Mssecure - 2002-11-22 (JPN)

Source: stksecure.exe

Data Updated: 11/22/2002

Data Version: 1.0.1.427

MSBA/Tool Version: 1.0 3.32

---

MS98-001 - Disabling Creation of Local Groups on a Domain by Non-Administrative Users

Posted: 1998/06/01

JP169556

Affected Products:

• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: CREATALS_x86.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/reskit/nt40/i386/CREATALS_x86.exe

---

MS98-002 - Error Message Vulnerability Against Secured Internet Servers

Posted: 1998/06/26

JP148427

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 3
• Internet Information Server 3.0
  • Windows NT4 Service Pack 3
• Exchange Server 5.5
  • Exchange Server 5.5 Gold
  • Exchange Server 5.5 SP1

Patch: ssl-fixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP3/ssl-fix/

---

MS98-003 - File Access Issue with Windows NT Internet Information Server

Posted: 1998/07/02

JP188806

Affected Products:

• Internet Information Server 3.0
  • Windows NT4 Service Pack 3

Patch: iis3fixi.exe

• ftp://ftp.microsoft.com/bussys/IIS/iis-public/fixes/usa/security/

JP188806

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 3
• Personal Web Server 4.0
  • Windows NT4 Service Pack 3

Patch: iis4fixi.exe

• ftp://ftp.microsoft.com/bussys/IIS/iis-public/fixes/usa/security/

---

MS98-004 - Unauthorized ODBC Data Access with RDS and IIS

Posted: 1998/07/14

JP184375

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Internet Information Server 3.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Q184375

• http://support.microsoft.com/support/kb/articles/q184/3/75.asp

---

MS98-005 - Unwanted Data Issue with Office 98 for the Macintosh

Posted: 1998/07/17

Affected Products:

• Office 98 for Macintosh
  • Office 98 for Macintosh Gold

Patch: 98-005

• http://www.microsoft.com/technet/security/bulletin/ms98-005.asp

---

MS98-006 - Potential Denial-of-Service in IIS FTP Server due to Passive Connections

Posted: 1998/07/23

JP189262

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 3

Patch: ftpfix4i.exe

• ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/iis4-ftpfix/ftpfix4i.exe

JP189262

Affected Products:

• Internet Information Server 3.0
  • Windows NT4 Service Pack 3

Patch: ftpfix3i.exe

• ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/ftp-fix/ftpfix3i.exe

---

MS98-007 - Potential SMTP and NNTP Denial-of-Service Vulnerabilities

Posted: 1998/07/24

Q188369

Affected Products:

• Exchange Server 5.0
  • Exchange Server 5.0 SP1
  • Exchange Server 5.0 SP2

Patch: psp2stri.exe

• ftp://ftp.microsoft.com/bussys/exchange/exchange-public/fixes/Eng/Exchg5.0/Post-SP2-STORE/

Q188341

Affected Products:

• Exchange Server 5.0
  • Exchange Server 5.0 SP1
  • Exchange Server 5.0 SP2

Patch: psp2imsi.exe

• ftp://ftp.microsoft.com/bussys/exchange/exchange-public/fixes/Eng/Exchg5.0/Post-SP2-IMS/

Q188341

Affected Products:

• Exchange Server 5.5
  • Exchange Server 5.5 Gold

Patch: MS98-007

• http://www.microsoft.com/technet/security/bulletin/ms98-007.asp

---

MS98-008 - Long file name Security Issue affecting Microsoft Outlook 98 and Microsoft Outlook Express 4.x

Posted: 1998/07/27

Affected Products:

• Outlook 98
  • Outlook 98 Gold

Patch: outptch2.exe

• http://officeupdate.microsoft.com/downloadDetails/outptch2.htm

Affected Products:

• Outlook Express 4.01
  • Internet Explorer 4.01 SP1
  • Internet Explorer 4.01 Gold

Patch: oelong

• http://www.microsoft.com/windows/ie/security/oelong.asp

---

MS98-009 - Windows NT Privilege Elevation Attack

Posted: 1998/07/27

JP190288

Affected Products:

• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 3

Patch: privfixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postSP3/priv-fix/privfixi.exe

---

MS98-010 - Information on the Back Orifice Program

Posted: 1998/08/04

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: MS98-010

• http://www.microsoft.com/technet/security/bulletin/ms98-010.asp

---

MS98-011 - Window.External JScript Vulnerability in Microsoft Internet Explorer 4.0

Posted: 1998/08/17

JP191200

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 Gold
  • Internet Explorer 4.01 SP1
• Internet Explorer 4.0
  • Internet Explorer 4.0 Gold

Patch: jscript.asp

• http://www.microsoft.com/windows/ie/security/jscript.asp

---

MS98-013 - Internet Explorer Cross Frame Navigate Vulnerability

Posted: 1998/09/04

JP168485

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 Gold
  • Internet Explorer 4.01 SP1
• Internet Explorer 4.0
  • Internet Explorer 4.0 Gold

Patch: xframe.asp

• http://www.microsoft.com/windows/ie/security/xframe.asp

---

MS98-015 - Untrusted Scripted Paste Issue in Microsoft Internet Explorer 4.01

Posted: 1998/10/16

Q169245

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 Gold
  • Internet Explorer 4.01 SP1

