====
'''Affected Products:'''

* Windows 2000 Professional
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3

'''Patch: MS03-051-6'''

* NA
===== 813360 =====
'''Affected Products:'''

* Windows 2000 Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3

'''Patch: MS03-051-7'''

* NA
===== 813360 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
** Windows XP Service Pack 1

'''Patch: MS03-051-8'''

* NA
===== 813360 =====
'''Affected Products:'''

* Windows XP Professional
** Windows XP Gold
** Windows XP Service Pack 1

'''Patch: MS03-051-9'''

* NA


-----

==== MS04-001 - Vulnerability in H.323 Filter can Allow Remote Code Execution (816458) ====
''Posted: 2004/01/13''

===== 816458 =====
'''Affected Products:'''

* ISA Server 2000
** ISA Server 2000 SP1
* Small Business Server 2000
** Small Business Server 2000 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: ISA2000-KB816458-x86.exe'''

* http://download.microsoft.com/download/a/7/8/a7821e2b-3b42-4bdf-aa6e-5cc9e67c90b7/ISA2000-KB816458-x86.exe


-----

==== MS04-002 - Vulnerability in Exchange Server 2003 Could Lead to Privilege Escalation (832759) ====
''Posted: 2004/01/13''

===== 832759 =====
'''Affected Products:'''

* Exchange Server 2003
** Exchange Server 2003 Gold

'''Patch: Exchange2003-KB832759-x86-enu.exe'''

* http://download.microsoft.com/download/5/A/E/5AEA377A-2F1B-4360-B739-1CE5AB8FCAEA/Exchange2003-KB832759-x86-enu.exe


-----

==== MS04-003 - Buffer Overrun in MDAC Function Could Allow code execution (832483) ====
''Posted: 2004/01/13''

===== 832483 =====
'''Affected Products:'''

* MDAC 2.5
** MDAC 2.5 SP2

'''Patch: MDAC252.832483'''

* http://download.microsoft.com/download/C/2/4/C245528E-A1E4-492E-BCF4-E004A052D93B/ENU_Q832483_MDAC_x86.EXE
===== 832483 =====
'''Affected Products:'''

* MDAC 2.5
** MDAC 2.5 SP3

'''Patch: MDAC253.832483'''

* http://download.microsoft.com/download/C/2/4/C245528E-A1E4-492E-BCF4-E004A052D93B/ENU_Q832483_MDAC_x86.EXE
===== 832483 =====
'''Affected Products:'''

* MDAC 2.6
** MDAC 2.6 SP2

'''Patch: MDAC262.832483'''

* http://download.microsoft.com/download/C/2/4/C245528E-A1E4-492E-BCF4-E004A052D93B/ENU_Q832483_MDAC_x86.EXE
===== 832483 =====
'''Affected Products:'''

* MDAC 2.7
** MDAC 2.7 Gold

'''Patch: MDAC270.832483'''

* http://download.microsoft.com/download/C/2/4/C245528E-A1E4-492E-BCF4-E004A052D93B/ENU_Q832483_MDAC_x86.EXE
===== 832483 =====
'''Affected Products:'''

* MDAC 2.7
** MDAC 2.7 SP1

'''Patch: MDAC271.832483'''

* http://download.microsoft.com/download/C/2/4/C245528E-A1E4-492E-BCF4-E004A052D93B/ENU_Q832483_MDAC_x86.EXE
===== 832483 =====
'''Affected Products:'''

* MDAC 2.8
** MDAC 2.8 Gold

'''Patch: MDAC280.832483'''

* http://download.microsoft.com/download/C/2/4/C245528E-A1E4-492E-BCF4-E004A052D93B/ENU_Q832483_MDAC_x86.EXE


-----

==== MS04-004 - Cumulative Security Update for Internet Explorer (832894) ====
''Posted: 2004/02/02''

===== 832894 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP2

'''Patch: q832894.exe'''

* http://download.microsoft.com/download/0/1/4/01456c2a-0ff6-4f89-85a0-0bd943cdedc6/q832894.exe
===== 832894 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP3
** Windows 2000 Service Pack 3

'''Patch: Q832894.exe'''

* http://download.microsoft.com/download/6/c/5/6c5902dc-33d2-4bf6-9f37-e3ff9590a782/Q832894.exe
===== 832894 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP4

'''Patch: Q832894.exE'''

* http://download.microsoft.com/download/6/d/6/6d67225d-168d-4870-98f0-52bf6249a6ca/Q832894.exe
===== 832894 =====
'''Affected Products:'''

* Internet Explorer 5.5
** Internet Explorer 5.5 SP2

'''Patch: Q832894.eXe'''

* http://download.microsoft.com/download/b/6/c/b6c75a09-c282-4079-b162-32e2c248c38a/Q832894.exe
===== 832894 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 Gold

'''Patch: Q832894.eXE'''

* http://download.microsoft.com/download/f/f/a/ffa8de1c-0a2c-44be-ba11-d4f567f3aeb4/Q832894.exe
===== 832894 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 SP1

'''Patch: Q832894.Exe'''

* http://download.microsoft.com/download/9/b/3/9b3f16b4-a907-468b-8283-c050d1ea4948/Q832894.exe
===== 832894 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB832894-x86-ENU'''

* http://download.microsoft.com/download/a/f/3/af318e61-4d69-42c3-90b9-e99676a5540c/WindowsServer2003-KB832894-x86-ENU.EXE


-----

==== MS04-005 - Vulnerability in Virtual PC for Mac could lead to privilege elevation (835150) ====
''Posted: 2004/02/10''

===== 835150 =====
'''Affected Products:'''

* Microsoft Virtual PC for Mac 6.0
** Microsoft Virtual PC for Mac 6.0 Gold

'''Patch: MS04-005-1'''

* NA
===== 835150 =====
'''Affected Products:'''

* Microsoft Virtual PC for Mac 6.01
** Microsoft Virtual PC for Mac 6.01 Gold

'''Patch: MS04-005-2'''

* NA
===== 835150 =====
'''Affected Products:'''

* Microsoft Virtual PC for Mac 6.02
** Microsoft Virtual PC for Mac 6.02 Gold

'''Patch: MS04-005-3'''

* NA
===== 835150 =====
'''Affected Products:'''

* Microsoft Virtual PC for Mac 6.1
** Microsoft Virtual PC for Mac 6.1 Gold

'''Patch: MS04-005-4'''

* NA


-----

==== MS04-006 - Vulnerability in the Windows Internet Naming Service (WINS) Could Allow Code Execution (830352) ====
''Posted: 2004/02/10''

===== 830352 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Server-KB830352-x86-ENU.EXE'''

* http://download.microsoft.com/download/a/c/9/ac9ebd81-06b3-4ead-baac-3ccb94361ebc/WindowsNT4Server-KB830352-x86-ENU.EXE
===== 830352 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4TerminalServer-KB830352-x86-ENU'''

* http://download.microsoft.com/download/8/0/c/80cb9adc-e475-4875-a0fa-ed333a02a295/WindowsNT4TerminalServer-KB830352-x86-ENU.exe
===== 830352 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WS03-830352'''

* http://download.microsoft.com/download/2/b/f/2bf1da36-6368-4e92-9dd2-daa388450028/WindowsServer2003-KB830352-x86-ENU.exe
===== 830352 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 2

'''Patch: Windows2000-KB830352-x86-ENU.EXE'''

* http://download.microsoft.com/download/c/9/6/c966403d-c0c1-43a4-8f16-af7047d32abc/Windows2000-KB830352-x86-ENU.EXE
===== 830352 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB830352-x86-ENU.EXe'''

* http://download.microsoft.com/download/c/9/6/c966403d-c0c1-43a4-8f16-af7047d32abc/Windows2000-KB830352-x86-ENU.EXE


-----

==== MS04-007 - ASN .1 Vulnerability Could Allow Code Execution (828028) ====
''Posted: 2004/02/10''

===== 828028 =====
'''Affected Products:'''

* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Workstation-KB828028-x86-ENU'''

* http://download.microsoft.com/download/4/8/4/484eee2e-8733-40e4-a664-37a35f403388/WindowsNT4Workstation-KB828028-x86-ENU.EXE
===== 828028 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Server-KB828028-x86-ENU.EXE'''

* http://download.microsoft.com/download/0/7/e/07e72ad3-9b63-4dcb-bcb6-0c0f0fe2c21d/WindowsNT4Server-KB828028-x86-ENU.EXE
===== 828028 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4TerminalServer-KB828028-x86-ENU'''

* http://download.microsoft.com/download/0/6/f/06fd1a90-adf4-4a5a-8bd6-3d4b35305b6d/WindowsNT4TerminalServer-KB828028-x86-ENU.EXE
===== 828028 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB828028-x86-ENU'''

* http://download.microsoft.com/download/5/d/b/5db25f4e-76fb-4cc7-85f3-ca6f797f0982/Windows2000-KB828028-x86-ENU.EXE
===== 828028 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowsXP-KB828028-x86-ENu'''

* http://download.microsoft.com/download/d/0/4/d044a7f5-b5ae-4e1f-b6ae-4edb4dd3e32a/WindowsXP-KB828028-x86-ENU.exe
===== 828028 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB828028-x86-ENU'''

* http://download.microsoft.com/download/4/a/0/4a0ebe1e-ad89-4408-84d1-9325022a1e23/WindowsServer2003-KB828028-x86-ENU.exe
===== 828028 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: WindowsXP-KB828028-x86-ENU'''

* http://download.microsoft.com/download/d/0/4/d044a7f5-b5ae-4e1f-b6ae-4edb4dd3e32a/WindowsXP-KB828028-x86-ENU.exe


-----

==== MS04-008 - Vulnerability in Windows Media Services Could Allow a Denial of Service (832359) ====
''Posted: 2004/03/09''

===== 832359 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: WindowsMedia41-KB832359-ENU.exe'''

* http://download.microsoft.com/download/9/e/6/9e6d9785-f1fd-4662-bf3f-1847cf5bc8a8/WindowsMedia41-KB832359-ENU.exe


-----

==== MS04-009 - Vulnerability in Microsoft Outlook Could Allow Code Execution (828040) ====
''Posted: 2004/03/09''

===== 828040 =====
'''Affected Products:'''

* Outlook 2002
** Office XP SP2
* Office XP
** Office XP SP2

'''Patch: OXP828040'''

* http://www.microsoft.com/technet/security/bulletin


-----

==== MS04-010 - Vulnerability in MSN Messenger Could Allow Information Disclosure (838512) ====
''Posted: 2004/03/09''

===== 838512 =====
'''Affected Products:'''

* MSN Messenger
** MSN Messenger Gold

'''Patch: MSNM838512'''

* http://www.microsoft.com/technet/security/bulletin


-----

==== MS04-011 - Security Update for Microsoft Windows (835732) ====
''Posted: 2004/04/13''

===== 835732 =====
'''Affected Products:'''

* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Workstation-KB835732-x86-ENU'''

* http://download.microsoft.com/download/4/5/F/45F55176-3B52-4DED-8E12-9B2311953968/WindowsNT4Workstation-KB835732-x86-ENU.EXE
===== 835732 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Server-KB835732-x86-ENU'''

* http://download.microsoft.com/download/6/D/7/6D7FCDA4-1D50-49E7-B4DD-501FA54909C6/WindowsNT4Server-KB835732-x86-ENU.EXE
===== 835732 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4TerminalServer-KB835732-x86-ENU'''

* http://download.microsoft.com/download/A/4/8/A48F939A-DD6E-4EC2-A8C3-98E74F6E6128/WindowsNT4TerminalServer-KB835732-x86-ENU.EXE
===== 835732 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB835732-x86-ENU'''

* http://download.microsoft.com/download/F/A/A/FAA796AA-399D-437A-9284-C3536E9F2E6E/Windows2000-KB835732-x86-ENU.EXE
===== 835732 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: WindowsXP-KB835732-x86-ENU'''

* http://download.microsoft.com/download/6/1/5/615A50E9-A508-4D67-B53C-3A43455761BF/WindowsXP-KB835732-x86-ENU.EXE
===== 835732 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowsXP-KB835732-x86-ENu'''

* http://download.microsoft.com/download/6/1/5/615A50E9-A508-4D67-B53C-3A43455761BF/WindowsXP-KB835732-x86-ENU.EXE
===== 835732 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB835732-x86-ENU'''

* http://download.microsoft.com/download/4/D/7/4D74D7AE-E1F7-4C0B-B6E3-ED05F5A3C580/WindowsServer2003-KB835732-x86-ENU.EXE


-----

==== MS04-012 - Cumulative Update for Microsoft RPC/DCOM (828741) ====
''Posted: 2004/04/13''

===== 828741 =====
'''Affected Products:'''

* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Workstation-KB828741-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/a/8/3a81106f-be4b-4208-9888-6cc6c202b1be/WindowsNT4Workstation-KB828741-x86-ENU.EXE
===== 828741 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Server-KB828741-x86-ENU.EXE'''

* http://download.microsoft.com/download/1/0/8/1088f645-20b8-44ee-aafa-47b2fab94b7d/WindowsNT4Server-KB828741-x86-ENU.EXE
===== 828741 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4TerminalServer-KB828741-x86-ENU.EXE'''

* http://download.microsoft.com/download/4/6/7/467aa3b1-e693-4078-a670-0af701bb0738/WindowsNT4TerminalServer-KB828741-x86-ENU.EXE
===== 828741 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 2

'''Patch: Windows2000-KB828741-x86-ENU.exe'''

* http://download.microsoft.com/download/5/6/c/56cdedb2-fa2e-45ba-9a75-1b0335484386/Windows2000-KB828741-x86-ENU.EXE
===== 828741 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 3

'''Patch: Windows2000-KB828741-x86-ENU.EXE'''

* http://download.microsoft.com/download/5/6/c/56cdedb2-fa2e-45ba-9a75-1b0335484386/Windows2000-KB828741-x86-ENU.EXE
===== 828741 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB828741-x86-ENU.EXE'''

* http://download.microsoft.com/download/5/6/c/56cdedb2-fa2e-45ba-9a75-1b0335484386/Windows2000-KB828741-x86-ENU.EXE
===== 828741 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: WindowsXP-KB828741-x86-ENU.EXE'''

* http://download.microsoft.com/download/8/c/9/8c9f999d-c55b-4e09-8cc0-b75bcf7368cc/WindowsXP-KB828741-x86-ENU.EXE
===== 828741 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowsXP-KB828741-x86-ENu.EXE'''

* http://download.microsoft.com/download/8/c/9/8c9f999d-c55b-4e09-8cc0-b75bcf7368cc/WindowsXP-KB828741-x86-ENU.EXE
===== 828741 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB828741-x86-ENU.EXE'''

* http://download.microsoft.com/download/0/0/9/00972728-4bf7-4a73-b17e-85b81e10ab96/WindowsServer2003-KB828741-x86-ENU.EXE


-----

==== MS04-013 - Cumulative Security Update for Outlook Express (837009) ====
''Posted: 2004/04/13''

===== 837009 =====
'''Affected Products:'''

* Outlook Express 5.5
** Internet Explorer 5.5 SP2

'''Patch: OE55837009'''

* http://www.microsoft.com/technet/security/bulletin
===== 837009 =====
'''Affected Products:'''

* Outlook Express 6.0
** Internet Explorer 6 Gold

'''Patch: OE60837009'''

* http://www.microsoft.com/technet/security/bulletin
===== 837009 =====
'''Affected Products:'''

* Outlook Express 6.0
** Internet Explorer 6 SP1

'''Patch: OE61837009'''

* http://www.microsoft.com/technet/security/bulletin
===== 837009 =====
'''Affected Products:'''

* Outlook Express 6 on Windows Server 2003
** Windows Server 2003 Gold

'''Patch: OE6WS03837009'''

* http://www.microsoft.com/technet/security/bulletin


-----

==== MS04-014 - Vulnerability in the Microsoft Jet Database Engine Could Allow Code Execution (837001) ====
''Posted: 2004/04/13''

===== 837001 =====
'''Affected Products:'''

* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: Jet40-KB837001-ENU.EXE'''

* http://download.microsoft.com/download/f/2/2/f22a272e-45b8-4226-86b7-49ec1b89a9fb/Jet40-KB837001-ENU.exe
===== 837001 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: Jet40-KB837001-ENu.EXE'''

* http://download.microsoft.com/download/f/2/2/f22a272e-45b8-4226-86b7-49ec1b89a9fb/Jet40-KB837001-ENU.exe
===== 837001 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: Jet40-KB837001-Enu.EXE'''

* http://download.microsoft.com/download/f/2/2/f22a272e-45b8-4226-86b7-49ec1b89a9fb/Jet40-KB837001-ENU.exe
===== 837001 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB837001-x86-ENU.EXE'''

* http://download.microsoft.com/download/f/2/0/f20ae35d-b404-4021-9d9c-daab1f376462/Windows2000-KB837001-x86-ENU.EXE
===== 837001 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: WindowsXP-KB837001-x86-ENU.EXE'''

* http://download.microsoft.com/download/6/8/d/68d5abd5-da33-4403-a55a-af5625bb8d2d/WindowsXP-KB837001-x86-ENU.EXE
===== 837001 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowsXP-KB837001-x86-ENu.EXE'''

* http://download.microsoft.com/download/6/8/d/68d5abd5-da33-4403-a55a-af5625bb8d2d/WindowsXP-KB837001-x86-ENU.EXE
===== 837001 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB837001-x86-ENU.EXE'''

* http://download.microsoft.com/download/a/1/0/a1080cda-4801-4a0c-8692-0d9773b1cca5/WindowsServer2003-KB837001-x86-ENU.EXE


-----

==== MS04-015 - Vulnerability in Help and Support Center Could Allow Remote Code Execution (840374) ====
''Posted: 2004/05/11''

===== 840374 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: WindowsXP-KB840374-x86-ENU.EXE'''

* http://download.microsoft.com/download/a/f/a/afa937e7-e7f4-4fe8-8324-6e322f7ab542/WindowsXP-KB840374-x86-ENU.EXE
===== 840374 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB840374-x86-ENU.EXE'''

* http://download.microsoft.com/download/a/8/c/a8c904e2-7955-47e2-a2ae-e7f6490eee95/WindowsServer2003-KB840374-x86-ENU.EXE
===== 840374 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB840374-x86-ENU.EXE'''

* http://download.microsoft.com/download/a/f/a/afa937e7-e7f4-4fe8-8324-6e322f7ab542/WindowsXP-KB840374-x86-ENU.EXE


-----

==== MS04-016 - Vulnerability in DirectPlay Could Allow Denial of Service (839643) ====
''Posted: 2004/06/08''

===== 839643 =====
'''Affected Products:'''

* Windows 98
** Windows 98 Gold
** Windows 98 SP1
* Windows 98 SE
** Windows 98 Gold
* Windows Me
** Windows Me Gold

'''Patch: DirectX9-KB839643-x86-ENU.exe'''

* http://www.microsoft.com/technet/security/bulletin
===== 839643 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB839643-x86-ENU.exe'''

* http://download.microsoft.com/download/7/c/2/7c25145d-5c6d-4408-b2c2-56bbab0d8335/Windows2000-KB839643-x86-ENU.EXE
===== 839643 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Gold
** Windows XP Service Pack 1

'''Patch: Q839643_WXP_SP2_x86_ENU.exe'''

* http://download.microsoft.com/download/1/e/5/1e5d946b-3ee9-4c6a-b364-0eb45aef8146/WindowsXP-KB839643-x86-ENU.EXE
===== 839643 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB839643-x86-ENU.exe'''

* http://download.microsoft.com/download/3/a/9/3a996897-848d-479d-933f-f7f13776db02/WindowsServer2003-KB839643-x86-ENU.EXE


-----

==== MS04-017 - Vulnerability in Crystal Reports Web Viewer Could Allow Information Disclosure and Denial of Service (842689) ====
''Posted: 2004/06/08''