Patch: paste.asp

• http://www.microsoft.com/windows/ie/security/paste.asp

---

MS98-016 - Dotless IP Address Issue in Microsoft Internet Explorer 4

Posted: 1998/10/23

Q168617

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP1

Patch: dotless.asp

• http://www.microsoft.com/windows/ie/security/dotless.asp

---

MS98-019 - IIS GET Vulnerability

Posted: 1998/12/21

JP192296

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4

Patch: infget4i.exe

• ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/Infget-fix/infget4i.exe

JP192296

Affected Products:

• Internet Information Server 3.0
  • Windows NT4 Service Pack 4

Patch: infget3i.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP4/archive/Infget-fix/

---

MS98-018 - Excel CALL Vulnerability

Posted: 1998/12/10

Q196791

Affected Products:

• Office 97
  • Office 97 SR-2/SR-2b
• Excel 97
  • Office 97 SR-2/SR-2b

Patch: Xl8p9pkg

• http://officeupdate.microsoft.com/downloadDetails/Xl8p9pkg.htm

---

MS98-020 - Frame Spoof Vulnerability

Posted: 1998/12/23

Q167614

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP1

Patch: spoof.asp

• http://www.microsoft.com/windows/ie/security/spoof.asp

---

MS98-017 - Named Pipes Over RPC Vulnerability

Posted: 1998/11/19

JP195733

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 4

Patch: nprpcfxi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP4/archive/nprpc-fix/

---

MS98-012 - Updates available for Security Vulnerabilities in Microsoft PPTP

Posted: 1998/08/18

Q189771

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1

Patch: dun40.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP3/pptp3-fix/

JP189595

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 3
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3

Patch: pptpfixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP3/pptp3-fix/

Q189594

Affected Products:

• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3

Patch: rrasfixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP3/rras30-fix/

Q154091

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5

Patch: msdun13.exe

• ftp://ftp.microsoft.com/softlib/mslfiles/msdun13.exe

---

MS98-014 - RPC Spoofing Denial of Service on Windows NT

Posted: 1998/09/29

JP193233

Affected Products:

• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 3

Patch: snk-fixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postSP3/snk-fix/snk-fixi.exe

JP193233

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT 4 Terminal Server Gold

Patch: Snk-fixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40TSE/hotfixes-postSP3/Snk-fix/

---

MS99-001 - Exposure in Forms 2.0 TextBox Control that allows data to be read from user's Clipboard

Posted: 1999/01/21

Q214757

Affected Products:

• Office 97
  • Office 97 SR-2/SR-2b
• Outlook 98
  • Office 97 SR-2/SR-2b
• Project 98
  • Office 97 SR-2/SR-2b
• Visual Basic 5.0
  • Visual Basic 5.0 Gold
• Word 97
  • Office 97 SR-2/SR-2b
• Excel 97
  • Office 97 SR-2/SR-2b
• PowerPoint 97
  • Office 97 SR-2/SR-2b

Patch: fm2paste.exe

• http://officeupdate.microsoft.com/downloaddetails/fm2paste.htm

---

MS99-002 - Word 97 Template Vulnerability

Posted: 1999/01/21

Q214652

Affected Products:

• Word 97
  • Office 97 SR-2/SR-2b

Patch: Wd97SP.EXE

• http://officeupdate.microsoft.com/downloaddetails/wd97sp.htm

---

MS99-003 - IIS Malformed FTP List Request Vulnerability

Posted: 1999/02/03

Q188348

Affected Products:

• Internet Information Server 3.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4

Patch: ftpls3i.exe

• ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/ftpls-fix/ftpls3i.exe

JP188348

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4

Patch: ftpls4i.exe

• ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/ftpls-fix/ftpls4i.exe

---

MS99-007 - Taskpads Scripting Vulnerability

Posted: 1999/02/22

Q218619

Affected Products:

• Windows 98 Resource Kit
  • Windows 98 Resource Kit Gold
• Windows 98 Resource Kit Sampler
  • Windows 98 Resource Kit Sampler Gold

Patch: tmcpatch.exe

• ftp://ftp.microsoft.com/reskit/win98/taskpads/tmcpatch.exe

Q218619

Affected Products:

• BackOffice Resource Kit SE
  • BackOffice Resource Kit SE Gold

Patch: itmcpatch.exe

• ftp://ftp.microsoft.com/reskit/nt4/x86/taskpads/itmcpatch.exe

---

MS99-010 - File Access Vulnerability in Personal Web Server

Posted: 1999/03/26

Q216453 (FP98)

Affected Products:

• Personal Web Server 4.0
  • Personal Web Server 4.0 Gold

Patch: Pwssecup.exe

• http://officeupdate.microsoft.com/downloadDetails/pwssecup.htm

Q216453 (FP98)

Affected Products:

• FrontPage 98 Personal Web Server 1.0
  • FrontPage 98 Personal Web Server 1.0 Gold

Patch: fppws98.exe

• http://office.microsoft.com/downloadDetails/fppws98.htm

Q216453 (FP98)

Affected Products:

• FrontPage 97 Personal Web Server 1.0
  • FrontPage 97 Personal Web Server 1.0 Gold

Patch: Q217765

• http://support.microsoft.com/support/kb/articles/q217/7/65.asp

---

MS99-005 - BackOffice Server 4.0 Does Not Delete Installation Setup File

Posted: 1999/02/12

Q217004

Affected Products:

• BackOffice Server 4.0
  • BackOffice Server 4.0 Gold

Patch: Q217004

• http://support.microsoft.com/support/kb/articles/q217/0/04.asp

---

MS99-004 - Authentication Processing Error in Windows NT 4.0 Service Pack 4

Posted: 1999/02/08

JP214840

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 4
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 4

Patch: msv-fixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP4/archive/msv1-fix/

---

MS99-006 - Windows NT Known DLLs List Vulnerability

Posted: 1999/02/19

JP218473

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 4
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 4

Patch: Smss-fixi

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP4

---

MS99-008 - Windows NT Screen Saver Vulnerability

Posted: 1999/03/12

JP221991

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 4
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 4

Patch: Scrnsavi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP4

JP221991

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT 4 Terminal Server Gold

Patch: Scrnsavi.Exe

• http://urlplaceholder

---

MS99-009 - Malformed Bind Request Vulnerability

Posted: 1999/03/16

Q221989

Affected Products:

• Exchange Server 5.5
  • Exchange Server 5.5 SP2

Patch: PSP2DIRI.EXE

• ftp://ftp.microsoft.com/bussys/exchange/exchange-public/fixes/Eng/Exchg5.5/PostSP2/DIR-fix/PSP2DIRI.EXE

---

MS99-013 - File Viewers Vulnerability

Posted: 1999/05/07

JP232449

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5

Patch: fix2450i.exe

• ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/Viewcode-fix/

Q231368

Affected Products:

• Site Server 3.0, Commerce Edition
  • Site Server 3.0 Gold
  • Site Server 3.0 SP1
  • Site Server 3.0 SP2

Patch: viewfixi.exe

• ftp://ftp.microsoft.com/bussys/sitesrv/sitesrv-public/fixes/usa/siteserver3/hotfixes-postsp2/Viewcode-fix/

---

MS99-015 - Malformed Help File Vulnerability

Posted: 1999/05/17

JP231605

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: winhlp-i.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postSP5/winhlp32-fix

---

MS99-016 - Malformed Phonebook Entry Vulnerability

Posted: 1999/05/20

JP230677

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5

Patch: rasffixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP5/RAS-fix/

---

MS99-017 - RAS and RRAS Password Vulnerability

Posted: 1999/05/27

JP230681

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: raspassword-fix

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/Hotfixes-PostSP5/raspassword-fix/

JP233303

Affected Products:

• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: rpwdfixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/Hotfixes-PostSP5/rraspassword-fix/

---

MS99-020 - Malformed LSA Request Vulnerability

Posted: 1999/06/23

JP231457

Affected Products:

• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 5

Patch: lsareqi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP5/LSA3-fix/

---

MS99-021 - CSRSS Worker Thread Exhaustion Vulnerability

Posted: 1999/06/23

JP233323

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: csrssfxi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/Hotfixes-PostSP5/CSRSS-fix/

---

MS99-023 - Malformed Image Header Vulnerability

Posted: 1999/06/30

JP234557

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 4
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 4

Patch: krnlifxi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/Hotfixes-PostSP4/Kernel-fix/

JP234557

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 4

Patch: Krnlifxi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40tse/Hotfixes-PostSP4/Kernel-fix/

---

MS99-024 - Unprotected IOCTLs Vulnerability

Posted: 1999/07/06

JP236359

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: ioctlfxi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/Hotfixes-PostSP5/ioctl-fix

JP236359

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 4

Patch: Ioctlfxi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40tse/Hotfixes-PostSP4/IOCTL-fix/

---

MS99-025 - Unauthorized Access to IIS Servers through ODBC Data Access with RDS

Posted: 1999/07/17

JP184375

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Internet Information Server 3.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Q184375

• http://support.microsoft.com/support/kb/articles/q184/3/75.asp

---

MS99-026 - Malformed Dialer Entry Vulnerability

Posted: 1999/07/29

JP237185

Affected Products:

• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: dialrfxi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP5/dialer-fix/

JP237185

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 4

Patch: Dialrfxi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40tse/hotfixes-postSP4/Dialer-fix/

---

MS99-027 - Encapsulated SMTP Address Vulnerability

Posted: 1999/08/06

JP237927

Affected Products:

• Exchange Server 5.5
  • Exchange Server 5.5 SP2

Patch: psp2imci.zip

• ftp://ftp.microsoft.com/bussys/exchange/exchange-public/fixes/Eng/Exchg5.5/PostSP2/imc-fix/

---

MS99-028 - Terminal Server Connection Request Flooding Vulnerability

Posted: 1999/08/09

Q228724

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 4
  • Windows NT4 Terminal Server Service Pack 5

Patch: tsmemfxi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40tse/hotfixes-postSP4/flood-fix/

---

MS99-029 - Malformed HTTP Request Header Vulnerability

Posted: 1999/08/11

JP238606

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5

Patch: vdext4i.exe

• ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/HDBRK-fix/

---

MS99-031 - 「仮想マシン サンドボックス」の脆弱性に対する対策

Posted: 1999/08/25

Q240346

Affected Products:

• Microsoft Virtual Machine (VM)
  • Microsoft Virtual Machine (VM) Gold
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold
• Internet Explorer 4.0
  • Internet Explorer 4.0 Gold
  • Internet Explorer 4.01 SP1
  • Internet Explorer 4.01 SP2
• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: msjavx86.exe

• http://www.microsoft.com/java/vm/dl_vm40.htm

---

MS99-034 - 「断片化された IGMP パケット」の脆弱性に対する対策

Posted: 1999/09/03

JP238329

Affected Products:

• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: igmpfixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40TSE/hotfixes-postSP4/igmp-fix/

JP238329

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 4
  • Windows NT4 Terminal Server Service Pack 5

Patch: Igmpfixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40TSE/hotfixes-postSP4/igmp-fix/

JP238453

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5

Patch: 238453US5.exe

• http://www.microsoft.com/windows95/downloads/contents/WUCritical/SRPoint/default.asp

JP238453

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 238453US8.EXE

• http://www.microsoft.com/windows98/downloads/contents/WUCritical/SRPoint/default.asp

---

MS99-036 - 「Windows NT 4.0 が無人インストール ファイルを削除しない」ことによる脆弱性に対する対策

Posted: 1999/09/10

JP155197

Affected Products:

• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6
  • Windows NT4 Terminal Server Service Pack 4
  • Windows NT4 Terminal Server Service Pack 5

Patch: MS99-036

• http://www.microsoft.com/technet/security/bulletin/ms99-036.asp

---

MS99-038 - 「パケットの不正情報によりソースルーティングが有効になる」脆弱性に対する対策

Posted: 1999/09/20

JP238453

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5

Patch: ipsrfixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/Hotfixes-PostSP5/spoof-fix/

---

MS99-039 - 「ドメイン解決」、「FTPダウンロード」の脆弱性に対する対策

Posted: 1999/09/23

JP241805

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: iprftp4i.exe

• ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/IIS40/hotfixes-postSP6/security/IPRFTP-fix/

Q241805

Affected Products:

• Microsoft Commercial Internet System 2.5
  • Microsoft Commercial Internet System 2.5 Gold

Patch: q242559.exe

• ftp://ftp.microsoft.com/bussys/mcis/mcis-public/fixes/usa/mcis25/security/ftpsvc-fix/

---

MS99-041 - 「RASMAN セキュリティ記述子」の脆弱性に対する対策

Posted: 1999/09/30

JP242294

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6
  • Windows NT4 Terminal Server Service Pack 5

Patch: fixrasi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/Hotfixes-PostSP6/Security/rasman-fix/

---

MS99-045 - 「仮想マシン ベリファイア」の脆弱性に対する対策

Posted: 1999/10/21

JP244283

Affected Products:

• Microsoft Virtual Machine (VM)
  • Microsoft Virtual Machine (VM) Gold
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold
• Internet Explorer 4.0
  • Internet Explorer 4.0 Gold
  • Internet Explorer 4.01 SP1
  • Internet Explorer 4.01 SP2
• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: msjavx86.exe

• http://www.microsoft.com/java/vm/dl_vm40.htm

---

MS99-046 - 「TCP/IP のシーケンス番号が予測できてしまう」脆弱性 に対する対策

Posted: 1999/10/22

JP243835

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5

Patch: q243835sp5i.exe

• http://download.microsoft.com/download/winntsrv40/patch/tcp-sp5/nt4/en-us/q243835sp5i.exe

JP243835

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: q243835i.exe

• http://download.microsoft.com/download/winntsrv40/patch/tcp-sp6/nt4/en-us/q243835i.exe

JP243835

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 4
  • Windows NT4 Terminal Server Service Pack 5

Patch: Q243835i.EXE

• http://download.microsoft.com/download/winntterminal/patch/q243835/nt4alpha/en-us/q243835i.exe

---

MS99-047 - 「改ざんされたスプーラ リクエスト」の脆弱性に対する対策

Posted: 1999/11/04

JP243649

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Q243649.exe

• http://download.microsoft.com/download/winntsrv40/patch/spooler-fix/nt4/en-us/q243649.exe

---

MS99-050 - 「サーバー側参照リダイレクト」の脆弱性に対する対策

Posted: 1999/12/08

JP246094

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2

Patch: q246094.exe

• http://www.microsoft.com/windows/ie/security/servredir.asp

Q256094

Affected Products:

• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: Q246094.exe

• http://www.microsoft.com/windows/ie/security/servredir.asp

---

MS99-055 - 「リソース カタログ要求に対し改ざんされた引数が渡された場合」の脆弱性に対する対策

Posted: 1999/12/09

JP246045

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: Q246045.EXE

• http://download.microsoft.com/download/winntsrv40/update/srvsvc/nt4/en-us/q246045.exe

---

MS99-056 - 「 Syskey がキーストリームを再使用する」の脆弱性に対する対策

Posted: 1999/12/16

JP248183

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: Q248183.EXE

• http://download.microsoft.com/download/winntsp/patch/syskey/nt4/en-us/q248183.exe

JP248183

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 5
  • Windows NT4 Terminal Server Service Pack 4