===== 842689 =====
'''Affected Products:'''

* Microsoft Business Solutions CRM
** Microsoft Business Solutions CRM Gold

'''Patch: CRM-KB842689-x86-ENU'''

* http://www.microsoft.com/technet/security/bulletin


-----

==== MS04-018 - Cumulative Security Update for Outlook Express (823353) ====
''Posted: 2004/07/13''

===== 823353 =====
'''Affected Products:'''

* Outlook Express 5.5
** Internet Explorer 5.5 SP2

'''Patch: EO55823353'''

* NA
===== 823353 =====
'''Affected Products:'''

* Outlook Express 6.0
** Internet Explorer 6 Gold

'''Patch: OE60823353'''

* http://www.microsoft.com/technet/security/bulletin
===== 823353 =====
'''Affected Products:'''

* Outlook Express 6.0
** Internet Explorer 6 SP1

'''Patch: OE61823353'''

* http://www.microsoft.com/technet/security/bulletin
===== 823353 =====
'''Affected Products:'''

* Outlook Express 6 on Windows Server 2003
** Windows Server 2003 Gold

'''Patch: OE6WS03823353'''

* http://www.microsoft.com/technet/security/bulletin


-----

==== MS04-019 - Vulnerability in Utility Manager Could Allow Code Execution (842526) ====
''Posted: 2004/07/13''

===== 842526 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB842526-x86-ENU'''

* http://download.microsoft.com/download/3/B/6/3B627F83-D5E4-46FB-9FD0-4A1330C57981/Windows2000-KB842526-x86-ENU.EXE


-----

==== MS04-020 - Vulnerability in POSIX Could Allow Code Execution (841872) ====
''Posted: 2004/07/13''

===== 841872 =====
'''Affected Products:'''

* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Workstation-KB841872-x86-ENU.exe'''

* NA
===== 841872 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Server-KB841872-x86-ENU.exe'''

* NA
===== 841872 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4TerminalServer-KB841872-x86-ENU.exe'''

* NA
===== 841872 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB841872-x86-ENU.EXE'''

* NA


-----

==== MS04-021 - Security Update for IIS 4.0 (841373) ====
''Posted: 2004/07/13''

===== 841373 =====
'''Affected Products:'''

* Internet Information Server 4.0
** Windows NT4 Service Pack 6a

'''Patch: Q841373I.exe'''

* http://download.microsoft.com/download/A/9/7/A9799893-A559-4AC1-BC88-F9667B5954C4/Q841373I.exe


-----

==== MS04-022 - Vulnerability in Task Scheduler Could Allow Code Execution (841873) ====
''Posted: 2004/07/13''

===== 841873 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 2
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB841873-x86-ENU.EXE'''

* http://download.microsoft.com/download/F/F/5/FF52E0CB-E04D-4DC0-9177-6272557CD6D4/Windows2000-KB841873-x86-ENU.EXE
===== 841873 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: WindowsXP-KB841873-x86-enu.exe'''

* http://download.microsoft.com/download/6/F/5/6F5E3BDB-69B6-43E7-9D27-9CE2E4687FEF/WindowsXP-KB841873-x86-enu.exe
===== 841873 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowsXP-KB841873-x86-enu.exE'''

* http://download.microsoft.com/download/6/F/5/6F5E3BDB-69B6-43E7-9D27-9CE2E4687FEF/WindowsXP-KB841873-x86-enu.exe
===== 841873 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6
* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: NT4-KB841873-ENU'''

* NA


-----

==== MS04-023 - Vulnerability in HTML Help Could Allow Code Execution (840315) ====
''Posted: 2004/07/13''

===== 840315 =====
'''Affected Products:'''

* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4-KB840315-ENU.EXE'''

* http://download.microsoft.com/download/A/A/E/AAEB86E6-4805-440D-8AC6-F8EAC8B3F84B/WindowsNT4-KB840315-ENU.EXE
===== 840315 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4-KB840315-ENU.EXe'''

* http://download.microsoft.com/download/A/A/8/AA8CA88A-6ED8-44D3-9CFE-38AC598756E2/WindowsNT4-KB840315-ENU.EXE
===== 840315 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4-KB840315-ENU.Exe'''

* http://download.microsoft.com/download/0/2/C/02CEA671-D298-45A7-B5C4-931BCCCF0CE8/WindowsNT4-KB840315-ENU.EXE
===== 840315 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 2

'''Patch: Windows2000-KB840315-x86-ENU.EXE'''

* http://download.microsoft.com/download/7/2/7/727D9721-ABDC-4ECF-AB36-4635CFD61172/Windows2000-KB840315-x86-ENU.EXE
===== 840315 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB840315-x86-ENU.Exe'''

* http://download.microsoft.com/download/7/2/7/727D9721-ABDC-4ECF-AB36-4635CFD61172/Windows2000-KB840315-x86-ENU.EXE
===== 840315 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: WindowsXP-KB840315-x86-enu.exe'''

* http://download.microsoft.com/download/6/9/F/69F464C5-3341-4249-8697-456A88456B37/WindowsXP-KB840315-x86-enu.exe
===== 840315 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowsXP-KB840315-x86-enu.exE'''

* http://download.microsoft.com/download/6/9/F/69F464C5-3341-4249-8697-456A88456B37/WindowsXP-KB840315-x86-enu.exe
===== 840315 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB840315-x86-enu.exe'''

* http://download.microsoft.com/download/B/4/2/B420044B-EB3A-442B-BBA6-0156AA7896EF/WindowsServer2003-KB840315-x86-enu.exe


-----

==== MS04-024 - Vulnerability in Windows Shell Could Allow Remote Code Execution (839645) ====
''Posted: 2004/07/13''

===== 839645 =====
'''Affected Products:'''

* Windows NT Workstation 4.0
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Workstation-KB839645-x86-ENU.exe'''

* http://download.microsoft.com/download/c/c/f/ccf8314d-2ade-4ea8-89cf-f7f9f596d419/WindowsNT4Workstation-KB839645-x86-ENU.exe
===== 839645 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Server-KB839645-x86-ENU.exe'''

* http://download.microsoft.com/download/a/b/3/ab36f6c2-67b8-4711-8d9a-0cf06b4153e1/WindowsNT4Server-KB839645-x86-ENU.exe
===== 839645 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4TerminalServer-KB839645-x86-ENU.exe'''

* http://download.microsoft.com/download/3/8/0/3801011b-8792-46e9-80db-3f54f8ba940f/WindowsNT4TerminalServer-KB839645-x86-ENU.exe
===== 839645 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 2
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 2
* Windows 2000 Professional
** Windows 2000 Service Pack 2
* Windows 2000 Server
** Windows 2000 Service Pack 2

'''Patch: Windows2000-KB839645-x86-ENU.exe'''

* http://download.microsoft.com/download/8/6/3/863EA51D-B378-4A6A-927C-D0DC38F4FED1/Windows2000-KB839645-x86-ENU.EXE
===== 839645 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 3

'''Patch: Windows2000-KB839645-x86-ENU.EXE'''

* http://download.microsoft.com/download/8/6/3/863EA51D-B378-4A6A-927C-D0DC38F4FED1/Windows2000-KB839645-x86-ENU.EXE
===== 839645 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB839645-x86-ENU.EXE'''

* http://download.microsoft.com/download/8/6/3/863EA51D-B378-4A6A-927C-D0DC38F4FED1/Windows2000-KB839645-x86-ENU.EXE
===== 839645 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: windowsxp-kb839645-X86-ENU.exe'''

* http://download.microsoft.com/download/D/0/3/D03971CD-AE3D-49AB-BEC2-44CE3911FA76/WindowsXP-KB839645-x86-enu.exe
===== 839645 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: windowsxp-kb839645-X86-ENU.exE'''

* http://download.microsoft.com/download/D/0/3/D03971CD-AE3D-49AB-BEC2-44CE3911FA76/WindowsXP-KB839645-x86-enu.exe
===== 839645 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB839645-x86-enu.exe'''

* http://download.microsoft.com/download/E/7/9/E79E9C09-1755-4ECC-8CCD-FC915C9E0CBF/WindowsServer2003-KB839645-x86-enu.exe


-----

==== MS04-025 - Cumulative Security Update for Internet Explorer (867801) ====
''Posted: 2004/07/30''

===== 867801 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP2

'''Patch: IE5.01sp2-KB867801-Windows2000sp2-x86-ENU.exe'''

* http://download.microsoft.com/download/7/5/D/75D9E75F-6232-4460-AFF5-C00D9BE5653F/IE5.01sp2-KB867801-Windows2000sp2-x86-ENU.exe
===== 867801 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP3

'''Patch: IE5.01sp3-KB867801-Windows2000sp3-x86-ENU.exe'''

* http://download.microsoft.com/download/9/1/6/916901D7-A292-4D79-912A-86888B7D8941/IE5.01sp3-KB867801-Windows2000sp3-x86-ENU.exe
===== 867801 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP4

'''Patch: IE5.01sp4-KB867801-Windows2000sp4-x86-ENU.exe'''

* http://download.microsoft.com/download/D/0/E/D0E905A1-39D8-457F-A6D2-B9C749591345/IE5.01sp4-KB867801-Windows2000sp4-x86-ENU.exe
===== 867801 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 Gold

'''Patch: IE6.0-KB867801-WindowsXP-x86-ENU.exe'''

* http://download.microsoft.com/download/A/2/D/A2D45F56-27A0-4111-8DEF-62D6F4E874E1/IE6.0-KB867801-WindowsXP-x86-ENU.exe
===== 867801 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 SP1

'''Patch: IE6.0sp1-KB867801-x86-ENU.exe'''

* http://download.microsoft.com/download/6/8/9/68923CC9-04F0-4ADD-98E7-F7D72C88734D/IE6.0sp1-KB867801-x86-ENU.exe
===== 867801 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB867801-x86-enu.exe'''

* http://download.microsoft.com/download/2/a/e/2ae9e877-f448-49b4-8505-6c7feaf3d3eb/WindowsServer2003-KB867801-x86-enu.exe


-----

==== MS04-026 - Vulnerability in Exchange Server 5.5 Outlook Web Access Could Allow Cross-Site Scripting and Spoofing Attacks (842463) ====
''Posted: 2004/08/10''

===== 842436 =====
'''Affected Products:'''

* Exchange Server 5.5
** Exchange Server 5.5 SP4

'''Patch: Exchange5.5-KB842436-x86-enu'''

* http://download.microsoft.com/download/D/F/6/DF625ED0-5475-4DF0-9364-4DFB2A10AB69/Exchange5.5-KB842436-x86-enu.EXE


-----

==== MS04-027 - Vulnerability in WordPerfect Converter Could Allow Code Execution (884933) ====
''Posted: 2004/09/14''

===== 873380 =====
'''Affected Products:'''

* FrontPage 2000
** Office 2000 Gold
** Office 2000 Service Pack 1
** Office 2000 Service Pack 2
** Office 2000 Service Pack 3
** Office 2000 SR-1
** Office 2000 SR-1a
* Office 2000
** Office 2000 Gold
** Office 2000 Service Pack 1
** Office 2000 Service Pack 2
** Office 2000 Service Pack 3
** Office 2000 SR-1
** Office 2000 SR-1a
* Publisher 2000
** Office 2000 Gold
** Office 2000 Service Pack 1
** Office 2000 Service Pack 2
** Office 2000 Service Pack 3
** Office 2000 SR-1
** Office 2000 SR-1a
* Works 2001
** Works 2001 Gold

'''Patch: office2000-kb873380-fullfile-enu.exe'''

* http://download.microsoft.com/download/3/0/C/30CFCF2C-BFCF-40D9-BE26-B0E1354AE07E/office2000-kb873380-fullfile-enu.exe
===== 873379 =====
'''Affected Products:'''

* FrontPage 2002
** Office XP Gold
** Office XP SP1
** Office XP SP2
** Office XP SP3
* Office XP
** Office XP Gold
** Office XP SP1
** Office XP SP2
** Office XP SP3
* Publisher 2002
** Office XP Gold
** Office XP SP1
** Office XP SP2
** Office XP SP3
* Works 2002
** Works 2002 Gold
* Works 2003
** Works 2003 Gold

'''Patch: officexp-kb873379-fullfile-enu.exe'''

* http://download.microsoft.com/download/D/4/8/D484BBDE-75C0-472E-AF88-2E754997F273/officexp-kb873379-fullfile-enu.exe
===== 873378 =====
'''Affected Products:'''

* Office 2003
** Office 2003 Gold
** Office 2003 SP1
* Publisher 2003
** Office 2003 Gold
** Office 2003 SP1
* FrontPage 2003
** Office 2003 Gold
** Office 2003 SP1
* Word 2003
** Office 2003 Gold
** Office 2003 SP1

'''Patch: office2003-kb873378-fullfile-enu.exe'''

* http://download.microsoft.com/download/C/8/3/C833C039-9FE9-4906-95D2-AFC0859D1A8B/office2003-kb873378-fullfile-enu.exe


-----

==== MS04-028 - Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987) ====
''Posted: 2004/09/14''

===== 833987 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Gold
** Windows XP Service Pack 1

'''Patch: gdiplusXP'''

* NA
===== 833987 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: gdiplus2003'''

* NA
===== 833987 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 SP1

'''Patch: gdiplusIE6SP1'''

* NA


-----

==== MS04-029 - Vulnerability in RPC Runtime Library Could Allow Information Disclosure and Denial of Service (873350) ====
''Posted: 2004/10/12''

===== 873350 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Server-KB873350-x86-ENU.EXE'''

* http://download.microsoft.com/download/1/6/1/16145263-1A0D-4421-A6AC-112E200CF804/WindowsNT4Server-KB873350-x86-ENU.exe
===== 873350 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4TerminalServer-KB873350-x86-ENU.EXE'''

* http://download.microsoft.com/download/5/C/9/5C972F06-C43F-404D-AD9D-44C33AA88F25/WindowsNT4TerminalServer-KB873350-x86-ENU.exe


-----

==== MS04-030 - Vulnerability in WebDav XML Message Handler Could Lead to a Denial of Service (824151) ====
''Posted: 2004/10/12''

===== 824151 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB824151-x86-ENU.exe'''

* http://download.microsoft.com/download/B/3/E/B3ECAB57-2791-46C4-9508-3E7D342910F7/Windows2000-KB824151-x86-ENU.EXE
===== 824151 =====
'''Affected Products:'''

* Internet Information Services 5.1
** Windows XP Gold

'''Patch: WindowsXP-KB824151-x86-ENU.exe'''

* http://download.microsoft.com/download/f/7/6/f765818f-4b08-4ecf-a5b4-a7998c9d1594/WindowsXP-KB824151-x86-enu.exe
===== 824151 =====
'''Affected Products:'''

* Internet Information Services 6.0
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB824151-x86-enu.exe'''

* http://download.microsoft.com/download/8/8/C/88CD7FA0-F5BE-4D95-B54C-13CA4A8D9F0F/WindowsServer2003-KB824151-x86-enu.EXE
===== 824151 =====
'''Affected Products:'''

* Internet Information Services 5.1
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB824151-x86-enu.exe'''

* http://download.microsoft.com/download/f/7/6/f765818f-4b08-4ecf-a5b4-a7998c9d1594/WindowsXP-KB824151-x86-enu.exe


-----

==== MS04-031 - Vulnerability in NetDDE Could Allow Remote Code Execution (841533) ====
''Posted: 2004/10/12''

===== 841533 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Server-KB841533-x86-ENU.EXE'''

* http://download.microsoft.com/download/4/4/E/44EC3F6B-3033-481F-A746-AF19F8A2E850/WindowsNT4Server-KB841533-x86-ENU.exe
===== 841533 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4TerminalServer-KB841533-x86-ENU.EXE'''

* http://download.microsoft.com/download/C/D/1/CD18B932-3789-4CA0-8DFD-5AC806D75DA8/WindowsNT4TerminalServer-KB841533-x86-ENU.exe
===== 841533 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB841533-x86-ENU.EXE'''

* http://download.microsoft.com/download/5/B/E/5BECB7DC-1AAA-4123-8CF3-3A13827FE826/Windows2000-KB841533-x86-ENU.EXE
===== 841533 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: WindowsXP-KB841533-x86-enu.EXE'''

* http://download.microsoft.com/download/5/8/9/5891C9C4-1211-441B-9D32-4CA0096681F2/WindowsXP-KB841533-x86-enu.exe
===== 841533 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB841533-x86-enu.EXE'''

* http://download.microsoft.com/download/5/8/9/5891C9C4-1211-441B-9D32-4CA0096681F2/WindowsXP-KB841533-x86-enu.exe
===== 841533 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB841533-x86-enu.EXE'''

* http://download.microsoft.com/download/0/6/5/0650631D-E64B-44AB-9783-84BC0653F512/WindowsServer2003-KB841533-x86-enu.EXE


-----

==== MS04-032 - Security Update for Microsoft Windows (840987) ====
''Posted: 2004/10/12''

===== 840987 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Server-KB840987-x86-ENU.EXE'''

* http://download.microsoft.com/download/2/D/A/2DA1EE4A-B15F-435C-8C1E-488A9C4174CD/WindowsNT4Server-KB840987-x86-ENU.exe
===== 840987 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4TerminalServer-KB840987-x86-ENU.EXE'''

* http://download.microsoft.com/download/C/8/D/C8D9F250-2BC2-4DC5-98F5-E4BC0958ECAF/WindowsNT4TerminalServer-KB840987-x86-ENU.exe
===== 840987 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB840987-x86-ENU.EXE'''

* http://download.microsoft.com/download/8/0/F/80F7DEE4-175D-436E-9997-DC5CBC2D89F2/Windows2000-KB840987-x86-ENU.EXE
===== 840987 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: WindowsXP-KB840987-x86-enu.EXE'''

* http://download.microsoft.com/download/8/6/9/8690E191-BB64-4CDB-8466-A58306442A71/WindowsXP-KB840987-x86-enu.exe
===== 840987 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB840987-x86-enu.EXE'''

* http://download.microsoft.com/download/8/6/9/8690E191-BB64-4CDB-8466-A58306442A71/WindowsXP-KB840987-x86-enu.exe
===== 840987 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB840987-x86-enu.EXE'''

* http://download.microsoft.com/download/5/1/8/518B9EAE-79F1-49A2-B196-4759B5E7C600/WindowsServer2003-KB840987-x86-enu.EXE


-----

==== MS04-033 - Vulnerability in Microsoft Excel Could Allow Code Execution (886836) ====
''Posted: 2004/10/12''

===== 873372 =====
'''Affected Products:'''

* Excel 2000
** Office 2000 Gold
** Office 2000 Service Pack 1
** Office 2000 Service Pack 2
** Office 2000 Service Pack 3

'''Patch: office2000-kb873372-fullfile-enu.EXE'''

* http://download.microsoft.com/download/B/0/3/B03ABAA0-DD54-4223-B43E-130D338678B1/office2000-kb873372-fullfile-enu.exe
===== 873366 =====
'''Affected Products:'''

* Excel 2002

'''Patch: officexp-kb873366-fullfile-enu.EXE'''

* http://download.microsoft.com/download/2/D/3/2D391588-1776-4819-8FE7-B21457966997/officexp-kb873366-fullfile-enu.exe


-----

==== MS04-034 - Vulnerability in Compressed (zipped) Folders Could Allow Code Execution (873376) ====
''Posted: 2004/10/12''

===== 873376 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: WindowsXP-KB873376-x86-enu.EXE'''

* http://download.microsoft.com/download/A/D/4/AD4ECF70-34D2-4739-9B1E-E67F09BB8D35/WindowsXP-KB873376-x86-enu.exe
===== 873376 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB873376-x86-enu.EXE'''