Patch: Q248183ts.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS99-057 - 「SID に無効な引数が渡された場合」の脆弱性に対する対策

Posted: 1999/12/16

JP248183

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: Q248183.EXE

• http://download.microsoft.com/download/winntsp/patch/syskey/nt4/en-us/q248183.exe

---

MS00-001 - 「不正な IMAP リクエスト 」の脆弱性に対する対策

Posted: 2000/01/04

JP246731

Affected Products:

• Microsoft Commercial Internet System 2.0
  • Microsoft Commercial Internet System 2.0 Gold
• Microsoft Commercial Internet System 2.5
  • Microsoft Commercial Internet System 2.5 Gold

Patch: q246731engi.EXE

• http://download.microsoft.com/download/cis25b/patch/5.5.1877.37/nt4/en-us/q246731engi.exe

---

MS00-002 - 「不正なコンバージョン データ」の脆弱性に対する対策

Posted: 2000/01/20

Q249881

Affected Products:

• Word 98
  • Word 98 Gold
• PowerPoint 98
  • PowerPoint 98 Gold
• Word 97
  • Word 97 Gold

Patch: WW5Pkg.exe

• http://officeupdate.microsoft.com/downloaddetails/ww5pkg.htm

Q249881

Affected Products:

• Word 2000
  • Word 2000 Gold
• PowerPoint 2000
  • PowerPoint 2000 Gold

Patch: WW5pkg.exe

• http://officeupdate.microsoft.com/2000/downloaddetails/ww5pkg.htm

---

MS00-003 - 「偽装 LPC ポート リクエスト」の脆弱性に対する対策

Posted: 2000/01/12

JP247869

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: Q247869i.EXE

• http://download.microsoft.com/download/winntsp/patch/lpc/nt4/en-us/q247869i.exe

---

MS00-004 - 「RDISK レジストリ情報ファイル」の脆弱性に対する対策

Posted: 2000/01/21

JP249108

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Terminal Server Service Pack 4

Patch: Q249108i.exe

• http://download.microsoft.com/download/winntsp/patch/rdisk2/nt4/en-us/q249108i.exe

JP249108

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6
  • Windows NT4 Terminal Server Service Pack 5
  • Windows NT4 Terminal Server Service Pack 4

Patch: q249108i.EXE

• http://download.microsoft.com/download/winntsp/patch/rdisk/nt4/en-us/q249108i.exe

---

MS00-005 - 「RTF のコントロール ワードが改ざんされた場合」の脆弱性に対する対策

Posted: 2000/01/17

JP249973

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: Q249973i.EXE

• http://download.microsoft.com/download/winntsp/patch/rtf/nt4/en-us/q249973i.exe

Q249973

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.5
  • Windows 95 SR 2.1

Patch: 249973USA5.exe

• http://www.microsoft.com/windows95/downloads/contents/WUCritical/rtfcontrol/Default.asp

Q249973

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 249973USA8.exe

• http://www.microsoft.com/windows98/downloads/contents/WUCritical/rtfcontrol/Default.asp

JP249973

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 5

Patch: q249973ts.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS00-006 - 「Hit-Highlighting 引数の形式不良」の脆弱性に対する対策

Posted: 2000/01/26

JP251170

Affected Products:

• Indexing Services for Windows 2000
  • Windows 2000 Gold
• Internet Information Services 5.0
  • Windows 2000 Gold
• Windows 2000 Professional
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Gold

Patch: Q251170_W2K_SP1_X86_en.EXE

• http://download.microsoft.com/download/win2000pro/patch/mhh/nt5/en-us/q251170_w2k_sp1_x86_en.exe

JP252463

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Index Server 2.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Q252463i.EXE

• http://download.microsoft.com/download/winntsp/patch/mhh/nt4/en-us/q252463i.exe

JP252463

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q252463ts.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS00-007 - 「ごみ箱作成に伴う」脆弱性に対する対策

Posted: 2000/02/01

JP248399

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: q248399i.exe

• http://www.microsoft.com/downloads/release.asp?ReleaseID=22155

JP248399

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q248399ts.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS00-008 - 「レジストリ値のアクセス権」の脆弱性に対する対策

Posted: 2000/03/09

JP259496

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q259496i.exe

• http://download.microsoft.com/download/winntsp/patch/q259496/nt4/en-us/q259496i.exe

---

MS00-011 - 「VM ファイル参照 問題」の脆弱性に対する対策

Posted: 2000/02/18

JP253562

Affected Products:

• Microsoft Virtual Machine (VM)
  • Microsoft Virtual Machine (VM) Gold
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold
• Windows Me
  • Windows Me Gold

Patch: msjavx86.exe

• http://www.microsoft.com/java/vm/dl_vm40.htm

JP287030

Affected Products:

• Microsoft Virtual Machine (VM)
  • Windows 2000 Service Pack 1
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
• Windows 2000 Professional
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Service Pack 1

Patch: Q287030_W2K_SP2_x86_en.EXE

• http://www.microsoft.com/Windows2000/downloads/critical/q287030/download.asp

---

MS00-021 - 「改ざんされた TCP/IP 印刷リクエスト」の脆弱性 に対する対策

Posted: 2000/03/30

JP257870

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: Q257870i.EXE

• http://download.microsoft.com/download/winntsp/patch/q257870/nt4/en-us/q257870i.exe

JP257870

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Gold
• Windows 2000 Professional
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Gold

Patch: Q257870_W2K_SP1_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/patch/q257870/nt5/en-us/q257870_w2k_sp1_x86_en.exe

JP257870

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q257870ts.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS00-020 - 「デスクトップの分割による」脆弱性に対する対策

Posted: 2000/06/15

JP260197

Affected Products:

• Windows 2000 Server
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Gold
• Windows 2000 Professional
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Gold

Patch: q260197_w2k_sp1_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q260197/NT5/EN-US/Q260197_W2K_SP1_x86_en.EXE

---

MS00-026 - 「オブジェクトに対する属性」の脆弱性に対する対策

Posted: 2000/04/20

JP259401

Affected Products:

• Windows 2000 Server
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Gold

Patch: q259401_w2k_sp1_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q259401/NT5/EN-US/Q259401_W2K_SP1_x86_en.EXE

---

MS00-027 - 「極端に長い環境文字列を生成する引数が指定された場合」の脆弱性 に対する対策

Posted: 2000/04/20

JP259622

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: q259622i.exe

• http://download.microsoft.com/download/winntsp/patch/q259622/nt4alpha/en-us/q259622i.exe

JP259622

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Gold

Patch: q259622_w2k_sp1_x86_en.exe

• http://download.microsoft.com/download/win2000platform/patch/q259622/nt5/en-us/q259622_w2k_sp1_x86_en.exe

---

MS00-029 - 「断片化された IP パケットの組み立てなおし」の脆弱性に対する対策

Posted: 2000/05/19

JP259728

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: Q259728i.EXE

• http://download.microsoft.com/download/winntsp/patch/q259728/nt4alpha/en-us/q259728i.exe

JP259728

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Gold

Patch: Q259728_W2K_SP1_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q259728/NT5/EN-US/Q259728_W2K_SP1_x86_en.EXE

JP259728

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: q259728i.EXE

• http://download.microsoft.com/download/winntterminal/patch/q259728/nt4alpha/en-us/q259728i.exe

Q259728

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5

Patch: 259728USA5.EXE

• http://download.microsoft.com/download/win95/update/8070/w95/en-us/259728usa5.exe

Q259728

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 259728USA8.EXE

• http://download.microsoft.com/download/win98/update/8070/w98/en-us/259728usa8.exe

---

MS00-032 - 「Protected Store のキー暗号化」の脆弱性に対する対策

Posted: 2000/06/01

JP260219

Affected Products:

• Windows 2000 Server
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Gold
• Windows 2000 Professional
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Gold

Patch: q260219_w2k_sp1_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/q260219/NT5/EN-US/Q260219_W2K_SP1_x86_en.EXE

---

MS00-036 - 「ブラウザからの過度なアナウンス」の脆弱性に対する対策

Posted: 2000/05/25

JP262694

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: Q262694i.EXE

• http://download.microsoft.com/download/winntsp/patch/q262694/nt4alpha/en-us/q262694i.exe

JP262694

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q262694_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q262694/NT5/EN-US/Q262694_W2K_SP2_x86_en.EXE

JP262694

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q262694ts.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS00-040 - 「リモート レジストリ アクセス認証」の脆弱性に対する対策

Posted: 2000/06/08

JP264684

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: Q264684i.EXE

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=23077

JP264684

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q264684ts.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS00-047 - 「NetBIOS Name Server Protocol Spoofing」の脆弱性に対する対策

Posted: 2000/07/27

JP269239

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: q269239i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=22138

JP269239

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: Q269239_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q269239/NT5/EN-US/Q269239_W2K_SP2_x86_en.EXE

JP269239

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q269239i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=24516

---

MS00-052 - 「Shell の相対パス」の脆弱性に対する対策

Posted: 2000/07/28

JP269049

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: Q269049i.EXE

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=23360

JP269049

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: q269049i.exe

• http://download.microsoft.com/download/winntterminal/patch/q269049/nt4alpha/en-us/q269049i.exe

JP269049

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: q269049_w2k_sp2_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/q269049/NT5/EN-US/Q269049_W2K_SP2_x86_en.EXE

---

MS00-053 - 「サービス コントロール マネージャの名前付きパイプを利用したなりすまし」の脆弱性に対する対策

Posted: 2000/08/02

JP269523

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q269523_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q269523/NT5/EN-US/Q269523_W2K_SP2_x86_en.EXE

---

MS00-057 - 「正規化エラーによる、ファイルへの誤ったアクセス権の適用」の脆弱性に対する対策

Posted: 2000/08/10

JP269862

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: prmcan4i.exe

• http://www.microsoft.com/ntserver/nts/downloads/critical/q269862/xdownload.asp

JP269862

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q269862_W2K_SP2_x86_en.EXE

• http://www.microsoft.com/Windows2000/downloads/critical/q269862/download.asp

---

MS00-059 - 「Java VM アプレット」の脆弱性に対する対策

Posted: 2000/08/21

JP271752

Affected Products:

• Microsoft Virtual Machine (VM)
  • Microsoft Virtual Machine (VM) Gold
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold
• Windows Me
  • Windows Me Gold