* http://download.microsoft.com/download/4/E/7/4E76735F-79CE-4B8A-A518-4135602324EA/WindowsServer2003-KB873376-x86-enu.EXE
===== 873376 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB873376-x86-enu.EXE'''

* http://download.microsoft.com/download/A/D/4/AD4ECF70-34D2-4739-9B1E-E67F09BB8D35/WindowsXP-KB873376-x86-enu.exe


-----

==== MS04-035 - Vulnerability in SMTP Could Allow Remote Code Execution (885881) ====
''Posted: 2004/10/12''

===== 885881 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB885881-x86-enu.EXE'''

* http://download.microsoft.com/download/4/a/7/4a795e42-3de7-49ac-969f-a61b8015bc7b/WindowsServer2003-KB885881-x86-enu.EXE
===== 885882 =====
'''Affected Products:'''

* Exchange Server 2003
** Exchange Server 2003 Gold

'''Patch: Exchange2003-KB885882-x86-ENU.EXE'''

* http://download.microsoft.com/download/8/6/a/86a32ebf-c5e3-44a4-a213-4da755cd89d8/Exchange2003-KB885882-x86-ENU.exe
===== 890066 =====
'''Affected Products:'''

* Exchange 2000 Enterprise Server
** Exchange 2000 SP3
* Exchange 2000 Server
** Exchange 2000 SP3

'''Patch: Exchange2000-KB890066-x86-ENU.EXE'''

* http://download.microsoft.com/download/B/5/4/B547CBD0-F3D6-43B6-AF05-9190A5713716/Exchange2000-KB890066-x86-ENU.exe


-----

==== MS04-036 - Vulnerability in NNTP Could Allow Code Execution (883935) ====
''Posted: 2004/10/12''

===== 883935 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4OptionPack-KB883935-x86-enu.EXE'''

* http://download.microsoft.com/download/e/c/3/ec35e11c-fee1-44a4-9144-e65141da2ed2/WindowsNT4OptionPack-KB883935-x86-enu.EXE
===== 883935 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB883935-x86-ENU.EXE'''

* http://download.microsoft.com/download/F/F/0/FF0A1858-DA78-42CC-91D9-37F69671630E/Windows2000-KB883935-x86-ENU.EXE
===== 883935 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB883935-x86-enu.EXE'''

* http://download.microsoft.com/download/F/5/D/F5DEC840-8AE8-43B3-989E-A38B8F82C50D/WindowsServer2003-KB883935-x86-enu.EXE


-----

==== MS04-037 - Vulnerability in Windows Shell Could Allow Remote Code Execution (841356) ====
''Posted: 2004/10/12''

===== 841356 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Server-KB841356-x86-ENU.EXE'''

* http://download.microsoft.com/download/5/2/B/52BBD8BE-78E7-4275-83F6-3A90A87938AE/WindowsNT4Server-KB841356-x86-ENU.exe
===== 841356 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4TerminalServer-KB841356-x86-ENU.EXE'''

* http://download.microsoft.com/download/0/0/F/00F13B72-62B6-488F-AA7A-4B9261A17CF8/WindowsNT4TerminalServer-KB841356-x86-ENU.exe
===== 841356 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB841356-x86-ENU.EXE'''

* http://download.microsoft.com/download/8/8/0/880DAC95-63E0-40B0-8CE6-FBD29EFE8D4D/Windows2000-KB841356-x86-ENU.EXE
===== 841356 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Gold
* Windows XP Professional
** Windows XP Gold

'''Patch: WindowsXP-KB841356-x86-enu.EXE'''

* http://download.microsoft.com/download/5/6/B/56BBF80B-8644-45E0-A3C1-97DE09F6FCE5/WindowsXP-KB841356-x86-enu.exe
===== 841356 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB841356-x86-enu.EXE'''

* http://download.microsoft.com/download/5/6/B/56BBF80B-8644-45E0-A3C1-97DE09F6FCE5/WindowsXP-KB841356-x86-enu.exe
===== 841356 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB841356-x86-enu.EXE'''

* http://download.microsoft.com/download/9/9/3/993D53CD-EDF9-4DBB-951F-E890B241C1CD/WindowsServer2003-KB841356-x86-enu.EXE


-----

==== MS04-038 - Cumulative Security Update for Internet Explorer (834707) ====
''Posted: 2004/10/12''

===== 834707 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP3

'''Patch: IE5.01sp3-KB834707-Windows2000sp3-x86-ENU.exe'''

* http://download.microsoft.com/download/6/e/6/6e6c59db-84e0-44cd-83b8-265c619bc13b/IE5.01sp3-KB834707-Windows2000sp3-x86-ENU.exe
===== 834707 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP4

'''Patch: IE5.01sp4-KB834707-Windows2000sp4-x86-ENU.exe'''

* http://download.microsoft.com/download/a/e/c/aeccef8b-f9ed-4572-af1e-e846edaa080c/IE5.01sp4-KB834707-Windows2000sp4-x86-ENU.exe
===== 834707 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 Gold

'''Patch: IE6.0-KB834707-WindowsXP-x86-ENU.exe'''

* http://download.microsoft.com/download/4/0/b/40b7a635-dfad-4da2-a4ca-f93ae9e2ee0a/IE6.0-KB834707-WindowsXP-x86-ENU.exe
===== 834707 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 SP1

'''Patch: IE6.0sp1-KB834707-SMS-Deploy-KB887437-x86-ENU.exe'''

* http://download.microsoft.com/download/D/B/A/DBA91CEB-E65B-4EE7-96B8-32F23FD3ADBF/IE6.0sp1-KB834707-SMS-Deploy-KB887437-x86-ENU.exe
===== 834707 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB834707-x86-enu.exe'''

* http://download.microsoft.com/download/8/6/e/86e75905-3dac-4d9e-988a-781a1d1b6dc7/WindowsServer2003-KB834707-x86-enu.EXE
===== 834707 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB834707-x86-enu.exe'''

* http://download.microsoft.com/download/2/0/a/20ae9ba5-0e55-4b53-9454-62b6ef7b1f0a/WindoWSXP-KB834707-x86-enu.exe


-----

==== MS04-039 - Vulnerability in ISA Server 2000 and Proxy Server 2.0 Could Allow Internet Content Spoofing (888258) ====
''Posted: 2004/11/09''

===== 888258 =====
'''Affected Products:'''

* Proxy Server 2.0
** Proxy Server 2.0 Gold
** Proxy Server 2.0 SP1

'''Patch: PROXY20-KB888258-X86-ENU.EXE'''

* http://download.microsoft.com/download/D/0/3/D031FBDC-2365-47DB-81A2-160686124436/PROXY20-KB888258-X86-ENU.exe
===== 888258 =====
'''Affected Products:'''

* ISA Server 2000
** ISA Server 2000 SP1
** ISA Server 2000 SP2

'''Patch: ISA2000-KB888258-X86-ENU.EXE'''

* http://download.microsoft.com/download/3/6/7/3672A0D9-D6FD-469A-A669-FA2126EEFDD0/ISA2000-KB888258-X86-ENU.exe


-----

==== MS04-040 - Cumulative Security Update for Internet Explorer (889293) ====
''Posted: 2004/11/24''

===== 889293 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 SP1

'''Patch: IE6.0sp1-KB889293-SMS-Deploy-KB889410-x86-ENU.exe'''

* http://download.microsoft.com/download/7/1/1/711D7D35-B90C-4370-B221-4A09E1F7C0FD/IE6.0sp1-KB889293-SMS-Deploy-KB889410-x86-ENU.exe


-----

==== MS04-041 - Vulnerability in WordPad Could Allow Code Execution (885836) ====
''Posted: 2004/12/14''

===== 885836 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Server-KB885836-x86-ENU.EXE'''

* http://download.microsoft.com/download/2/C/B/2CB94FD1-9180-4338-A353-AB17004AE347/WindowsNT4Server-KB885836-x86-ENU.exe
===== 885836 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4TerminalServer-KB885836-x86-ENU.EXE'''

* http://download.microsoft.com/download/2/4/3/2435C187-DD2C-4F25-B0C7-30C2C78E5FCA/WindowsNT4TerminalServer-KB885836-x86-ENU.exe
===== 885836 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB885836-x86-ENU.EXE'''

* http://download.microsoft.com/download/8/D/E/8DEFE3B9-2F7C-4237-A4B0-C2901D09DC1C/Windows2000-KB885836-x86-ENU.EXE
===== 885836 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB885836-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/D/A/3DAFD665-AC57-4ABE-9DDB-63D4398B7FD2/WindowsXP-KB885836-x86-ENU.exe
===== 885836 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB885836-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/D/A/3DAFD665-AC57-4ABE-9DDB-63D4398B7FD2/WindowsXP-KB885836-x86-ENU.exe
===== 885836 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB885836-x86-enu.EXE'''

* http://download.microsoft.com/download/0/5/9/0597DE34-F229-464C-9F03-04BCD2361992/WindowsServer2003-KB885836-x86-enu.exe


-----

==== MS04-042 - Vulnerability in DHCP Could Allow Remote Code Execution and Denial Of Service (885249) ====
''Posted: 2004/12/14''

===== 885249 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: windowsnt4server-kb885249-x86-enu.EXE'''

* http://download.microsoft.com/download/6/9/8/6982EE0F-933A-4E90-9FB9-376C89AD3475/windowsnt4server-kb885249-x86-enu.exe
===== 885249 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4TerminalServer-KB885249-x86-ENU.EXE'''

* http://download.microsoft.com/download/B/3/9/B394F291-A329-4215-B886-5387F018DF70/WindowsNT4TerminalServer-KB885249-x86-ENU.exe


-----

==== MS04-043 - Vulnerability in HyperTerminal Could Allow Code Execution (873339) ====
''Posted: 2004/12/14''

===== 873339 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Server-KB873339-x86-ENU.EXE'''

* http://download.microsoft.com/download/9/0/1/9013C8D2-1586-4913-AE2F-8FA4A27224EA/WindowsNT4Server-KB873339-x86-ENU.exe
===== 873339 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4TerminalServer-KB873339-x86-ENU.EXE'''

* http://download.microsoft.com/download/4/7/0/470BA8D8-E531-4595-97EB-9F79A9F20CBD/WindowsNT4TerminalServer-KB873339-x86-ENU.exe
===== 873339 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB873339-x86-ENU.EXE'''

* http://download.microsoft.com/download/9/6/5/965578E2-2029-4709-8603-EC5C8467CB21/Windows2000-KB873339-x86-ENU.EXE
===== 873339 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB873339-x86-ENU.EXE'''

* http://download.microsoft.com/download/8/3/E/83E7E311-F8EA-4E59-9B50-64DBFDCB0F1F/WindowsXP-KB873339-x86-ENU.exe
===== 873339 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB873339-x86-ENU.EXE'''

* http://download.microsoft.com/download/8/3/E/83E7E311-F8EA-4E59-9B50-64DBFDCB0F1F/WindowsXP-KB873339-x86-ENU.exe
===== 873339 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB873339-x86-enu.EXE'''

* http://download.microsoft.com/download/4/2/5/42568FB5-114E-4CEC-91F1-BE9EF35A2B4C/WindowsServer2003-KB873339-x86-enu.exe


-----

==== MS04-044 - Vulnerabilities in Windows Kernel and LSASS Could Allow Elevation of Privilege (885835) ====
''Posted: 2004/12/14''

===== 885835 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Server-KB885835-x86-ENU.EXE'''

* http://download.microsoft.com/download/8/3/F/83F2502C-6196-41A7-B2A4-11199A50A5E6/WindowsNT4Server-KB885835-x86-ENU.exe
===== 885835 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4TerminalServer-KB885835-x86-ENU.EXE'''

* http://download.microsoft.com/download/B/5/E/B5EC1ECF-8ACF-4ECF-819E-54C412C90FB7/WindowsNT4TerminalServer-KB885835-x86-ENU.exe
===== 885835 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB885835-x86-ENU.EXE'''

* http://download.microsoft.com/download/8/4/E/84E1995C-C98E-4818-9DA3-62004C17D80F/Windows2000-KB885835-x86-ENU.EXE
===== 885835 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB885835-x86-ENU.EXE'''

* http://download.microsoft.com/download/C/C/3/CC385A85-3A2E-4632-AD43-72E48480E69C/WindowsXP-KB885835-x86-ENU.exe
===== 885835 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB885835-x86-ENU.EXE'''

* http://download.microsoft.com/download/C/C/3/CC385A85-3A2E-4632-AD43-72E48480E69C/WindowsXP-KB885835-x86-ENU.exe
===== 885835 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB885835-x86-enu.EXE'''

* http://download.microsoft.com/download/9/B/7/9B75C063-B57C-4493-A437-B1431722B8C2/WindowsServer2003-KB885835-x86-enu.exe


-----

==== MS04-045 - Vulnerability in WINS Could Allow Remote Code Execution (870763) ====
''Posted: 2004/12/14''

===== 870763 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Server-KB870763-x86-ENU.EXE'''

* http://download.microsoft.com/download/F/E/C/FEC9EFE8-B73D-4731-AEDF-461F90D5A77F/WindowsNT4Server-KB870763-x86-ENU.exe
===== 870763 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4TerminalServer-KB870763-x86-ENU.EXE'''

* http://download.microsoft.com/download/6/2/3/623C91E4-6FEF-49CF-9296-99B91890750F/WindowsNT4TerminalServer-KB870763-x86-ENU.exe
===== 870763 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB870763-x86-ENU.EXE'''

* http://download.microsoft.com/download/5/5/3/5534AE29-1381-440C-822E-439A952D5082/Windows2000-KB870763-x86-ENU.EXE
===== 870763 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB870763-x86-enu.EXE'''

* http://download.microsoft.com/download/E/0/E/E0E2B2A8-2DBA-4A7D-86B5-E0983CC24C24/WindowsServer2003-KB870763-x86-enu.exe


-----

==== MS05-001 - Vulnerability in HTML Help Could Allow Code Execution (890175) ====
''Posted: 2005/01/11''

===== 890175 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4-KB890175-ENU.EXE'''

* http://download.microsoft.com/download/B/1/9/B1937347-E4C4-4C6F-86EE-88BB58A1FAFF/WindowsNT4-KB890175-ENU.EXE
===== 890175 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4-KB890175-ENU.Exe'''

* http://download.microsoft.com/download/B/1/9/B1937347-E4C4-4C6F-86EE-88BB58A1FAFF/WindowsNT4-KB890175-ENU.EXE
===== 890175 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB890175-x86-ENU.EXE'''

* http://download.microsoft.com/download/8/5/B/85B8B387-E367-47BB-8E39-39BF28147775/Windows2000-KB890175-x86-ENU.EXE
===== 890175 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB890175-x86-ENU.EXE'''

* http://download.microsoft.com/download/A/3/4/A34E76E4-25A0-42F9-988F-33CB6E93E29A/WindowsXP-KB890175-x86-ENU.exe
===== 890175 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB890175-x86-ENU.EXE'''

* http://download.microsoft.com/download/A/3/4/A34E76E4-25A0-42F9-988F-33CB6E93E29A/WindowsXP-KB890175-x86-ENU.exe
===== 890175 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB890175-x86-enu.EXE'''

* http://download.microsoft.com/download/6/9/9/699BD919-FF46-4369-B739-E6B65E8020EB/WindowsServer2003-KB890175-x86-enu.exe


-----

==== MS05-002 - Vulnerability in Cursor and Icon Format Handling Could Allow Remote Code Execution (891711) ====
''Posted: 2005/01/11''

===== 891711 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Server-KB891711-x86-ENU.EXE'''

* http://download.microsoft.com/download/2/E/4/2E4D50D5-854C-48C3-A928-80C5DDC958E4/WindowsNT4Server-KB891711-x86-ENU.exe
===== 891711 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4TerminalServer-KB891711-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/2/8/3285FDDC-4D00-4977-AA7D-21A602CB945A/WindowsNT4TerminalServer-KB891711-x86-ENU.exe
===== 891711 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB891711-x86-ENU.EXE'''

* http://download.microsoft.com/download/7/E/F/7EF6135D-B54E-4FB6-9A2A-233A325D0F8E/Windows2000-KB891711-x86-ENU.EXE
===== 891711 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB891711-x86-ENU.EXE'''

* http://download.microsoft.com/download/D/2/B/D2B2A03D-E617-4BFF-AEEB-E3D45110B7D6/WindowsXP-KB891711-x86-ENU.exe
===== 891711 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB891711-x86-enu.EXE'''

* http://download.microsoft.com/download/A/2/F/A2F73F4E-0C20-4C70-ACB0-8705E65ED4B9/WindowsServer2003-KB891711-x86-enu.exe


-----

==== MS05-003 - Vulnerability in the Indexing Service Could Allow Remote Code Execution (871250) ====
''Posted: 2005/01/11''

===== 871250 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB871250-x86-ENU.EXE'''

* http://download.microsoft.com/download/5/0/b/50b4e83d-a0b8-4a29-9f0f-2ea4e0ce7dd6/Windows2000-KB871250-x86-ENU.EXE
===== 871250 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB871250-x86-ENU.EXE'''

* http://download.microsoft.com/download/8/7/b/87ba9f1f-bab2-4933-9fa9-e89081409f78/WindowsXP-KB871250-x86-ENU.exe
===== 871250 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB871250-x86-enu.EXE'''

* http://download.microsoft.com/download/8/6/8/86877b39-1f2d-4889-bc43-bed2b0550b63/WindowsServer2003-KB871250-x86-enu.exe


-----

==== MS05-004 - ASP.NET Path Validation Vulnerability (887219) ====
''Posted: 2005/02/08''



-----

==== MS05-005 - Vulnerability in Microsoft Office XP could lead to Buffer Overrun (873352) ====
''Posted: 2005/02/08''



-----

==== MS05-006 - Vulnerability in Windows SharePoint Services and SharePoint Team Services Could Allow Cross-Site Scripting and Spoofing Attacks (887891) ====
''Posted: 2005/02/08''



-----

==== MS05-007 - Vulnerability in Windows Could Allow Information Disclosure (888302) ====
''Posted: 2005/02/08''

===== 888302 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB888302-x86-ENU.EXE'''

* http://download.microsoft.com/download/e/b/8/eb8e1485-0e8e-4c52-b420-94e70f13cb0e/WindowsXP-KB888302-x86-ENU.exe
===== 888302 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB888302-x86-ENU.EXE'''

* http://download.microsoft.com/download/e/b/8/eb8e1485-0e8e-4c52-b420-94e70f13cb0e/WindowsXP-KB888302-x86-ENU.exe


-----

==== MS05-008 - Vulnerabilty in Windows Shell Could Allow Remote Code Execution (890047) ====
''Posted: 2005/02/08''

===== 890047 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 3

'''Patch: Windows2000-KB890047-x86-ENU.EXE'''

* http://download.microsoft.com/download/5/2/6/526f5104-b385-4a98-9cfd-310cf1fd7e93/Windows2000-KB890047-x86-ENU.EXE
===== 890047 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB890047-x86-ENU.EXE'''

* http://download.microsoft.com/download/5/2/6/526f5104-b385-4a98-9cfd-310cf1fd7e93/Windows2000-KB890047-x86-ENU.EXE
===== 890047 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB890047-X86-ENU.EXE'''

* http://download.microsoft.com/download/9/f/2/9f2227c8-baf2-4515-8626-06f1830b24c4/WindowsXP-KB890047-X86-ENU.exe
===== 890047 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB890047-X86-ENU.EXE'''

* http://download.microsoft.com/download/9/f/2/9f2227c8-baf2-4515-8626-06f1830b24c4/WindowsXP-KB890047-X86-ENU.exe
===== 890047 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB890047-x86-enu.EXE'''

* http://download.microsoft.com/download/f/6/5/f65c3dac-d5f6-4e80-9dba-7df21f149fcd/WindowsServer2003-KB890047-x86-enu.exe


-----

==== MS05-009 - Vulnerability in PNG Processing Could Lead to Buffer Overrun (890261) ====
''Posted: 2005/02/08''

===== 885492 =====
'''Affected Products:'''

* Windows Media Player 9 Series
** Windows Media Player 9 Series Gold

'''Patch: WindowsMedia9-KB885492-x86-ENU.exe'''

* http://download.microsoft.com/download/E/D/8/ED8A0A15-2770-45B8-BA8B-A2FF178C2C86/WindowsMedia9-KB885492-x86-ENU.exe
===== 885492 =====
'''Affected Products:'''

* Windows Media Player 9 Series for Windows Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsMedia9-KB885492-x86-ENU.EXE'''

* http://download.microsoft.com/download/E/D/8/ED8A0A15-2770-45B8-BA8B-A2FF178C2C86/WindowsMedia9-KB885492-x86-ENU.exe
===== 887472 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: UnsupportedPatch-KB887472-W2Ksp3sp4'''

* NA
===== 887472 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 1
** Windows XP Service Pack 2

'''Patch: UnsupportedPatch-KB887472-WXPsp1sp2'''

* NA
===== 887472 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
** Windows Server 2003 Service Pack 1

'''Patch: UnsupportedPatch-KB887472-W2003rtm'''

* NA


-----

==== MS05-010 - Vulnerability in the License Logging Service Could Allow Code Execution (885834) ====
''Posted: 2005/02/08''

===== 885834 =====
'''Affected Products:'''

* Windows NT Server 4.0
** Windows NT4 Service Pack 6a
* Windows NT Server 4.0, Enterprise Edition
** Windows NT4 Service Pack 6a

'''Patch: WindowsNT4Server-KB885834-x86-ENU.EXE'''

* http://download.microsoft.com/download/a/5/7/a57ea457-fac7-42fa-bb7f-dc1782a03d4e/WindowsNT4Server-KB885834-x86-ENU.exe
===== 885834 =====
'''Affected Products:'''

* Windows NT Server 4.0, Terminal Server Edition
** Windows NT4 Terminal Server Service Pack 6

'''Patch: WindowsNT4TerminalServer-KB885834-x86-ENU.EXE'''

* http://download.microsoft.com/download/8/0/7/807f9d4a-0234-4510-98de-960289f5d55c/WindowsNT4TerminalServer-KB885834-x86-ENU.exe
===== 885834 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB885834-x86-ENU.EXE'''

* http://download.microsoft.com/download/6/5/e/65e21c5a-dd08-4ca6-904a-a9b6eed5d33a/Windows2000-KB885834-x86-ENU.EXE
===== 885834 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB885834-x86-enu.EXE'''

* http://download.microsoft.com/download/A/D/A/ADA6FC04-430E-45F3-98EB-39B3B14E8943/WindowsServer2003-KB885834-x86-enu.exe


-----

==== MS05-011 - Vulnerability in Server Message Block Could Allow Remote Code Execution (885250) ====
''Posted: 2005/02/08''

===== 885250 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 3

'''Patch: Windows2000-KB885250-x86-ENU.EXE'''

* http://download.microsoft.com/download/4/4/f/44fe309c-ad08-4e1d-bbeb-f9954ecd14ae/Windows2000-KB885250-x86-ENU.EXE
===== 885250 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB885250-x86-ENU.EXE'''

* http://download.microsoft.com/download/4/4/f/44fe309c-ad08-4e1d-bbeb-f9954ecd14ae/Windows2000-KB885250-x86-ENU.EXE
===== 885250 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB885250-x86-ENU.EXE'''

* http://download.microsoft.com/download/c/1/6/c1655380-744b-496c-86aa-5ec0acf35873/WindowsXP-KB885250-x86-ENU.exe
===== 885250 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB885250-x86-ENU.EXE'''

* http://download.microsoft.com/download/c/1/6/c1655380-744b-496c-86aa-5ec0acf35873/WindowsXP-KB885250-x86-ENU.exe
===== 885250 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB885250-x86-enu.EXE'''

* http://download.microsoft.com/download/2/b/c/2bc43615-2f5c-46dd-8637-9859798253c7/WindowsServer2003-KB885250-x86-enu.exe


-----

==== MS05-012 - Vulnerability in OLE and COM Could Allow Remote Code Execution (873333) ====
''Posted: 2005/02/08''

===== 873333 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 3

'''Patch: Windows2000-KB873333-x86-ENU.EXE'''

* http://download.microsoft.com/download/6/e/0/6e0628b2-7ef5-4a28-9bea-6b2045e48afb/Windows2000-KB873333-x86-ENU.EXE
===== 873333 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB873333-x86-ENU.EXE'''

* http://download.microsoft.com/download/6/e/0/6e0628b2-7ef5-4a28-9bea-6b2045e48afb/Windows2000-KB873333-x86-ENU.EXE
===== 873333 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB873333-x86-ENU.EXE'''

* http://download.microsoft.com/download/8/e/c/8ec3ba11-648b-4f26-8594-7781f25f8feb/WindowsXP-KB873333-x86-ENU.exe
===== 873333 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB873333-x86-ENU.EXE'''

* http://download.microsoft.com/download/8/e/c/8ec3ba11-648b-4f26-8594-7781f25f8feb/WindowsXP-KB873333-x86-ENU.exe
===== 873333 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB873333-x86-enu.EXE'''

* http://download.microsoft.com/download/5/4/b/54bac7dd-901d-40c4-a66e-6505f7c3a5fe/WindowsServer2003-KB873333-x86-enu.exe


-----

==== MS05-013 - Vulnerability in the DHTML Editing ActiveX Control could allow code execution (891781) ====
''Posted: 2005/02/08''

===== 891781 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB891781-x86-ENU.EXE'''

* http://download.microsoft.com/download/6/0/d/60dbd3fb-ce2d-473b-8457-73553c4b2f97/Windows2000-KB891781-x86-ENU.EXE
===== 891781 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB891781-x86-ENU.EXE'''

* http://download.microsoft.com/download/a/4/f/a4ff8b08-f40a-4b0f-8625-b253e9db911b/WindowsXP-KB891781-x86-ENU.exe
===== 891781 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB891781-x86-ENU.EXE'''

* http://download.microsoft.com/download/a/4/f/a4ff8b08-f40a-4b0f-8625-b253e9db911b/WindowsXP-KB891781-x86-ENU.exe
===== 891781 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB891781-x86-enu.EXE'''

* http://download.microsoft.com/download/5/7/0/57089643-22e1-469f-99e7-77214bc0cc9f/WindowsServer2003-KB891781-x86-enu.exe


-----

==== MS05-014 - Cumulative Security Update for Internet Explorer (867282) ====
''Posted: 2005/02/08''

===== 867282 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP3

'''Patch: IE5.01sp3-KB867282-Windows2000sp3-x86-ENU.EXE'''

* http://download.microsoft.com/download/a/c/8/ac8e2717-0108-4ae1-9949-d5b5007cabd0/IE5.01sp3-KB867282-Windows2000sp3-x86-ENU.exe
===== 867282 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP4

'''Patch: IE5.01sp4-KB867282-Windows2000sp4-x86-ENU.EXE'''

* http://download.microsoft.com/download/0/5/6/056db5b5-9f73-44f6-8f1f-97d18d5ec0c8/IE5.01sp4-KB867282-Windows2000sp4-x86-ENU.exe
===== 867282 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 SP1

'''Patch: IE6.0sp1-KB867282-SMS-Deploy-KB892937-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/5/a/35a8b529-b138-4092-8ded-4511ebf7b3b5/IE6.0sp1-KB867282-SMS-Deploy-KB892937-x86-ENU.exe
===== 867282 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB867282-x86-enu.EXE'''

* http://download.microsoft.com/download/a/5/9/a59877ba-f11c-430d-b96f-805a31c4f296/WindowsServer2003-KB867282-x86-enu.exe
===== 867282 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB867282-x86-ENU.EXE'''

* http://download.microsoft.com/download/2/5/5/25515625-a3aa-43b1-8760-fa3c0dcf7cea/WindowsXP-KB867282-x86-ENU.exe


-----

==== MS05-015 - Vulnerability in Hyperlink Object Library Could Allow Remote Code Execution (888113) ====
''Posted: 2005/02/08''

===== 888113 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB888113-x86-ENU.EXE'''

* http://download.microsoft.com/download/8/6/8/8684F2C4-C3F3-4FA3-A553-6B73A1A8B617/Windows2000-KB888113-x86-ENU.EXE
===== 888113 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB888113-x86-ENU.EXE'''

* http://download.microsoft.com/download/6/C/F/6CFC4140-F44B-44B6-A773-1F5CF3678086/WindowsXP-KB888113-x86-ENU.exe
===== 888113 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB888113-x86-ENU.EXE'''

* http://download.microsoft.com/download/6/C/F/6CFC4140-F44B-44B6-A773-1F5CF3678086/WindowsXP-KB888113-x86-ENU.exe
===== 888113 =====
'''Affected Products:'''

* Windows Small Business Server 2003
** Windows Server 2003 Gold
* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB888113-x86-enu.EXE'''

* http://download.microsoft.com/download/F/4/2/F4214A28-B88C-4553-8C23-E4BC8E1D2622/WindowsServer2003-KB888113-x86-enu.exe


-----

==== MS05-016 - Vulnerability in Windows Shell that Could Allow Remote Code Execution (893086) ====
''Posted: 2005/04/12''

===== 893086 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 3

'''Patch: Windows2000-KB893086-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/3/3/333ba156-5869-4bcf-8054-43ab15f76ed9/Windows2000-KB893086-x86-ENU.EXE
===== 893086 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB893086-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/3/3/333ba156-5869-4bcf-8054-43ab15f76ed9/Windows2000-KB893086-x86-ENU.EXE
===== 893086 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB893086-x86-ENU.EXE'''

* http://download.microsoft.com/download/6/C/E/6CE8FCAF-C933-4E4E-8B6B-62AAAC65125B/WindowsXP-KB893086-x86-ENU.exe
===== 893086 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB893086-x86-ENU.EXE'''

* http://download.microsoft.com/download/6/C/E/6CE8FCAF-C933-4E4E-8B6B-62AAAC65125B/WindowsXP-KB893086-x86-ENU.exe
===== 893086 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB893086-x86-enu.EXE'''

* http://download.microsoft.com/download/6/E/A/6EA32AAB-A051-46B9-B5CC-199154AE2577/WindowsServer2003-KB893086-x86-enu.exe


-----

==== MS05-017 - Vulnerability in Message Queuing Could Allow Code Execution (892944) ====
''Posted: 2005/04/12''

===== 892944 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB892944-x86-ENU.EXE'''

* http://download.microsoft.com/download/b/5/8/b5850944-d2cc-495a-a7a2-a4e1b9cb6950/Windows2000-KB892944-x86-ENU.EXE
===== 892944 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB892944-x86-ENU.EXE'''

* http://download.microsoft.com/download/7/B/B/7BB9BB4C-7F93-449A-976B-929F6F61ED92/WindowsXP-KB892944-x86-ENU.exe


-----

==== MS05-018 - Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege and Denial of Service (890859) ====
''Posted: 2005/04/12''

===== 890859 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB890859-x86-ENU.EXE'''

* http://download.microsoft.com/download/8/7/c/87c8a002-57fb-4d0e-8cd2-cfb7b6c1e491/Windows2000-KB890859-x86-ENU.EXE
===== 890859 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB890859-x86-ENU.EXE'''

* http://download.microsoft.com/download/1/F/C/1FCCBFC9-AEB6-4762-ADC1-47D512ECB61C/WindowsXP-KB890859-x86-ENU.exe
===== 890859 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB890859-x86-ENU.EXE'''

* http://download.microsoft.com/download/1/F/C/1FCCBFC9-AEB6-4762-ADC1-47D512ECB61C/WindowsXP-KB890859-x86-ENU.exe
===== 890859 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB890859-x86-enu.EXE'''

* http://download.microsoft.com/download/2/D/8/2D856F43-4FAF-4246-832F-525088B77D0C/WindowsServer2003-KB890859-x86-enu.exe


-----

==== MS05-019 - Vulnerabilities in TCP/IP Could Allow Remote Code Execution and Denial of Service (893066) ====
''Posted: 2005/04/12''

===== 893066 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 3

'''Patch: Windows2000-KB893066-v2-x86-ENU.EXE'''

* http://download.microsoft.com/download/C/8/6/C861FF21-8E56-4F6A-870B-DB3542E612E0/Windows2000-KB893066-v2-x86-ENU.EXE
===== 893066 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB893066-v2-x86-ENU.EXE'''

* http://download.microsoft.com/download/C/8/6/C861FF21-8E56-4F6A-870B-DB3542E612E0/Windows2000-KB893066-v2-x86-ENU.EXE
===== 893066 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB893066-v2-x86-ENU.EXE'''

* http://download.microsoft.com/download/2/8/E/28EF9005-4845-4496-A2E1-C0F8A2B673CA/WindowsXP-KB893066-v2-x86-ENU.exe
===== 893066 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB893066-v2-x86-ENU.EXE'''

* http://download.microsoft.com/download/2/8/E/28EF9005-4845-4496-A2E1-C0F8A2B673CA/WindowsXP-KB893066-v2-x86-ENU.exe
===== 893066 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB893066-v2-x86-enu.EXE'''

* http://download.microsoft.com/download/3/9/C/39C7DB36-2F55-4FD7-BD4C-EBBB58A2A21D/WindowsServer2003-KB893066-v2-x86-enu.exe


-----

==== MS05-020 - Cumulative Security Update for Internet Explorer (890923) ====
''Posted: 2005/04/12''

===== 890923 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP3

'''Patch: IE5.01sp3-KB890923-Windows2000sp3-x86-ENU.EXE'''

* http://download.microsoft.com/download/4/e/c/4ec35358-9203-4ecb-a865-581bf2937894/IE5.01sp3-KB890923-Windows2000sp3-x86-ENU.exe
===== 890923 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP4

'''Patch: IE5.01sp4-KB890923-Windows2000sp4-x86-ENU.EXE'''

* http://download.microsoft.com/download/6/a/a/6aa52757-8531-41dc-9a87-e050d6b99106/IE5.01sp4-KB890923-Windows2000sp4-x86-ENU.exe
===== 890923 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 SP1

'''Patch: IE6.0sp1-KB890923-SMS-Deploy-KB896162-x86-ENU.EXE'''

* http://download.microsoft.com/download/9/A/6/9A68396A-D7B2-4058-80EB-AA0E771D3B1E/IE6.0sp1-KB890923-SMS-Deploy-KB896162-x86-ENU.exe
===== 890923 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB890923-x86-enu.EXE'''

* http://download.microsoft.com/download/6/e/2/6e2a3bd6-3a10-4fe0-8549-fae37582f3ab/WindowsServer2003-KB890923-x86-enu.exe
===== 890923 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB890923-x86-ENU.EXE'''

* http://download.microsoft.com/download/b/a/6/ba6c5cf7-70d0-4b19-b5b6-0d2217191e2d/WindowsXP-KB890923-x86-ENU.exe


-----

==== MS05-021 - Vulnerability in Exchange Server Could Allow Remote Code Execution (894549) ====
''Posted: 2005/04/12''

===== 894549 =====
'''Affected Products:'''

* Exchange 2000 Server
** Exchange 2000 SP3
* Exchange 2000 Enterprise Server
** Exchange 2000 SP3

'''Patch: Exchange2000-KB894549-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/6/A/36AE7B61-E8FB-4662-B0B1-5B76C267F633/Exchange2000-KB894549-x86-ENU.exe
===== 894549 =====
'''Affected Products:'''

* Exchange Server 2003
** Exchange Server 2003 Gold

'''Patch: Exchange2003-KB894549-x86-ENU.EXE'''

* http://download.microsoft.com/download/4/5/1/45172b03-90aa-4f33-bef8-5fdd7247b216/Exchange2003-KB894549-x86-ENU.exe
===== 894549 =====
'''Affected Products:'''

* Exchange Server 2003
** Exchange Server 2003 SP1

'''Patch: Exchange2003-KB894549-x86-ENU.Exe'''

* http://download.microsoft.com/download/9/c/c/9cc0ec12-c54b-468c-b4f5-6ff89bc31b22/Exchange2003-KB894549-x86-ENU.exe


-----

==== MS05-022 - Vulnerability in MSN Messenger Could Lead to Remote Code Execution (896597) ====
''Posted: 2005/04/12''

===== 896597 =====
'''Affected Products:'''

* MSN Messenger
** MSN Messenger Gold

'''Patch: MSNMessenger62'''

* http://download.microsoft.com/download/a/f/b/afb633a8-ce31-4093-b4de-726b0d03f4eb/EN/msnmsgs.msi


-----

==== MS05-023 - Vulnerabilities in Microsoft Word May Lead to Remote Code Execution (890169) ====
''Posted: 2005/04/12''

===== 890169 =====
'''Affected Products:'''

* Word 2000

'''Patch: Word2000'''

* NA
===== 890169 =====
'''Affected Products:'''

* Word 2002

'''Patch: Word2002'''

* NA
===== 890169 =====
'''Affected Products:'''

* Word 2003
** Word 2003 SP1

'''Patch: Word2003'''

* NA
===== 890169 =====
'''Affected Products:'''

* Works 2001
* Works 2002
* Works 2003
* Works 2004

'''Patch: Works2001-2004n'''

* NA


-----

==== MS05-024 - Vulnerability in Web View Could Allow Remote Code Execution (894320) ====
''Posted: 2005/05/10''

===== 894320 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 3

'''Patch: Windows2000-KB894320-x86-ENU.EXE'''

* http://download.microsoft.com/download/D/A/F/DAFDA7AA-7103-45F9-9491-387E5F3FAEC5/Windows2000-KB894320-x86-ENU.EXE
===== 894320 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB894320-x86-ENU.EXE'''

* http://download.microsoft.com/download/D/A/F/DAFDA7AA-7103-45F9-9491-387E5F3FAEC5/Windows2000-KB894320-x86-ENU.EXE


-----

==== MS05-025 - Cumulative Security Update for Internet Explorer (883939) ====
''Posted: 2005/06/14''

===== 883939 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP3

'''Patch: ie5.01sp3-KB883939-Windows2000sp3-x86-ENU.EXE'''

* http://download.microsoft.com/download/e/5/b/e5b229cb-76f2-43f2-ac90-4a8723edb48c/IE5.01sp3-KB883939-Windows2000sp3-x86-ENU.exe
===== 883939 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP4

'''Patch: ie5.01sp4-KB883939-Windows2000sp4-x86-ENU.EXE'''

* http://download.microsoft.com/download/8/8/1/881c4ec4-9bea-4edc-9e32-b5126c42f7d4/IE5.01sp4-KB883939-Windows2000sp4-x86-ENU.exe
===== 899950 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 SP1

'''Patch: IE6.0sp1-KB883939-SMS-Deploy-KB899950-x86-ENU.EXE'''

* http://download.microsoft.com/download/5/E/0/5E0599CA-68A3-416F-B76B-BC7656EE2513/IE6.0sp1-KB883939-SMS-Deploy-KB899950-x86-ENU.exe
===== 883939 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB883939-x86-enu.EXE'''

* http://download.microsoft.com/download/b/4/1/b41bc4db-bd7b-4193-86a8-0b9b29fb1575/WindowsServer2003-KB883939-x86-enu.exe
===== 883939 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB883939-x86-enu.EXE'''

* http://download.microsoft.com/download/b/4/1/b41bc4db-bd7b-4193-86a8-0b9b29fb1575/WindowsServer2003-KB883939-x86-enu.exe
===== 883939 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB883939-x86-ENU.EXE'''

* http://download.microsoft.com/download/e/6/a/e6ab9d30-f492-4007-932a-7e3b264a05e0/WindowsXP-KB883939-x86-ENU.exe