Patch: msjavx86.exe

• http://www.microsoft.com/java/vm/dl_vm40.htm

JP287030

Affected Products:

• Microsoft Virtual Machine (VM)
  • Windows 2000 Service Pack 1
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Service Pack 1
• Windows 2000 Professional
  • Windows 2000 Service Pack 1

Patch: Q287030_W2K_SP2_x86_en.EXE

• http://www.microsoft.com/Windows2000/downloads/critical/q287030/download.asp

---

MS00-060 - 「IIS クロスサイト スクリプティング」に対する脆弱性を解決する修正プログラム

Posted: 2000/08/25

JP260347

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: crsscri.exe

• http://download.microsoft.com/download/winntsp/patch/q275657/nt4/en-us/crsscri.exe

JP275657

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: Q275657_W2K_SP2_x86_en.EXE

• http://www.microsoft.com/Windows2000/downloads/critical/q275657/download.asp

---

MS00-062 - 「ローカル セキュリティ ポリシーの破壊」の脆弱性を解決する修正プログラム

Posted: 2000/08/28

JP269609

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Gold

Patch: Q269609_W2K_SP1_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q269609/NT5/EN-US/Q269609_W2K_SP1_x86_en.EXE

---

MS00-063 - 「無効な URL」の脆弱性に対する対策

Posted: 2000/09/05

JP271652

Affected Products:

• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: Q271652i.EXE

• http://www.microsoft.com/ntserver/nts/downloads/critical/q271652/xdownload.asp

JP271652

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: Q271652I.EXE

• http://www.microsoft.com/ntserver/nts/downloads/critical/q271652/xdownload.asp

---

MS00-065 - 「静止画像サービスを利用した権限の昇格」の脆弱性に対する対策

Posted: 2000/09/06

JP272736

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: q272736_w2k_sp2_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/q272736/NT5/EN-US/Q272736_W2K_SP2_x86_en.EXE

---

MS00-066 - 「無効な RPC パケット」の脆弱性に対する対策

Posted: 2000/09/11

JP272303

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: q272303_w2k_sp2_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/q272303/NT5/EN-US/Q272303_W2K_SP2_x86_en.EXE

---

MS00-067 - 「Windows 2000 Telnet クライアントの NTLM 認証」の脆弱性に対する対策

Posted: 2000/09/14

JP272743

Affected Products:

• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: q272743_w2k_sp2_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q299553/NT5/EN-US/Q299553_W2K_SP3_x86_en.EXE

---

MS00-068 - 「OCX コントロールの電子メールへの添付」の脆弱性に対する対策

Posted: 2000/09/26

JP274303

Affected Products:

• Windows Media Player 7.0
  • Windows Media Player 7.0 Gold

Patch: WMSU28412.EXE

• http://download.microsoft.com/download/winmediaplayer/update/28412/w982kme/en-us/wmsu28412.exe

---

MS00-069 - 「簡体字中国語用 IME の状態認識」の脆弱性に対する対策

Posted: 2000/09/29

JP270676

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: q270676_w2k_sp2_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/q270676/NT5/EN-US/Q270676_W2K_SP2_x86_en.EXE

---

MS00-070 - 「LPC 呼び出しおよび LPC ポート」の複数にわたる脆弱性に対する対策

Posted: 2000/10/03

JP266433

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: q266433i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=24650

JP266433

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: q266433_w2k_sp2_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q266433/NT5/EN-US/Q266433_W2K_SP2_x86_en.EXE

---

MS00-072 - 「共有レベルのアクセス制限パスワード」の脆弱性に対する対策

Posted: 2000/10/10

Q273991

Affected Products:

• Windows Me
  • Windows Me Gold

Patch: 273991usam.exe

• http://download.microsoft.com/download/winme/update/11958/winme/en-us/273991usam.exe

Q273991

Affected Products:

• Windows 98
  • Windows 98 Gold
• Windows 98 SE
  • Windows 98se Gold

Patch: 273991USA8.EXE

• http://download.microsoft.com/download/win98se/update/11958/w98/en-us/273991usa8.exe

Q273991

Affected Products:

• Windows 95
  • Windows 95 Gold

Patch: 273991USA5.EXE

• http://download.microsoft.com/download/win95/update/11958/w95/en-us/273991usa5.exe

---

MS00-073 - 「不正な IPX NMPI パケット」 の脆弱性に対する対策

Posted: 2000/10/11

Q273727

Affected Products:

• Windows Me
  • Windows Me Gold

Patch: 273727USAM.EXE

• http://download.microsoft.com/download/winme/update/11974/winme/en-us/273727usam.exe

Q273727

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 273727USA8.EXE

• http://download.microsoft.com/download/win98/update/11974/w98/en-us/273727usa8.exe

Q273727

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5

Patch: 273727USA5.EXE

• http://download.microsoft.com/download/win95/update/11974/w95/en-us/273727usa5.exe

---

MS00-074 - 「WebTV for Windows のサービス拒否」 の脆弱性に対する対策

Posted: 2000/10/11

Q274113

Affected Products:

• Windows Me
  • Windows Me Gold

Patch: 274113usam.exe

• http://download.microsoft.com/download/winme/update/12278/winme/en-us/274113usam.exe