-----

==== MS05-026 - Vulnerability in HTML Help Could Allow Remote Code Execution (896358) ====
''Posted: 2005/06/14''

===== 896358 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB896358-x86-ENU.EXE'''

* http://download.microsoft.com/download/F/2/8/F284148A-A991-4EE2-BB2F-12AA0D2E5013/Windows2000-KB896358-x86-ENU.EXE
===== 896358 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB896358-x86-ENU.EXE'''

* http://download.microsoft.com/download/6/3/9/639EEF80-2245-486C-A23F-914C0B31336B/WindowsXP-KB896358-x86-ENU.exe
===== 896358 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB896358-x86-ENU.EXE'''

* http://download.microsoft.com/download/6/3/9/639EEF80-2245-486C-A23F-914C0B31336B/WindowsXP-KB896358-x86-ENU.exe
===== 896358 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB896358-x86-enu.EXE'''

* http://download.microsoft.com/download/4/1/9/419A3790-620A-4C59-B071-9F6207CD0954/WindowsServer2003-KB896358-x86-enu.exe
===== 896358 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB896358-x86-enu.EXE'''

* http://download.microsoft.com/download/4/1/9/419A3790-620A-4C59-B071-9F6207CD0954/WindowsServer2003-KB896358-x86-enu.exe


-----

==== MS05-027 - Vulnerability in Server Message Block Could Allow Remote Code Execution (896422) ====
''Posted: 2005/06/14''

===== 896422 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
* Windows 2000 Professional
** Windows 2000 Service Pack 3
* Windows 2000 Server
** Windows 2000 Service Pack 3

'''Patch: Windows2000-KB896422-x86-ENU.EXE'''

* http://download.microsoft.com/download/C/9/7/C9700B63-06BE-475B-B2E6-12F6298A75B5/Windows2000-KB896422-x86-ENU.EXE
===== 896422 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB896422-x86-ENU.Exe'''

* http://download.microsoft.com/download/C/9/7/C9700B63-06BE-475B-B2E6-12F6298A75B5/Windows2000-KB896422-x86-ENU.EXE
===== 896422 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB896422-x86-ENU.EXE'''

* http://download.microsoft.com/download/F/D/4/FD470CC2-1813-4A50-BE2A-5B1B5A343305/WindowsXP-KB896422-x86-ENU.exe
===== 896422 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB896422-x86-ENU.EXE'''

* http://download.microsoft.com/download/F/D/4/FD470CC2-1813-4A50-BE2A-5B1B5A343305/WindowsXP-KB896422-x86-ENU.exe
===== 896422 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB896422-x86-enu.EXE'''

* http://download.microsoft.com/download/2/6/6/266B4FCC-BFBD-45D6-A7C8-96C470EF868B/WindowsServer2003-KB896422-x86-enu.exe
===== 896422 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB896422-x86-enu.EXE'''

* http://download.microsoft.com/download/2/6/6/266B4FCC-BFBD-45D6-A7C8-96C470EF868B/WindowsServer2003-KB896422-x86-enu.exe


-----

==== MS05-028 - Vulnerability in Web Client Service Could Allow Elevation of Privilege (896426) ====
''Posted: 2005/06/14''

===== 896426 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB896426-x86-ENU.EXE'''

* http://download.microsoft.com/download/5/7/9/579B3582-D3D8-4E1B-8DD8-D29B7AE210C9/WindowsXP-KB896426-x86-ENU.exe
===== 896426 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB896426-x86-enu.EXE'''

* http://download.microsoft.com/download/D/F/A/DFA57E82-46D6-4CD0-BD6C-EA21FA0FD822/WindowsServer2003-KB896426-x86-enu.exe


-----

==== MS05-029 - Vulnerability in Outlook Web Access for Exchange Server 5.5 Could Allow Cross-Site Scripting Attacks (895179) ====
''Posted: 2005/06/14''

===== 895179 =====
'''Affected Products:'''

* Exchange Server 5.5
** Exchange Server 5.5 SP4

'''Patch: Exchange5.5-KB895179-x86-enu.EXE'''

* http://download.microsoft.com/download/D/A/7/DA745C35-3EAB-48F6-B511-E7125A763048/Exchange5.5-KB895179-x86-enu.EXE


-----

==== MS05-030 - Vulnerability in Outlook Express Could Allow Remote Code Execution (897715) ====
''Posted: 2005/06/14''

===== 897715 =====
'''Affected Products:'''

* Outlook Express 5.5
** Internet Explorer 5.5 SP2

'''Patch: OE55-SP2'''

* NA
===== 897715 =====
'''Affected Products:'''

* Outlook Express 6.0
** Internet Explorer 6 SP1

'''Patch: OE6-SP1'''

* NA
===== 897715 =====
'''Affected Products:'''

* Outlook Express 6 on Windows Server 2003
** Windows Server 2003 Gold

'''Patch: OE6forW2003'''

* NA


-----

==== MS05-031 - Vulnerability in Step-by-Step Interactive Training Could Allow Remote Code Execution (898458) ====
''Posted: 2005/06/14''

===== 898458 =====
'''Affected Products:'''

* .NET Framework

'''Patch: MSInteractiveTraining'''

* http://download.microsoft.com/download/5/9/E/59E7DB6E-B5B7-45FF-8827-BE69103AB535/StepByStepInteractiveTraining-KB898458-x86-ENU.exe


-----

==== MS05-032 - Vulnerability in Microsoft Agent Could Allow Spoofing (890046) ====
''Posted: 2005/06/14''

===== 890046 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 3
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB890046-x86-ENU.EXE'''

* http://download.microsoft.com/download/8/0/0/800CC57F-930B-4FA0-826B-83F5AF39AF2D/Windows2000-KB890046-x86-ENU.EXE
===== 890046 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB890046-x86-ENU.EXE'''

* http://download.microsoft.com/download/7/5/1/7514F760-A4E1-444D-8D4C-316B09E5A175/WindowsXP-KB890046-x86-ENU.exe
===== 890046 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB890046-x86-ENU.EXE'''

* http://download.microsoft.com/download/7/5/1/7514F760-A4E1-444D-8D4C-316B09E5A175/WindowsXP-KB890046-x86-ENU.exe
===== 890046 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB890046-x86-enu.EXE'''

* http://download.microsoft.com/download/A/5/1/A5196D22-FC96-48EF-9208-5319E178DEE9/WindowsServer2003-KB890046-x86-enu.exe
===== 890046 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB890046-x86-enu.EXE'''

* http://download.microsoft.com/download/A/5/1/A5196D22-FC96-48EF-9208-5319E178DEE9/WindowsServer2003-KB890046-x86-enu.exe


-----

==== MS05-033 - Vulnerability in Telnet Client Could Allow Information Disclosure (896428) ====
''Posted: 2005/06/14''

===== 896428 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB896428-x86-ENU.EXE'''

* http://download.microsoft.com/download/7/1/1/7114DEE3-7F2C-4AC9-ACC9-B97ACDE812E8/WindowsXP-KB896428-x86-ENU.exe
===== 896428 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB896428-x86-ENU.EXE'''

* http://download.microsoft.com/download/7/1/1/7114DEE3-7F2C-4AC9-ACC9-B97ACDE812E8/WindowsXP-KB896428-x86-ENU.exe
===== 896428 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB896428-x86-enu.EXE'''

* http://download.microsoft.com/download/5/2/9/52901CE3-9606-4C97-969A-F4A6F0B4399F/WindowsServer2003-KB896428-x86-enu.exe
===== 896428 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB896428-x86-enu.EXE'''

* http://download.microsoft.com/download/5/2/9/52901CE3-9606-4C97-969A-F4A6F0B4399F/WindowsServer2003-KB896428-x86-enu.exe


-----

==== MS05-034 - Cumulative Security Update for ISA Server 2000 (899753) ====
''Posted: 2005/06/14''

===== 899753 =====
'''Affected Products:'''

* ISA Server 2000
** ISA Server 2000 SP2

'''Patch: ISA2000-SP2'''

* http://download.microsoft.com/download/A/2/9/A29A1451-B8D4-4A43-8125-BEE594E83CAB/ISA2000-KB899753-X86-ENU.exe


-----

==== MS05-035 - Vulnerability in Microsoft Word Could Allow Remote Code Execution (903672) ====
''Posted: 2005/07/12''

===== 903672 =====
'''Affected Products:'''

* Works 2001
** Works 2001 Gold
* Works 2002
** Works 2002 Gold
* Works 2003
** Works 2003 Gold
* Works 2004

'''Patch: Works2001-2004'''

* NA
===== 895333 =====
'''Affected Products:'''

* Word 2000

'''Patch: Word2000-SP3'''

* NA
===== 895589 =====
'''Affected Products:'''

* Word 2002

'''Patch: Word2002-SP3'''

* NA


-----

==== MS05-036 - Vulnerability in Microsoft Color Management Module Could Allow Remote Code Execution (901214) ====
''Posted: 2005/07/12''

===== 901214 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB901214-x86-ENU.EXE'''

* http://download.microsoft.com/download/D/D/E/DDEFCAA8-F0E4-4A98-B96E-C3B2217370E9/Windows2000-KB901214-x86-ENU.EXE
===== 901214 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB901214-x86-ENU.EXE'''

* http://download.microsoft.com/download/E/1/D/E1DEA0DE-8F7D-481C-B04C-C873F6140DF2/WindowsXP-KB901214-x86-ENU.exe
===== 901214 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB901214-x86-ENU.EXE'''

* http://download.microsoft.com/download/E/1/D/E1DEA0DE-8F7D-481C-B04C-C873F6140DF2/WindowsXP-KB901214-x86-ENU.exe
===== 901214 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB901214-x86-ENU.EXE'''

* http://download.microsoft.com/download/2/2/F/22F0D4E4-EA94-4948-BA50-C7BA9B679D22/WindowsServer2003-KB901214-x86-ENU.exe
===== 901214 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB901214-x86-ENU.EXE'''

* http://download.microsoft.com/download/2/2/F/22F0D4E4-EA94-4948-BA50-C7BA9B679D22/WindowsServer2003-KB901214-x86-ENU.exe


-----

==== MS05-037 - Vulnerability in JView Profiler Could Allow Remote Code Execution (903235) ====
''Posted: 2005/07/12''

===== 903235 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP4

'''Patch: IE-KB903235-x86-ENU.EXE'''

* http://download.microsoft.com/download/f/1/7/f17f74f3-02f7-4a1e-b56a-770c75b9e0fc/IE-KB903235-x86-ENU.exe
===== 903235 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 SP1

'''Patch: IE-KB903235-x86-ENu.EXE'''

* http://download.microsoft.com/download/9/0/6/906ffbae-46a0-4c7c-ab71-8cb89d344f19/IE-KB903235-x86-ENU.exe
===== 903235 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB903235-x86-ENU.EXE'''

* http://download.microsoft.com/download/d/9/e/d9eb06fe-c2ac-492f-bdd6-668c9d14baeb/WindowsServer2003-KB903235-x86-ENU.exe
===== 903235 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB903235-x86-ENU.EXE'''

* http://download.microsoft.com/download/d/9/e/d9eb06fe-c2ac-492f-bdd6-668c9d14baeb/WindowsServer2003-KB903235-x86-ENU.exe
===== 903235 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB903235-x86-ENU.EXE'''

* http://download.microsoft.com/download/d/c/3/dc31c892-6251-4c9b-a780-2688179229f3/WindowsXP-KB903235-x86-ENU.exe


-----

==== MS05-038 - Cumulative Security Update for Internet Explorer (896727) ====
''Posted: 2005/08/09''

===== 896727 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP4

'''Patch: IE5.01sp4-KB896727-Windows2000sp4-x86-ENU.EXE'''

* http://download.microsoft.com/download/1/9/5/195b5f80-5813-4127-8a3e-7c47aa41337e/IE5.01sp4-KB896727-Windows2000sp4-x86-ENU.exe
===== 896727 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 SP1

'''Patch: IE6.0sp1-KB896727-SMS-Deploy-KB903741-x86-ENU.exe'''

* http://download.microsoft.com/download/D/C/D/DCDC617C-5B1E-4E8E-AC11-EF5EA9FA993F/IE6.0sp1-KB896727-SMS-Deploy-KB903741-x86-ENU.exe
===== 896727 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB896727-x86-ENU.EXE'''

* http://download.microsoft.com/download/4/6/3/46366fd7-6308-471b-a6cb-f627ed859b8d/WindowsServer2003-KB896727-x86-ENU.exe
===== 896727 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB896727-x86-ENU.EXE'''

* http://download.microsoft.com/download/4/6/3/46366fd7-6308-471b-a6cb-f627ed859b8d/WindowsServer2003-KB896727-x86-ENU.exe
===== 896727 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB896727-x86-ENU.EXE'''

* http://download.microsoft.com/download/2/6/9/26980f82-fad7-471a-b71c-eec70efcea7d/WindowsXP-KB896727-x86-ENU.exe


-----

==== MS05-039 - Vulnerability in Plug and Play Could Allow Remote Code Execution and Elevation of Privilege (899588) ====
''Posted: 2005/08/09''

===== 899588 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB899588-x86-ENU.EXE'''

* http://download.microsoft.com/download/6/6/0/6601085C-5802-4907-AB75-6E0DB3C479C0/Windows2000-KB899588-x86-ENU.EXE
===== 899588 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB899588-x86-ENU.EXE'''

* http://download.microsoft.com/download/1/8/A/18A58CF1-8EE0-494D-99EC-65FE1891B965/WindowsXP-KB899588-x86-ENU.exe
===== 899588 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB899588-x86-ENU.EXE'''

* http://download.microsoft.com/download/1/8/A/18A58CF1-8EE0-494D-99EC-65FE1891B965/WindowsXP-KB899588-x86-ENU.exe
===== 899588 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB899588-x86-ENU.EXE'''

* http://download.microsoft.com/download/0/B/F/0BF58244-CFC4-4C45-8288-D12B32584FA0/WindowsServer2003-KB899588-x86-ENU.exe
===== 899588 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB899588-x86-ENU.EXE'''

* http://download.microsoft.com/download/0/B/F/0BF58244-CFC4-4C45-8288-D12B32584FA0/WindowsServer2003-KB899588-x86-ENU.exe


-----

==== MS05-040 - Vulnerability in Windows Telephony Service Could Allow Remote Code Execution (893756) ====
''Posted: 2005/08/09''

===== 893756 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB893756-x86-ENU.EXE'''

* http://download.microsoft.com/download/D/1/3/D1323977-BDAB-4B38-8AB6-EC9D985F726E/Windows2000-KB893756-x86-ENU.EXE
===== 893756 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB893756-x86-ENU.EXE'''

* http://download.microsoft.com/download/0/9/D/09D163D5-9793-458F-AEAA-B5C9DFF72350/WindowsXP-KB893756-x86-ENU.exe
===== 893756 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB893756-x86-ENU.EXE'''

* http://download.microsoft.com/download/0/9/D/09D163D5-9793-458F-AEAA-B5C9DFF72350/WindowsXP-KB893756-x86-ENU.exe
===== 893756 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB893756-x86-ENU.EXE'''

* http://download.microsoft.com/download/F/8/1/F8161101-F946-4EE2-9439-B557F3B29E8B/WindowsServer2003-KB893756-x86-ENU.exe
===== 893756 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB893756-x86-ENU.EXE'''

* http://download.microsoft.com/download/F/8/1/F8161101-F946-4EE2-9439-B557F3B29E8B/WindowsServer2003-KB893756-x86-ENU.exe


-----

==== MS05-041 - Vulnerability in Remote Desktop Protocol Could Allow Denial of Service (899591) ====
''Posted: 2005/08/09''

===== 899591 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB899591-x86-ENU.EXE'''

* http://download.microsoft.com/download/1/B/C/1BC34420-6A31-4B1D-B89B-C6C1DD7070A5/Windows2000-KB899591-x86-ENU.EXE
===== 899591 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB899591-x86-ENU.EXE'''

* http://download.microsoft.com/download/0/8/2/082A950A-FDEC-4CB3-8E9C-69D877E4F922/WindowsXP-KB899591-x86-ENU.exe
===== 899591 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB899591-x86-ENU.EXE'''

* http://download.microsoft.com/download/0/8/2/082A950A-FDEC-4CB3-8E9C-69D877E4F922/WindowsXP-KB899591-x86-ENU.exe
===== 899591 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB899591-x86-ENU.EXE'''

* http://download.microsoft.com/download/F/4/7/F47E68FF-07B2-4D53-B29D-19F1BE7698A0/WindowsServer2003-KB899591-x86-ENU.exe
===== 899591 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB899591-x86-ENU.EXE'''

* http://download.microsoft.com/download/F/4/7/F47E68FF-07B2-4D53-B29D-19F1BE7698A0/WindowsServer2003-KB899591-x86-ENU.exe


-----

==== MS05-042 - Vulnerabilities in Kerberos Could Allow Denial of Service, Information Disclosure, and Spoofing (899587) ====
''Posted: 2005/08/09''

===== 899587 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB899587-x86-ENU.EXE'''

* http://download.microsoft.com/download/C/7/3/C739F44F-B5C1-4FA7-BD85-F8C833F35E74/Windows2000-KB899587-x86-ENU.EXE
===== 899587 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB899587-x86-ENU.EXE'''

* http://download.microsoft.com/download/4/3/0/430CB1FD-38B9-4DBC-9077-0CAD900CA5E5/WindowsXP-KB899587-x86-ENU.exe
===== 899587 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB899587-x86-ENU.EXE'''

* http://download.microsoft.com/download/4/3/0/430CB1FD-38B9-4DBC-9077-0CAD900CA5E5/WindowsXP-KB899587-x86-ENU.exe
===== 899587 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB899587-x86-ENU.EXE'''

* http://download.microsoft.com/download/1/0/6/10620213-CDAB-4310-9525-346D6A64100C/WindowsServer2003-KB899587-x86-ENU.exe
===== 899587 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB899587-x86-ENU.EXE'''

* http://download.microsoft.com/download/1/0/6/10620213-CDAB-4310-9525-346D6A64100C/WindowsServer2003-KB899587-x86-ENU.exe


-----

==== MS05-043 - Vulnerability in the Print Spooler Service Could Allow Remote Code Execution (896423) ====
''Posted: 2005/08/09''

===== 896423 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB896423-x86-ENU.EXE'''

* http://download.microsoft.com/download/4/3/2/43215DCD-B8B3-4C8F-A40F-278789F4EB33/Windows2000-KB896423-x86-ENU.EXE
===== 896423 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB896423-x86-ENU.EXE'''

* http://download.microsoft.com/download/7/A/F/7AF980C5-5A65-4067-8801-1F27856EF4F3/WindowsXP-KB896423-x86-ENU.exe
===== 896423 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB896423-x86-ENU.EXE'''

* http://download.microsoft.com/download/7/A/F/7AF980C5-5A65-4067-8801-1F27856EF4F3/WindowsXP-KB896423-x86-ENU.exe
===== 896423 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB896423-x86-enu.EXE'''

* http://download.microsoft.com/download/A/F/9/AF9C4D26-460D-42F0-85DC-03992D28B561/WindowsServer2003-KB896423-x86-enu.exe


-----

==== MS05-044 - Vulnerability in the Windows FTP Client Could Allow File Transfer Location Tampering (905495) ====
''Posted: 2005/10/11''

===== 905495 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: W2K-SP4-IE6sp1'''

* NA
===== 905495 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB905495-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/B/2/3B2F3DAD-597A-429B-B13A-A2A9965C9FE9/WindowsXP-KB905495-x86-ENU.exe
===== 905495 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB905495-x86-ENU.EXE'''

* http://download.microsoft.com/download/F/8/9/F89CDF5F-79B5-4F76-A025-BFA21E4A6EC6/WindowsServer2003-KB905495-x86-ENU.exe


-----

==== MS05-045 - Vulnerability in Network Connection Manager Could Allow Denial of Service (905414) ====
''Posted: 2005/10/11''

===== 905414 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB905414-x86-ENU.EXE'''

* http://download.microsoft.com/download/6/9/F/69F0D119-5CEE-49B5-85D0-AE4FC56C7879/Windows2000-KB905414-x86-ENU.EXE
===== 905414 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB905414-x86-ENU.EXE'''

* http://download.microsoft.com/download/7/C/E/7CE2CF5F-7658-4835-90F4-3DB49688B530/WindowsXP-KB905414-x86-ENU.exe
===== 905414 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB905414-x86-ENU.EXE'''

* http://download.microsoft.com/download/7/C/E/7CE2CF5F-7658-4835-90F4-3DB49688B530/WindowsXP-KB905414-x86-ENU.exe
===== 905414 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB905414-x86-ENU.EXE'''

* http://download.microsoft.com/download/A/A/F/AAFC557E-FA0D-4EB7-9A87-7BF9FC474563/WindowsServer2003-KB905414-x86-ENU.exe
===== 905414 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB905414-x86-ENU.EXE'''

* http://download.microsoft.com/download/A/A/F/AAFC557E-FA0D-4EB7-9A87-7BF9FC474563/WindowsServer2003-KB905414-x86-ENU.exe


-----

==== MS05-046 - Vulnerability in the Client Service for NetWare Could Allow Remote Code Execution (899589) ====
''Posted: 2005/10/11''

===== 899589 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB899589-x86-ENU.EXE'''

* http://download.microsoft.com/download/A/7/7/A776227B-9483-42D8-B5EC-A3A25366D40E/Windows2000-KB899589-x86-ENU.EXE
===== 899589 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB899589-x86-ENU.EXE'''

* http://download.microsoft.com/download/7/2/B/72B8C938-D1F9-479C-8574-CAA81EA83DA3/WindowsXP-KB899589-x86-ENU.exe
===== 899589 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB899589-x86-ENU.EXE'''

* http://download.microsoft.com/download/7/2/B/72B8C938-D1F9-479C-8574-CAA81EA83DA3/WindowsXP-KB899589-x86-ENU.exe
===== 899589 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB899589-x86-ENU.EXE'''

* http://download.microsoft.com/download/2/3/2/232BAD47-9428-40EA-8281-9D6640574050/WindowsServer2003-KB899589-x86-ENU.exe
===== 899589 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB899589-x86-ENU.EXE'''

* http://download.microsoft.com/download/2/3/2/232BAD47-9428-40EA-8281-9D6640574050/WindowsServer2003-KB899589-x86-ENU.exe


-----

==== MS05-047 - Vulnerability in Plug and Play Could Allow Remote Code Execution and Local Elevation of Privilege (905749) ====
''Posted: 2005/10/11''

===== 905749 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB905749-x86-ENU.EXE'''

* http://download.microsoft.com/download/8/9/4/89449A45-8708-4320-B1D0-1E2580D15A86/Windows2000-KB905749-x86-ENU.EXE
===== 905749 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB905749-x86-ENU.EXE'''

* http://download.microsoft.com/download/E/6/7/E67F4D2A-8988-485D-A0BA-4916E75173A9/WindowsXP-KB905749-x86-ENU.exe
===== 905749 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB905749-x86-ENU.EXE'''

* http://download.microsoft.com/download/E/6/7/E67F4D2A-8988-485D-A0BA-4916E75173A9/WindowsXP-KB905749-x86-ENU.exe


-----

==== MS05-048 - Vulnerability in the Microsoft Collaboration Data Objects Could Allow Remote Code Execution (907245) ====
''Posted: 2005/10/11''

===== 906780 =====
'''Affected Products:'''

* Exchange 2000 Enterprise Server
** Exchange 2000 SP3
* Exchange 2000 Server
** Exchange 2000 SP3

'''Patch: Exchange2000-KB906780-x86-ENU.EXE'''

* http://download.microsoft.com/download/f/b/0/fb01f04c-7180-471e-a7a3-4dde41460d7a/Exchange2000-KB906780-x86-ENU.exe
===== 901017 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB901017-x86-ENU.EXE'''

* http://download.microsoft.com/download/2/2/3/22364E62-E9CD-4C5B-BF40-B742FAB0E02D/Windows2000-KB901017-x86-ENU.EXE
===== 901017 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB901017-x86-ENU.EXE'''

* http://download.microsoft.com/download/C/E/9/CE9314F0-4DFB-4D70-9111-A2DB25C381A7/WindowsXP-KB901017-x86-ENU.exe
===== 901017 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB901017-x86-ENU.EXE'''

* http://download.microsoft.com/download/C/E/9/CE9314F0-4DFB-4D70-9111-A2DB25C381A7/WindowsXP-KB901017-x86-ENU.exe
===== 901017 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB901017-x86-ENU.EXE'''

* http://download.microsoft.com/download/5/6/1/56107946-EAC3-4287-A93E-DCC7D6A822B8/WindowsServer2003-KB901017-x86-ENU.exe
===== 901017 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB901017-x86-ENU.EXE'''

* http://download.microsoft.com/download/5/6/1/56107946-EAC3-4287-A93E-DCC7D6A822B8/WindowsServer2003-KB901017-x86-ENU.exe


-----

==== MS05-049 - Vulnerabilities in Windows Shell Could Allow Remote Code Execution (900725) ====
''Posted: 2005/10/11''

===== 900725 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB900725-x86-ENU.EXE'''

* http://download.microsoft.com/download/6/1/F/61FD8CA9-13EF-4EFD-9340-7A1B7E723582/Windows2000-KB900725-x86-ENU.EXE
===== 900725 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB900725-x86-ENU.EXE'''

* http://download.microsoft.com/download/4/D/A/4DADB98C-354D-4729-BE91-A966ADBD2E04/WindowsXP-KB900725-x86-ENU.exe
===== 900725 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB900725-x86-ENU.EXE'''

* http://download.microsoft.com/download/4/D/A/4DADB98C-354D-4729-BE91-A966ADBD2E04/WindowsXP-KB900725-x86-ENU.exe
===== 900725 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB900725-x86-ENU.EXE'''

* http://download.microsoft.com/download/D/7/C/D7CC3A05-11CC-40B9-9857-F8C04ED8229B/WindowsServer2003-KB900725-x86-ENU.exe
===== 900725 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB900725-x86-ENU.EXE'''

* http://download.microsoft.com/download/D/7/C/D7CC3A05-11CC-40B9-9857-F8C04ED8229B/WindowsServer2003-KB900725-x86-ENU.exe


-----

==== MS05-050 - Vulnerability in DirectShow Could Allow Remote Code Execution (904706) ====
''Posted: 2005/10/11''

===== 904706 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: W2K-DirectX7-8-9'''

* NA
===== 904706 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WinXPsp1-DirectX81-9'''

* NA
===== 904706 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: W2003rtm-DirectX81-9'''

* NA
===== 904706 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB904706-v2-x86-ENU.EXE'''

* http://download.microsoft.com/download/4/8/2/482A8625-43D9-4CE4-A5C5-765941AD58B8/WindowsServer2003-KB904706-v2-x86-ENU.exe
===== 904706 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB904706-v2-x86-ENU.EXE'''

* http://download.microsoft.com/download/E/3/9/E398DE49-3012-446B-9EA5-36D0DFA366EF/WindowsXP-KB904706-v2-x86-ENU.exe


-----

==== MS05-051 - Vulnerabilities in MSDTC and COM+ Could Allow Remote Code Execution (902400) ====
''Posted: 2005/10/11''

===== 902400 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB902400-x86-ENU.EXE'''

* http://download.microsoft.com/download/5/5/7/55719C3D-84CB-4271-AC59-7879E7C0E5E6/Windows2000-KB902400-x86-ENU.EXE
===== 902400 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB902400-x86-ENU.EXE'''

* http://download.microsoft.com/download/4/C/D/4CD35721-3D29-4FC5-9FB0-F9A6A2BFEF41/WindowsXP-KB902400-x86-ENU.exe
===== 902400 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB902400-x86-ENU.EXE'''

* http://download.microsoft.com/download/4/C/D/4CD35721-3D29-4FC5-9FB0-F9A6A2BFEF41/WindowsXP-KB902400-x86-ENU.exe
===== 902400 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB902400-x86-ENU.EXE'''

* http://download.microsoft.com/download/D/0/3/D034E2C6-163D-42C7-A995-C9EF4ABC090B/WindowsServer2003-KB902400-x86-ENU.exe
===== 902400 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB902400-x86-ENU.EXE'''

* http://download.microsoft.com/download/D/0/3/D034E2C6-163D-42C7-A995-C9EF4ABC090B/WindowsServer2003-KB902400-x86-ENU.exe


-----

==== MS05-052 - Cumulative Security Update for Internet Explorer (896688) ====
''Posted: 2005/10/11''

===== 896688 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP4

'''Patch: IE5.01sp4-KB896688-Windows2000sp4-x86-ENU.EXE'''

* http://download.microsoft.com/download/b/a/8/ba8a09f1-c24f-4dbb-a3a6-04e84020923d/IE5.01sp4-KB896688-Windows2000sp4-x86-ENU.exe
===== 896688 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 SP1

'''Patch: IE6.0sp1-KB896688-SMS-Deploy-KB907416-x86-ENU.exe'''

* http://download.microsoft.com/download/7/7/d/77d220ab-2f2e-4768-adb1-1556227a4efd/IE6.0sp1-KB896688-SMS-Deploy-KB907416-x86-ENU.exe
===== 896688 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB896688-x86-ENU.EXE'''

* http://download.microsoft.com/download/6/f/d/6fdb5303-1ace-4ebb-8e8b-34ee5988adf4/WindowsServer2003-KB896688-x86-ENU.exe
===== 896688 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB896688-x86-ENU.EXE'''

* http://download.microsoft.com/download/6/f/d/6fdb5303-1ace-4ebb-8e8b-34ee5988adf4/WindowsServer2003-KB896688-x86-ENU.exe
===== 896688 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB896688-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/9/c/39c0e5fa-272a-4442-a31a-bf280f435aee/WindowsXP-KB896688-x86-ENU.exe


-----

==== MS05-053 - Vulnerabilities in Graphics Rendering Engine Could Allow Code Execution (896424) ====
''Posted: 2005/11/08''

===== 896424 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB896424-x86-ENU.EXE'''

* http://download.microsoft.com/download/A/7/1/A7119CB1-C7C8-4B80-B10A-499D8742D2EC/Windows2000-KB896424-x86-ENU.EXE
===== 896424 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB896424-x86-ENU.EXE'''

* http://download.microsoft.com/download/1/7/F/17F74FCB-5A29-492E-BAF5-503357AEAF2B/WindowsXP-KB896424-x86-ENU.exe
===== 896424 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB896424-x86-ENU.EXE'''

* http://download.microsoft.com/download/1/7/F/17F74FCB-5A29-492E-BAF5-503357AEAF2B/WindowsXP-KB896424-x86-ENU.exe
===== 896424 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB896424-x86-ENU.EXE'''

* http://download.microsoft.com/download/9/A/A/9AA267D0-1592-4BA8-8069-7FE62B55E004/WindowsServer2003-KB896424-x86-ENU.exe
===== 896424 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB896424-x86-ENU.EXE'''

* http://download.microsoft.com/download/9/A/A/9AA267D0-1592-4BA8-8069-7FE62B55E004/WindowsServer2003-KB896424-x86-ENU.exe


-----

==== MS05-054 - Cumulative Security Update for Internet Explorer (905915) ====
''Posted: 2005/12/13''

===== 905915 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP4

'''Patch: IE5.01sp4-KB905915-Windows2000sp4-x86-ENU.EXE'''

* http://download.microsoft.com/download/0/a/c/0ace56b3-ee56-4924-83c5-dc03f18308c9/IE5.01sp4-KB905915-Windows2000sp4-x86-ENU.exe
===== 905915 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 SP1

'''Patch: IE6.0sp1-KB905915-Windows-2000-XP-x86-ENU.EXE'''

* http://download.microsoft.com/download/0/6/2/0629bb7e-3817-4e03-91ec-ba6655c8f793/IE6.0sp1-KB905915-Windows-2000-XP-x86-ENU.exe
===== 905915 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB905915-x86-ENU.EXE'''

* http://download.microsoft.com/download/8/7/1/871274a4-22e5-4b31-88ed-0d5d15418b05/WindowsServer2003-KB905915-x86-ENU.exe
===== 905915 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB905915-x86-ENU.EXE'''

* http://download.microsoft.com/download/8/7/1/871274a4-22e5-4b31-88ed-0d5d15418b05/WindowsServer2003-KB905915-x86-ENU.exe
===== 905915 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB905915-x86-ENU.EXE'''

* http://download.microsoft.com/download/e/d/8/ed8854bf-522b-42e0-8f40-dc0335b7cf46/WindowsXP-KB905915-x86-ENU.exe


-----

==== MS05-055 - Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (908523) ====
''Posted: 2005/12/13''

===== 908523 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB908523-x86-ENU.EXE'''

* http://download.microsoft.com/download/F/4/7/F47496E7-95F2-4B05-A5CB-E11CCBA8F402/Windows2000-KB908523-x86-ENU.EXE


-----

==== MS06-001 - Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution (912919) ====
''Posted: 2006/01/05''

===== 912919 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB912919-x86-ENU.EXE'''

* http://download.microsoft.com/download/2/8/7/287925A9-AB55-4FA3-8601-1C3AF9DA654C/Windows2000-KB912919-x86-ENU.EXE
===== 912919 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB912919-x86-ENU.EXE'''

* http://download.microsoft.com/download/E/F/5/EF594826-FCA1-492E-9981-22E0F579E02E/WindowsXP-KB912919-x86-ENU.exe
===== 912919 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB912919-x86-ENU.EXE'''

* http://download.microsoft.com/download/E/F/5/EF594826-FCA1-492E-9981-22E0F579E02E/WindowsXP-KB912919-x86-ENU.exe
===== 912919 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB912919-x86-ENU.EXE'''

* http://download.microsoft.com/download/7/A/A/7AAC8C53-C339-4DF3-97C4-F4AD7C174FE8/WindowsServer2003-KB912919-x86-ENU.exe
===== 912919 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB912919-x86-ENU.EXE'''

* http://download.microsoft.com/download/7/A/A/7AAC8C53-C339-4DF3-97C4-F4AD7C174FE8/WindowsServer2003-KB912919-x86-ENU.exe


-----

==== MS06-002 - Vulnerability in Embedded Web Fonts Could Allow Remote Code Execution (908519) ====
''Posted: 2006/01/10''

===== 908519 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB908519-x86-ENU.EXE'''

* http://download.microsoft.com/download/4/2/6/426603e1-0d9c-4f70-90a3-716e51ca302d/Windows2000-KB908519-x86-ENU.EXE
===== 908519 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB908519-x86-ENU.EXE'''

* http://download.microsoft.com/download/c/d/4/cd485501-656e-4f23-a196-20a4106547b4/WindowsXP-KB908519-x86-ENU.exe
===== 908519 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB908519-x86-ENU.EXE'''

* http://download.microsoft.com/download/c/d/4/cd485501-656e-4f23-a196-20a4106547b4/WindowsXP-KB908519-x86-ENU.exe
===== 908519 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB908519-x86-ENU.EXE'''

* http://download.microsoft.com/download/2/2/2/222668df-5bc2-4523-b575-204ab5081f6e/WindowsServer2003-KB908519-x86-ENU.exe
===== 908519 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB908519-x86-ENU.EXE'''

* http://download.microsoft.com/download/2/2/2/222668df-5bc2-4523-b575-204ab5081f6e/WindowsServer2003-KB908519-x86-ENU.exe


-----

==== MS06-003 - Vulnerability in TNEF Decoding in Microsoft Outlook and Microsoft Exchange Could Allow Remote Code Execution (902412) ====
''Posted: 2006/01/10''

===== 894689 =====
'''Affected Products:'''

* Exchange Server 5.0
** Exchange Server 5.0 SP2

'''Patch: Exchange5.0-KB894689-x86-enu.EXE'''

* http://download.microsoft.com/download/4/7/6/47617871-4073-4b55-ae6a-527cb385668a/Exchange5.0-KB894689-x86-enu.EXE
===== 894689 =====
'''Affected Products:'''

* Exchange Server 5.5
** Exchange Server 5.5 SP4

'''Patch: Exchange5.5-KB894689-x86-enu.EXE'''

* http://download.microsoft.com/download/f/3/c/f3c02e27-c1f5-45d0-8872-6eab1c73e5a0/Exchange5.5-KB894689-x86-enu.EXE
===== 894689 =====
'''Affected Products:'''

* Exchange 2000 Enterprise Server
** Exchange 2000 SP3
* Exchange 2000 Server
** Exchange 2000 SP3

'''Patch: Exchange2000-KB894689-x86-ENU.EXE'''

* http://download.microsoft.com/download/4/c/4/4c4bb2a1-0aea-4c34-9a73-45c152c087e5/Exchange2000-KB894689-x86-ENU.exe


-----

==== MS06-004 - Cumulative Security Update for Internet Explorer (910620) ====
''Posted: 2006/02/14''

===== 910620 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP4

'''Patch: IE5.01sp4-KB910620-Windows2000sp4-x86-ENU.EXE'''

* http://download.microsoft.com/download/4/6/1/461b4e35-b6b1-43dd-9afe-745db5b440f6/IE5.01sp4-KB910620-Windows2000sp4-x86-ENU.exe


-----

==== MS06-005 - Vulnerability in Windows Media Player Could Allow Remote Code Execution (911565) ====
''Posted: 2006/02/14''

===== 911565 =====
'''Affected Products:'''

* Windows Media Player 7.1
** Windows Media Player 7.1 Gold

'''Patch: WindowsMedia7-KB911565-x86-ENU.EXE'''

* http://download.microsoft.com/download/1/0/b/10bba6e3-f7ee-4673-9da9-1184d5804bfb/WindowsMedia7-KB911565-x86-ENU.exe
===== 911565 =====
'''Affected Products:'''

* Windows Media Player for Windows XP
** Windows XP Service Pack 1

'''Patch: WindowsMedia8-KB911565-x86-ENU.EXE'''

* http://download.microsoft.com/download/e/2/b/e2bcd0c6-2633-4a42-a709-0e554927e0ae/WindowsMedia8-KB911565-x86-ENU.exe
===== 911565 =====
'''Affected Products:'''

* Windows Media Player 9 Series
** Windows Media Player 9 Series Gold

'''Patch: WindowsMedia9-KB911565-x86-ENU.EXE'''

* http://download.microsoft.com/download/e/e/c/eeca6f33-ddce-41f7-b2d1-ce2635369d29/WindowsMedia9-KB911565-x86-ENU.exe
===== 911565 =====
'''Affected Products:'''

* Windows Media Player 9 Series for Windows XP
** Windows XP Service Pack 2

'''Patch: WindowsMedia9-KB911565-x86-ENU.EXe'''

* http://download.microsoft.com/download/e/e/c/eeca6f33-ddce-41f7-b2d1-ce2635369d29/WindowsMedia9-KB911565-x86-ENU.exe
===== 911565 =====
'''Affected Products:'''

* Windows Media Player 9 Series for Windows Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsMedia9-KB911565-x86-ENU.Exe'''

* http://download.microsoft.com/download/e/e/c/eeca6f33-ddce-41f7-b2d1-ce2635369d29/WindowsMedia9-KB911565-x86-ENU.exe


-----

==== MS06-006 - Vulnerability in Windows Media Player Plugin Could Allow Remote Code Execution (911564) ====
''Posted: 2006/02/14''

===== 911564 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WindowsMedia-KB911564-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/1/5/31545397-c828-49c6-a30f-65799d411ce1/WindowsMedia-KB911564-x86-ENU.exe
===== 911564 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowsMedia-KB911564-x86-ENU.EXe'''

* http://download.microsoft.com/download/3/1/5/31545397-c828-49c6-a30f-65799d411ce1/WindowsMedia-KB911564-x86-ENU.exe
===== 911564 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindowsMedia-KB911564-x86-ENU.Exe'''

* http://download.microsoft.com/download/3/1/5/31545397-c828-49c6-a30f-65799d411ce1/WindowsMedia-KB911564-x86-ENU.exe
===== 911564 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsMedia-KB911564-x86-ENU.exe'''

* http://download.microsoft.com/download/3/1/5/31545397-c828-49c6-a30f-65799d411ce1/WindowsMedia-KB911564-x86-ENU.exe
===== 911564 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowsMedia-KB911564-x86-ENU.eXe'''

* http://download.microsoft.com/download/3/1/5/31545397-c828-49c6-a30f-65799d411ce1/WindowsMedia-KB911564-x86-ENU.exe


-----

==== MS06-007 - Vulnerability in TCP/IP Could Allow Denial of Service (913446) ====
''Posted: 2006/02/14''

===== 913446 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB913446-x86-ENU.EXE'''

* http://download.microsoft.com/download/1/a/a/1aa60d30-9cb8-4fc8-bb79-21e0420a76ed/WindowsXP-KB913446-x86-ENU.exe
===== 913446 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB913446-x86-ENU.EXE'''

* http://download.microsoft.com/download/1/a/a/1aa60d30-9cb8-4fc8-bb79-21e0420a76ed/WindowsXP-KB913446-x86-ENU.exe
===== 913446 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB913446-x86-ENU.EXE'''

* http://download.microsoft.com/download/d/6/f/d6f4eb82-1768-492d-8027-70ce15f4e200/WindowsServer2003-KB913446-x86-ENU.exe
===== 913446 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB913446-x86-ENU.EXE'''

* http://download.microsoft.com/download/d/6/f/d6f4eb82-1768-492d-8027-70ce15f4e200/WindowsServer2003-KB913446-x86-ENU.exe


-----

==== MS06-008 - Vulnerability in Web Client Service Could Allow Remote Code Execution (911927) ====
''Posted: 2006/02/14''

===== 911927 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB911927-x86-ENU.EXE'''

* http://download.microsoft.com/download/0/9/6/096b63e5-4f08-44e7-9152-01a602d5881b/WindowsXP-KB911927-x86-ENU.exe
===== 911927 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB911927-x86-ENU.EXE'''

* http://download.microsoft.com/download/0/9/6/096b63e5-4f08-44e7-9152-01a602d5881b/WindowsXP-KB911927-x86-ENU.exe
===== 911927 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB911927-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/6/1/361c8256-fac6-42c0-945f-083762736ef3/WindowsServer2003-KB911927-x86-ENU.exe
===== 911927 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB911927-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/6/1/361c8256-fac6-42c0-945f-083762736ef3/WindowsServer2003-KB911927-x86-ENU.exe


-----

==== MS06-009 - Vulnerability in the Korean Input Method Editor Could Allow Elevation of Privilege (901190) ====
''Posted: 2006/02/14''

===== 905645 =====
'''Affected Products:'''

* Office 2003
** Office 2003 SP1
** Office 2003 SP2

'''Patch: Office2003-SP1-SP2'''

* NA
===== 901190 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB901190-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/7/6/376001e0-a856-439f-8fc1-46501464a97b/WindowsXP-KB901190-x86-ENU.exe
===== 901190 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB901190-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/7/6/376001e0-a856-439f-8fc1-46501464a97b/WindowsXP-KB901190-x86-ENU.exe
===== 901190 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB901190-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/3/4/3340609f-8a82-4dd1-93c0-2784effea704/WindowsServer2003-KB901190-x86-ENU.exe
===== 901190 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB901190-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/3/4/3340609f-8a82-4dd1-93c0-2784effea704/WindowsServer2003-KB901190-x86-ENU.exe


-----

==== MS06-010 - Vulnerability in PowerPoint 2000 Could Allow Information Disclosure (889167) ====
''Posted: 2006/02/14''

===== 889167 =====
'''Affected Products:'''

* Office 2000
** Office 2000 Service Pack 3
* PowerPoint 2000
** Office 2000 Service Pack 3

'''Patch: Office-PowerPoint-2000-SP3'''

* NA


-----

==== MS06-011 - Permissive Windows Services DACLs Could Lead to Elevation of Privilege (914798) ====
''Posted: 2006/03/14''

===== 914798 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB914798-v2-x86-ENU.EXE'''

* http://download.microsoft.com/download/d/0/b/d0bc326e-101d-4eea-a79e-5d905360a4e6/WindowsXP-KB914798-v2-x86-ENU.exe
===== 914798 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB914798-x86-ENU.EXE'''

* http://download.microsoft.com/download/2/4/0/24084F4F-F139-48F4-82F9-0156BD32D1FD/WindowsServer2003-KB914798-x86-ENU.exe


-----

==== MS06-012 - Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (905413) ====
''Posted: 2006/03/14''



-----

==== MS06-013 - Cumulative Security Update for Internet Explorer (912812) ====
''Posted: 2006/04/11''

===== 912812 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 SP1

'''Patch: IE6.0sp1-KB912812-Windows-2000-XP-x86-ENU.exe'''

* http://download.microsoft.com/download/b/c/4/bc4a2a94-49b8-437f-90bd-399d5a4b932f/IE6.0sp1-KB912812-Windows-2000-XP-x86-ENU.exe
===== 912812 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP4

'''Patch: IE5.01sp4-KB912812-Windows2000sp4-x86-ENU.exe'''

* http://download.microsoft.com/download/c/3/1/c313500e-d84c-40fa-81c3-61f53687af48/IE5.01sp4-KB912812-Windows2000sp4-x86-ENU.exe
===== 912812 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB912812-x86-ENU.EXE'''

* http://download.microsoft.com/download/4/5/d/45d22419-f1b0-449b-ab96-11f7cf139145/WindowsXP-KB912812-x86-ENU.exe
===== 912812 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB912812-x86-ENU.EXE'''

* http://download.microsoft.com/download/9/0/4/90412226-36f2-4835-9740-592c39507f45/WindowsServer2003-KB912812-x86-ENU.exe
===== 912812 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB912812-x86-ENU.EXE'''

* http://download.microsoft.com/download/9/0/4/90412226-36f2-4835-9740-592c39507f45/WindowsServer2003-KB912812-x86-ENU.exe


-----

==== MS06-014 - Vulnerability in the Microsoft Data Access Components (MDAC) Function Could Allow Code Execution (911562) ====
''Posted: 2006/04/11''

===== 911562 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: Unsupported-W2Ksp4'''

* NA
===== 911562 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: Unsupported-WinXPsp1'''

* NA
===== 911562 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB911562-x86-ENU.EXE'''

* http://download.microsoft.com/download/c/f/b/cfb8825f-4515-4c9f-af56-ff8c4eeb5b3b/WindowsXP-KB911562-x86-ENU.exe
===== 911562 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB911562-x86-ENU.EXE'''

* http://download.microsoft.com/download/1/d/b/1dbd65f4-3e1c-480e-b6a9-d9b971b62da3/WindowsServer2003-KB911562-x86-ENU.exe
===== 911562 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB911562-x86-ENU.EXE'''

* http://download.microsoft.com/download/1/d/b/1dbd65f4-3e1c-480e-b6a9-d9b971b62da3/WindowsServer2003-KB911562-x86-ENU.exe


-----

==== MS06-015 - Vulnerability in Windows Explorer Could Lead to Remote Code Execution (908531) ====
''Posted: 2006/04/11''

===== 908531 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB908531-v2-x86-ENU.EXE'''

* http://download.microsoft.com/download/7/f/4/7f46246e-f633-42d9-8f7b-aa5536f1bcd5/Windows2000-KB908531-v2-x86-ENU.EXE
===== 908531 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB908531-v2-x86-ENU.exe'''

* http://download.microsoft.com/download/5/d/c/5dc567bf-cd78-46f2-a714-7c3d7f8c66a0/WindowsXP-KB908531-v2-x86-ENU.exe
===== 908531 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB908531-v2-x86-ENU.exe'''

* http://download.microsoft.com/download/5/d/c/5dc567bf-cd78-46f2-a714-7c3d7f8c66a0/WindowsXP-KB908531-v2-x86-ENU.exe
===== 908531 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB908531-v2-x86-ENU.exe'''

* http://download.microsoft.com/download/6/f/1/6f130581-3db7-4837-9174-c0c7169cf70a/WindowsServer2003-KB908531-v2-x86-ENU.exe
===== 908531 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB908531-v2-x86-ENU.exe'''

* http://download.microsoft.com/download/6/f/1/6f130581-3db7-4837-9174-c0c7169cf70a/WindowsServer2003-KB908531-v2-x86-ENU.exe


-----

==== MS06-016 - Cumulative Security Update for Outlook Express (911567) ====
''Posted: 2006/04/11''



-----

==== MS06-017 - Vulnerability In Microsoft Front Page Server Extensions Could Allow Cross Site Scripting (917627) ====
''Posted: 2006/04/11''



-----

==== MS06-018 - Vulnerability in Microsoft Distributed Transaction Coordinator Could Allow Denial of Service (913580) ====
''Posted: 2006/05/09''

===== 913580 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB913580-x86-ENU.EXE'''

* http://download.microsoft.com/download/F/E/3/FE3BBCED-6DA4-4A8D-B90E-260C2ADA9B6B/Windows2000-KB913580-x86-ENU.EXE
===== 913580 =====
'''Affected Products:'''

* Windows XP Professional
** Windows XP Service Pack 1
* Windows XP Home Edition
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB913580-x86-ENU.exe'''

* http://download.microsoft.com/download/9/6/E/96ED59FB-8182-4F51-8C5E-1D14D8ECA039/WindowsXP-KB913580-x86-ENU.exe
===== 913580 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB913580-x86-ENU.exe'''

* http://download.microsoft.com/download/9/6/E/96ED59FB-8182-4F51-8C5E-1D14D8ECA039/WindowsXP-KB913580-x86-ENU.exe
===== 913580 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB913580-x86-ENU.exe'''

* http://download.microsoft.com/download/1/5/D/15DA77BD-C27A-4ECF-BD3E-AD60AFDA6442/WindowsServer2003-KB913580-x86-ENU.exe


-----

==== MS06-019 - Vulnerability in Microsoft Exchange Could Allow Remote Code Execution (916803) ====
''Posted: 2006/05/09''

===== 916803 =====
'''Affected Products:'''

* Exchange 2000 Enterprise Server
** Exchange 2000 SP3
* Exchange 2000 Server
** Exchange 2000 SP3

'''Patch: Exchange2000-KB916803-x86-ENU.exe'''

* http://download.microsoft.com/download/2/1/d/21d4854f-85f5-42ed-a186-0b42fe59a273/Exchange2000-KB916803-x86-ENU.exe
===== 916803 =====
'''Affected Products:'''

* Exchange Server 2003
** Exchange Server 2003 SP1

'''Patch: ExchangE2003-KB916803-x86-ENU.exe'''

* http://download.microsoft.com/download/4/9/8/4983a832-3435-4400-b5e6-eef916f3b474/Exchange2003-KB916803-x86-ENU.exe
===== 916803 =====
'''Affected Products:'''

* Exchange Server 2003
** Exchange Server 2003 SP2

'''Patch: Exchange2003-KB916803-x86-ENU.exe'''

* http://download.microsoft.com/download/2/8/1/28172b83-4ca1-4530-996d-ca323d07cf7d/Exchange2003-KB916803-x86-ENU.exe


-----

==== MS06-020 - Vulnerabilities in Macromedia Flash Player from Adobe Could Allow Remote Code Execution (913433) ====
''Posted: 2006/05/09''



-----

==== MS06-021 - Cumulative Security Update for Internet Explorer (916281) ====
''Posted: 2006/06/13''

===== 916281 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP4

'''Patch: IE5.01sp4-KB916281-Windows2000sp4-x86-ENU.exe'''

* http://download.microsoft.com/download/0/c/8/0c803c40-0836-4de0-b6b3-dd5b66d1b80b/IE5.01sp4-KB916281-Windows2000sp4-x86-ENU.exe
===== 916281 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 SP1

'''Patch: IE6.0sp1-KB916281-Windows-2000-XP-x86-ENU.exe'''

* http://download.microsoft.com/download/1/7/d/17d0869c-863e-481d-9b56-98e3be9c0e6a/IE6.0sp1-KB916281-Windows-2000-XP-x86-ENU.exe
===== 916281 =====
'''Affected Products:'''

* Windows XP Professional
** Windows XP Service Pack 2
* Windows XP Home Edition
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB916281-x86-ENU.exe'''

* http://download.microsoft.com/download/1/f/a/1fac5f54-9c4e-475d-b978-130156194713/WindowsXP-KB916281-x86-ENU.exe
===== 916281 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB916281-x86-ENU.exe'''

* http://download.microsoft.com/download/3/6/6/36626f99-8eda-4afe-83b1-71fd987798b8/WindowsServer2003-KB916281-x86-ENU.exe
===== 916281 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB916281-x86-ENU.exe'''

* http://download.microsoft.com/download/3/6/6/36626f99-8eda-4afe-83b1-71fd987798b8/WindowsServer2003-KB916281-x86-ENU.exe


-----

==== MS06-022 - Vulnerability in ART Image Rendering Could Allow Remote Code Execution (918439) ====
''Posted: 2006/06/13''

===== 918439 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP4

'''Patch: IE5.01sp4-KB918439-Windows2000sp4-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/3/d/33db65ab-ef71-49ec-965a-9910382af4be/IE5.01sp4-KB918439-Windows2000sp4-x86-ENU.exe
===== 918439 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 SP1

'''Patch: IE6.0sp1-KB918439-Windows-2000-XP-x86-ENU.EXE'''

* http://download.microsoft.com/download/e/c/f/ecf2d7ac-c658-4d7c-a7c0-a62152774664/IE6.0sp1-KB918439-Windows-2000-XP-x86-ENU.exe
===== 918439 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB918439-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/5/6/35603869-9f86-4cf8-9db1-bc9a06c32f63/WindowsXP-KB918439-x86-ENU.exe
===== 918439 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB918439-x86-ENU.EXE'''

* http://download.microsoft.com/download/c/8/c/c8cc96c9-131a-46b5-8544-d7d014efa9db/WindowsServer2003-KB918439-x86-ENU.exe
===== 918439 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB918439-x86-ENU.EXE'''

* http://download.microsoft.com/download/c/8/c/c8cc96c9-131a-46b5-8544-d7d014efa9db/WindowsServer2003-KB918439-x86-ENU.exe


-----

==== MS06-023 - Vulnerability in Microsoft JScript Could Allow Remote Code Execution (917344) ====
''Posted: 2006/06/13''



-----

==== MS06-024 - Vulnerability in Windows Media Player Could Allow Remote Code Execution (917734) ====
''Posted: 2006/06/13''

===== 917734 =====
'''Affected Products:'''

* Windows Media Player 7.1
** Windows Media Player 7.1 Gold

'''Patch: WindowsMedia7-KB917734-x86-ENU.exe'''

* http://download.microsoft.com/download/b/b/9/bb9fdc21-6834-4d11-9794-b29a1898b5ba/WindowsMedia7-KB917734-x86-ENU.exe
===== 917734 =====
'''Affected Products:'''

* Windows Media Player for Windows XP
** Windows XP Service Pack 1

'''Patch: WindowsMedia8-KB917734-x86-ENU.exe'''

* http://download.microsoft.com/download/7/5/3/753fddd2-44d6-4b1c-b905-767a781689ab/WindowsMedia8-KB917734-x86-ENU.exe
===== 917734 =====
'''Affected Products:'''

* Windows Media Player 9 Series
** Windows Media Player 9 Series Gold

'''Patch: WindowsMedia9-KB917734-x86-ENU.EXE'''

* http://download.microsoft.com/download/b/8/e/b8e2b561-79bb-4c27-bb23-9333c14a73eb/WindowsMedia9-KB917734-x86-ENU.exe
===== 917734 =====
'''Affected Products:'''

* Windows Media Player 9 Series for Windows XP
** Windows XP Service Pack 2

'''Patch: WindowsMedia9-KB917734-x86-ENU.EXe'''

* http://download.microsoft.com/download/b/8/e/b8e2b561-79bb-4c27-bb23-9333c14a73eb/WindowsMedia9-KB917734-x86-ENU.exe
===== 917734 =====
'''Affected Products:'''

* Windows Media Player 9 Series for Windows Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsMedia9-KB917734-x86-ENU.exe'''

* http://download.microsoft.com/download/b/8/e/b8e2b561-79bb-4c27-bb23-9333c14a73eb/WindowsMedia9-KB917734-x86-ENU.exe


-----

==== MS06-025 - Vulnerability in Routing and Remote Access Could Allow Remote Code Execution (911280) ====
''Posted: 2006/06/13''

===== 911280 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB911280-v2-x86-ENU.EXE'''

* http://download.microsoft.com/download/4/1/0/410acd05-29da-4755-9c93-24fb255abde6/Windows2000-KB911280-v2-x86-ENU.EXE
===== 911280 =====
'''Affected Products:'''

* Windows XP Professional
** Windows XP Service Pack 1
* Windows XP Home Edition
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB911280-v2-x86-ENU.exe'''

* http://download.microsoft.com/download/2/7/a/27a678b5-d598-4f54-8cef-282dc63afa04/WindowsXP-KB911280-v2-x86-ENU.exe
===== 911280 =====
'''Affected Products:'''

* Windows XP Professional
** Windows XP Service Pack 2
* Windows XP Home Edition
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB911280-v2-x86-ENU.exe'''

* http://download.microsoft.com/download/2/7/a/27a678b5-d598-4f54-8cef-282dc63afa04/WindowsXP-KB911280-v2-x86-ENU.exe
===== 911280 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB911280-v2-x86-ENU.exe'''

* http://download.microsoft.com/download/1/e/2/1e2e9fa7-2dc8-4fea-b9b9-8708ecd2bf4a/WindowsServer2003-KB911280-v2-x86-ENU.exe
===== 911280 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB911280-v2-x86-ENU.exe'''

* http://download.microsoft.com/download/1/e/2/1e2e9fa7-2dc8-4fea-b9b9-8708ecd2bf4a/WindowsServer2003-KB911280-v2-x86-ENU.exe


-----

==== MS06-026 - Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution (918547) ====
''Posted: 2006/06/13''



-----

==== MS06-027 - Vulnerability in Microsoft Word Could Allow Remote Code Execution (917336) ====
''Posted: 2006/06/13''



-----

==== MS06-028 - Vulnerability in Microsoft PowerPoint Could Allow Remote Code Execution (916768) ====
''Posted: 2006/06/13''



-----

==== MS06-029 - Vulnerability in Microsoft Exchange Server Running Outlook Web Access Could Allow Code Execution (912442) ====
''Posted: 2006/06/13''

===== 912442 =====
'''Affected Products:'''

* Exchange 2000 Enterprise Server
** Exchange 2000 SP3
* Exchange 2000 Server
** Exchange 2000 SP3

'''Patch: Exchange2000-KB912442-x86-ENU.exe'''

* http://download.microsoft.com/download/f/c/a/fcaa7b0a-adb2-495d-81e6-1650667ccd69/Exchange2000-KB912442-x86-ENU.exe
===== 912442 =====
'''Affected Products:'''

* Exchange Server 2003
** Exchange Server 2003 SP1

'''Patch: ExchangE2003-KB912442-x86-ENU.exe'''

* http://download.microsoft.com/download/4/2/0/4200df24-586c-4eec-bb67-5aa651a505db/Exchange2003-KB912442-x86-ENU.exe
===== 912442 =====
'''Affected Products:'''

* Exchange Server 2003
** Exchange Server 2003 SP2

'''Patch: ExchanGE2003-KB912442-x86-ENU.exe'''

* http://download.microsoft.com/download/1/5/d/15de3d07-9a0e-48a1-8a2a-a7fde5002b2a/Exchange2003-KB912442-x86-ENU.exe


-----

==== MS06-030 - Vulnerability in Server Message Block Could Allow Elevation of Privilege (914389) ====
''Posted: 2006/06/13''

===== 914389 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB914389-x86-ENU.EXE'''

* http://download.microsoft.com/download/b/9/1/b9138093-8b79-424b-a1b4-a22357711484/Windows2000-KB914389-x86-ENU.EXE
===== 914389 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB914389-x86-ENU.exe'''

* http://download.microsoft.com/download/d/d/3/dd3348ec-0dbf-4639-b9de-d13e62aa5542/WindowsXP-KB914389-x86-ENU.exe
===== 914389 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB914389-x86-ENU.exe'''

* http://download.microsoft.com/download/d/d/3/dd3348ec-0dbf-4639-b9de-d13e62aa5542/WindowsXP-KB914389-x86-ENU.exe
===== 914389 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB914389-x86-ENU.exe'''

* http://download.microsoft.com/download/0/e/f/0efc0cd9-b165-4874-b1dd-a16d45139619/WindowsServer2003-KB914389-x86-ENU.exe
===== 914389 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB914389-x86-ENU.exe'''

* http://download.microsoft.com/download/0/e/f/0efc0cd9-b165-4874-b1dd-a16d45139619/WindowsServer2003-KB914389-x86-ENU.exe


-----

==== MS06-031 - Vulnerability in RPC Mutual Authentication Could Allow Spoofing (917736) ====
''Posted: 2006/06/13''

===== 917736 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: Windows2000-KB917736-x86-ENU.EXE'''

* http://download.microsoft.com/download/d/5/5/d5515a42-6bdd-4859-a0d2-423d760ef3a6/Windows2000-KB917736-x86-ENU.EXE


-----

==== MS06-032 - Vulnerability in TCP/IP Could Allow Remote Code Execution (917953) ====
''Posted: 2006/06/13''

===== 917953 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB917953-x86-ENU.EXE'''

* http://download.microsoft.com/download/7/4/9/749e48cf-3cef-4261-9d0f-138b75ab8fb6/Windows2000-KB917953-x86-ENU.EXE
===== 917953 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB917953-x86-ENU.exe'''

* http://download.microsoft.com/download/0/0/7/007eec69-c7a8-4503-b46b-50996c16fc87/WindowsXP-KB917953-x86-ENU.exe
===== 917953 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB917953-x86-ENU.exe'''

* http://download.microsoft.com/download/0/0/7/007eec69-c7a8-4503-b46b-50996c16fc87/WindowsXP-KB917953-x86-ENU.exe
===== 917953 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB917953-x86-ENU.exe'''

* http://download.microsoft.com/download/4/a/c/4acfbb76-d3a0-4094-b92e-41ff2bc57fa0/WindowsServer2003-KB917953-x86-ENU.exe
===== 917953 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB917953-x86-ENU.exe'''

* http://download.microsoft.com/download/4/a/c/4acfbb76-d3a0-4094-b92e-41ff2bc57fa0/WindowsServer2003-KB917953-x86-ENU.exe


-----

==== MS06-033 - Vulnerability in ASP.NET Could Allow Information Disclosure (917283) ====
''Posted: 2006/07/11''



-----

==== MS06-034 - Vulnerability in Microsoft Internet Information Services using Active Server Pages Could Allow Remote Code Execution (917537) ====
''Posted: 2006/07/11''

===== 917537 =====
'''Affected Products:'''

* Internet Information Services 5.0
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB917537-x86-ENU.EXE'''

* http://download.microsoft.com/download/0/4/8/0488144f-dc64-4acb-94bc-298a23fe1bc5/Windows2000-KB917537-x86-ENU.EXE
===== 917537 =====
'''Affected Products:'''

* Internet Information Services 5.1
** Windows XP Service Pack 1

'''Patch: WindowsXP-KB917537-x86-ENU.exe'''

* http://download.microsoft.com/download/a/9/f/a9f7ef10-6b38-40ba-8256-42ce8e9308aa/WindowsXP-KB917537-x86-ENU.exe
===== 917537 =====
'''Affected Products:'''

* Internet Information Services 5.1
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB917537-x86-ENU.exe'''

* http://download.microsoft.com/download/a/9/f/a9f7ef10-6b38-40ba-8256-42ce8e9308aa/WindowsXP-KB917537-x86-ENU.exe
===== 917537 =====
'''Affected Products:'''

* Internet Information Services 6.0
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB917537-x86-ENU.exe'''

* http://download.microsoft.com/download/6/6/3/663dce4a-319f-4047-a2f6-ca1f3f7d322b/WindowsServer2003-KB917537-x86-ENU.exe
===== 917537 =====
'''Affected Products:'''

* Internet Information Services 6.0
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB917537-x86-ENU.exe'''

* http://download.microsoft.com/download/6/6/3/663dce4a-319f-4047-a2f6-ca1f3f7d322b/WindowsServer2003-KB917537-x86-ENU.exe


-----

==== MS06-035 - Vulnerability in Server Service Could Allow Remote Code Execution (917159) ====
''Posted: 2006/07/11''

===== 917159 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB917159-x86-ENU.EXE'''

* http://download.microsoft.com/download/f/3/e/f3eb8641-34cf-4ac6-b603-89c13c2472bc/Windows2000-KB917159-x86-ENU.EXE
===== 917159 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB917159-x86-ENU.exe'''

* http://download.microsoft.com/download/0/c/5/0c5b050f-9852-4cf9-b064-5b895133834f/WindowsXP-KB917159-x86-ENU.exe
===== 917159 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB917159-x86-ENU.exe'''

* http://download.microsoft.com/download/0/c/5/0c5b050f-9852-4cf9-b064-5b895133834f/WindowsXP-KB917159-x86-ENU.exe
===== 917159 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB917159-x86-ENU.exe'''

* http://download.microsoft.com/download/e/f/e/efef9f44-94fd-4659-8b95-db20ca3378d9/WindowsServer2003-KB917159-x86-ENU.exe
===== 917159 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB917159-x86-ENU.exe'''

* http://download.microsoft.com/download/e/f/e/efef9f44-94fd-4659-8b95-db20ca3378d9/WindowsServer2003-KB917159-x86-ENU.exe


-----

==== MS06-036 - Vulnerability in DHCP Client Service Could Allow Remote Code Execution (914388) ====
''Posted: 2006/07/11''

===== 914388 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB914388-x86-ENU.EXE'''

* http://download.microsoft.com/download/c/5/c/c5c7e8a7-9ad1-4cb8-9fbf-6eb96af1c390/Windows2000-KB914388-x86-ENU.EXE
===== 914388 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB914388-x86-ENU.exe'''

* http://download.microsoft.com/download/a/d/5/ad51c62d-3cc9-4e7a-8603-2909a8cce99d/WindowsXP-KB914388-x86-ENU.exe
===== 914388 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB914388-x86-ENU.exe'''

* http://download.microsoft.com/download/a/d/5/ad51c62d-3cc9-4e7a-8603-2909a8cce99d/WindowsXP-KB914388-x86-ENU.exe
===== 914388 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB914388-x86-ENU.exe'''

* http://download.microsoft.com/download/f/9/4/f94ccadd-6724-4069-bf19-2a40f466374a/WindowsServer2003-KB914388-x86-ENU.exe
===== 914388 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB914388-x86-ENU.exe'''

* http://download.microsoft.com/download/f/9/4/f94ccadd-6724-4069-bf19-2a40f466374a/WindowsServer2003-KB914388-x86-ENU.exe


-----

==== MS06-037 - Vulnerability in Microsoft Excel Could Allow Remote Code Execution (917285) ====
''Posted: 2006/07/11''



-----

==== MS06-038 - Vulnerability in Microsoft Office Could Allow Remote Code Execution (917284) ====
''Posted: 2006/07/11''



-----

==== MS06-039 - Vulnerabilities in Microsoft Office Filters Could Allow Remote Code Execution (915384) ====
''Posted: 2006/07/11''



-----

==== MS06-040 - Vulnerability in Server Service Could Allow Remote Code Execution (921883) ====
''Posted: 2006/08/08''

===== 921883 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB921883-x86-ENU.EXE'''

* http://download.microsoft.com/download/9/0/b/90b8dbba-09c1-4b27-b0c4-0cc13706823a/Windows2000-KB921883-x86-ENU.EXE
===== 921883 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB921883-x86-ENU.EXE'''

* http://download.microsoft.com/download/c/2/b/c2b41862-1113-4e40-a81a-d6971733e361/WindowsXP-KB921883-x86-ENU.exe
===== 921883 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB921883-x86-ENU.EXE'''

* http://download.microsoft.com/download/c/2/b/c2b41862-1113-4e40-a81a-d6971733e361/WindowsXP-KB921883-x86-ENU.exe
===== 921883 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB921883-x86-ENU.EXE'''

* http://download.microsoft.com/download/6/e/e/6ee2a18d-b3a7-457a-af39-fb687fd6aa91/WindowsServer2003-KB921883-x86-ENU.exe
===== 921883 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB921883-x86-ENU.EXE'''

* http://download.microsoft.com/download/6/e/e/6ee2a18d-b3a7-457a-af39-fb687fd6aa91/WindowsServer2003-KB921883-x86-ENU.exe


-----

==== MS06-041 - Vulnerability in DNS Resolution Could Allow Remote Code Execution (920683) ====
''Posted: 2006/08/08''

===== 920683 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB920683-x86-ENU.EXE'''

* http://download.microsoft.com/download/b/4/7/b472d553-f4d1-42a5-baf9-d58bd713e492/Windows2000-KB920683-x86-ENU.EXE
===== 920683 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB920683-x86-ENU.EXE'''

* http://download.microsoft.com/download/5/1/a/51ad2a54-4439-4e9a-8305-11b1fd640298/WindowsXP-KB920683-x86-ENU.exe
===== 920683 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB920683-x86-ENU.EXE'''

* http://download.microsoft.com/download/5/1/a/51ad2a54-4439-4e9a-8305-11b1fd640298/WindowsXP-KB920683-x86-ENU.exe
===== 920683 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB920683-x86-ENU.EXE'''

* http://download.microsoft.com/download/5/b/3/5b3624f3-6cb0-4a29-9e2a-48a9d6b7531f/WindowsServer2003-KB920683-x86-ENU.exe
===== 920683 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB920683-x86-ENU.EXE'''

* http://download.microsoft.com/download/5/b/3/5b3624f3-6cb0-4a29-9e2a-48a9d6b7531f/WindowsServer2003-KB920683-x86-ENU.exe


-----

==== MS06-042 - Cumulative Security Update for Internet Explorer (918899) ====
''Posted: 2006/08/08''

===== 918899 =====
'''Affected Products:'''

* Internet Explorer 5.01
** Internet Explorer 5.01 SP4

'''Patch: IE5.01sp4-KB918899-Windows2000sp4-x86-ENU.EXE'''

* http://download.microsoft.com/download/b/4/f/b4ff4834-f49e-4d8e-a947-1fd3fe5ed7e6/IE5.01sp4-KB918899-Windows2000sp4-x86-ENU.exe
===== 918899 =====
'''Affected Products:'''

* Internet Explorer 6
** Internet Explorer 6 SP1

'''Patch: IE6.0sp1-KB918899-Windows-2000-XP-x86-ENU.EXE'''

* http://download.microsoft.com/download/1/3/9/1390a995-af9c-4837-b1a6-4e1dd480dc58/IE6.0sp1-KB918899-Windows-2000-XP-x86-ENU.exe
===== 918899 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB918899-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/4/d/34dab75c-44c5-41b1-9c82-5465a67d7ab8/WindowsXP-KB918899-x86-ENU.exe
===== 918899 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB918899-x86-ENU.EXE'''

* http://download.microsoft.com/download/e/7/6/e7609513-f591-45e2-a68b-1c8c8b6dd125/WindowsServer2003-KB918899-x86-ENU.exe
===== 918899 =====
'''Affected Products:'''

* Internet Explorer 6.0 for Windows Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB918899-x86-ENU.EXE'''

* http://download.microsoft.com/download/e/7/6/e7609513-f591-45e2-a68b-1c8c8b6dd125/WindowsServer2003-KB918899-x86-ENU.exe


-----

==== MS06-043 - Vulnerability in Microsoft Windows Could Allow Remote Code Execution (920214) ====
''Posted: 2006/08/08''



-----

==== MS06-044 - Vulnerability in Management Console Could Allow Remote Code Execution (917008) ====
''Posted: 2006/08/08''

===== 917008 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB917008-x86-ENU.EXE'''

* http://download.microsoft.com/download/d/1/5/d1555c27-be62-4a61-946d-5d2b70a52211/Windows2000-KB917008-x86-ENU.EXE


-----

==== MS06-045 - Vulnerability in Windows Explorer Could Allow Remote Code Execution (921398) ====
''Posted: 2006/08/08''

===== 921398 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB921398-x86-ENU.EXE'''

* http://download.microsoft.com/download/2/3/6/236323d3-fd81-43a4-a42f-31fe74705c55/Windows2000-KB921398-x86-ENU.EXE
===== 921398 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB921398-x86-ENU.EXE'''

* http://download.microsoft.com/download/9/4/7/947f67c2-7d13-4b53-b0d3-efd5b4d8059f/WindowsXP-KB921398-x86-ENU.exe
===== 921398 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB921398-x86-ENU.EXE'''

* http://download.microsoft.com/download/9/4/7/947f67c2-7d13-4b53-b0d3-efd5b4d8059f/WindowsXP-KB921398-x86-ENU.exe
===== 921398 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB921398-x86-ENU.EXE'''

* http://download.microsoft.com/download/6/b/b/6bbdada7-f537-48de-b8c1-9bfee7416fc4/WindowsServer2003-KB921398-x86-ENU.exe
===== 921398 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB921398-x86-ENU.EXE'''

* http://download.microsoft.com/download/6/b/b/6bbdada7-f537-48de-b8c1-9bfee7416fc4/WindowsServer2003-KB921398-x86-ENU.exe


-----

==== MS06-046 - Vulnerability in HTML Help Could Allow Remote Code Execution (922616) ====
''Posted: 2006/08/08''

===== 922616 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB922616-x86-ENU.EXE'''

* http://download.microsoft.com/download/0/b/5/0b544759-bafd-4756-95be-9192db941b19/Windows2000-KB922616-x86-ENU.EXE
===== 922616 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB922616-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/2/7/327df13f-17e8-4a47-af39-eb12c29f97c5/WindowsXP-KB922616-x86-ENU.exe
===== 922616 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB922616-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/2/7/327df13f-17e8-4a47-af39-eb12c29f97c5/WindowsXP-KB922616-x86-ENU.exe
===== 922616 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB922616-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/6/2/36260000-88b0-404b-8cf4-f6f979f1b2b4/WindowsServer2003-KB922616-x86-ENU.exe
===== 922616 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB922616-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/6/2/36260000-88b0-404b-8cf4-f6f979f1b2b4/WindowsServer2003-KB922616-x86-ENU.exe


-----

==== MS06-047 - Vulnerability in Microsoft Visual Basic for Applications Could Allow Remote Code Execution (921645) ====
''Posted: 2006/08/08''



-----

==== MS06-048 - Vulnerability in Microsoft Office Could Allow Remote Code Execution (922968) ====
''Posted: 2006/08/01''



-----

==== MS06-049 - Vulnerability in Windows Kernel Could Result in Elevation of Privilege (920958) ====
''Posted: 2006/08/08''

===== 920958 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB920958-x86-ENU.EXE'''

* http://download.microsoft.com/download/6/1/9/6193a60d-6721-4428-829c-4a32e27e6dab/Windows2000-KB920958-x86-ENU.EXE


-----

==== MS06-050 - Vulnerability in Microsoft Windows Hyperlink Object Library Could Allow Remote Code Execution (920670) ====
''Posted: 2006/08/08''

===== 920670 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB920670-x86-ENU.EXE'''

* http://download.microsoft.com/download/2/1/2/212fd127-6a0b-4a52-a0ae-c005b752c90f/Windows2000-KB920670-x86-ENU.EXE
===== 920670 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB920670-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/2/0/32020229-01a6-459a-bb5c-38a853340620/WindowsXP-KB920670-x86-ENU.exe
===== 920670 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB920670-x86-ENU.EXE'''

* http://download.microsoft.com/download/3/2/0/32020229-01a6-459a-bb5c-38a853340620/WindowsXP-KB920670-x86-ENU.exe
===== 920670 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB920670-x86-ENU.EXE'''

* http://download.microsoft.com/download/5/0/5/505e7f20-0b36-4973-a9f3-07af44400348/WindowsServer2003-KB920670-x86-ENU.exe
===== 920670 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB920670-x86-ENU.EXE'''

* http://download.microsoft.com/download/5/0/5/505e7f20-0b36-4973-a9f3-07af44400348/WindowsServer2003-KB920670-x86-ENU.exe


-----

==== MS06-051 - Vulnerability in Windows Kernel Could Result in Remote Code Execution (917422) ====
''Posted: 2006/08/08''

===== 917422 =====
'''Affected Products:'''

* Windows 2000 Advanced Server
** Windows 2000 Service Pack 4
* Windows 2000 Datacenter Server
** Windows 2000 Service Pack 4
* Windows 2000 Professional
** Windows 2000 Service Pack 4
* Windows 2000 Server
** Windows 2000 Service Pack 4

'''Patch: WinDOWS2000-KB917422-x86-ENU.EXE'''

* http://download.microsoft.com/download/f/c/6/fc685667-9d27-4e6a-82af-2772e69bd5c6/Windows2000-KB917422-x86-ENU.EXE
===== 917422 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 1
* Windows XP Professional
** Windows XP Service Pack 1

'''Patch: WindowSXP-KB917422-x86-ENU.EXE'''

* http://download.microsoft.com/download/9/7/0/9701897a-9321-4989-a521-3f8b48deaaa4/WindowsXP-KB917422-x86-ENU.exe
===== 917422 =====
'''Affected Products:'''

* Windows XP Home Edition
** Windows XP Service Pack 2
* Windows XP Professional
** Windows XP Service Pack 2

'''Patch: WindoWSXP-KB917422-x86-ENU.EXE'''

* http://download.microsoft.com/download/9/7/0/9701897a-9321-4989-a521-3f8b48deaaa4/WindowsXP-KB917422-x86-ENU.exe
===== 917422 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Gold
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Gold
* Windows Server 2003, Standard Edition
** Windows Server 2003 Gold
* Windows Server 2003, Web Edition
** Windows Server 2003 Gold
* Windows Small Business Server 2003
** Windows Server 2003 Gold

'''Patch: WindowsServer2003-KB917422-x86-ENU.EXE'''

* http://download.microsoft.com/download/0/0/5/0055769c-28e5-403c-9a23-d754a41575c3/WindowsServer2003-KB917422-x86-ENU.exe
===== 917422 =====
'''Affected Products:'''

* Windows Server 2003, Datacenter Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Enterprise Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Standard Edition
** Windows Server 2003 Service Pack 1
* Windows Server 2003, Web Edition
** Windows Server 2003 Service Pack 1
* Windows Small Business Server 2003
** Windows Server 2003 Service Pack 1

'''Patch: WindowSServer2003-KB917422-x86-ENU.EXE'''

* http://download.microsoft.com/download/0/0/5/0055769c-28e5-403c-9a23-d754a41575c3/WindowsServer2003-KB917422-x86-ENU.exe


-----