Q274113

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 274113USA8.EXE

• http://download.microsoft.com/download/win98se/update/12278/w98/en-us/274113usa8.exe

---

MS00-076 - 「キャッシュされた Web アカウント情報」の脆弱性に対する対策

Posted: 2000/10/12

JP273868

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP1

Patch: q273868.exe

• http://www.microsoft.com/windows/ie/download/critical/q273868.htm

---

MS00-077 - 「NetMeeting リモート デスクトップ共有」の脆弱性に対する対策

Posted: 2000/10/13

JP273854

Affected Products:

• NetMeeting
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: NM30.EXE

• http://download.microsoft.com/download/netmeeting/sp/3.01/w9xnt4/en-us/nm30.exe

JP299796

Affected Products:

• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Professional
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q299796_W2k_SP3_x86_en.exe

• http://download.microsoft.com/download/win2000platform/patch/q299796/nt5/en-us/q299796_w2k_sp3_x86_en.exe

---

MS00-078 - 「Web サーバー フォルダへの侵入」の脆弱性に対する対策

Posted: 2000/10/17

JP269862

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: prmcan4i.exe

• http://www.microsoft.com/ntserver/nts/downloads/critical/q269862/xdownload.asp

JP269862

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q269862_W2K_SP2_x86_en.EXE

• http://www.microsoft.com/Windows2000/downloads/critical/q269862/download.asp

---

MS00-079 - 「ハイパーターミナルのバッファ オーバーフロー」の脆弱性に対する対策

Posted: 2000/10/18

Q274548

Affected Products:

• Windows Me
  • Windows Me Gold

Patch: 274548usam.exe

• http://download.microsoft.com/download/winme/update/12395/winme/en-us/274548usam.exe

Q274548

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 274548USA8.EXE

• http://download.microsoft.com/download/win98/update/12395/w98/en-us/274548usa8.exe

JP276471

Affected Products:

• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Professional
  • Windows 2000 Gold
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1

Patch: Q276471_W2K_SP3_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q276471/NT5/EN-US/Q276471_W2K_SP3_x86_en.EXE

JP304158

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Q304158i.exe

• http://www.microsoft.com/downloads/release.asp?ReleaseID=32239

---

MS00-080 - 「セッション ID クッキーのマーキング」の脆弱性に対する対策

Posted: 2000/10/23

JP274149

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 6a

Patch: secsesi.exe

• http://www.microsoft.com/ntserver/nts/downloads/critical/q274149/download.asp

JP274149

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: Q274149_W2K_SP2_x86_en.EXE

• http://www.microsoft.com/Windows2000/downloads/critical/q274149/download.asp

---

MS00-081 - 「VM のファイルの読み取り」の脆弱性に対する対策

Posted: 2000/10/25

JP287030

Affected Products:

• Microsoft Virtual Machine (VM)
  • Windows 2000 Service Pack 1
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
• Windows 2000 Professional
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Service Pack 1

Patch: Q287030_W2K_SP2_x86_en.EXE

• http://www.microsoft.com/Windows2000/downloads/critical/q287030/download.asp

JP277014

Affected Products:

• Microsoft Virtual Machine (VM)
  • Microsoft Virtual Machine (VM) Gold
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold
• Windows Me
  • Windows Me Gold

Patch: msjavx86.exe

• http://www.microsoft.com/java/vm/dl_vm40.htm

---

MS00-082 - 「無効な MIME ヘッダー」の脆弱性に対する対策

Posted: 2000/10/31

JP248838

Affected Products:

• Exchange Server 5.5
  • Exchange Server 5.5 SP3

Patch: Q248838engI.EXE

• http://download.microsoft.com/download/exch55/patch/5.5.2653.22/nt45/en-us/q248838engi.exe

---

MS00-083 - 「Netmon のプロトコル解析」の脆弱性に対する対策

Posted: 2000/11/01

JP274835

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: Q274835i.EXE

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=25487

JP274835

Affected Products:

• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q274835_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q274835/NT5/EN-US/Q274835_W2K_SP2_x86_en.EXE

JP273476

Affected Products:

• Systems Management Server 1.2
  • Systems Management Server 1.2 SP4

Patch: Q273476c.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q274835/NT5/EN-US/Q274835_W2K_SP2_x86_en.EXE

JP273476

Affected Products:

• Systems Management Server 2.0
  • Systems Management Server 2.0 Gold
  • Systems Management Server 2.0 SP1
  • Systems Management Server 2.0 SP2

Patch: Q273476c.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q274835/NT5/EN-US/Q274835_W2K_SP2_x86_en.EXE

JP274835

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q274835ts.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS00-084 - 「インデックス サービスのクロスサイト スクリプティング」の脆弱性に対する対策

Posted: 2000/11/02

JP278499

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Internet Information Services 5.0
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Indexing Services for Windows 2000
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q278499_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q278499/NT5/EN-US/Q278499_W2K_SP2_x86_en.EXE

---

MS00-085 - 「ActiveX におけるパラメータ照合」の脆弱性に対する対策

Posted: 2000/11/02

JP278511

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: Q278511_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/patch/q278511/nt5/en-us/q278511_w2k_sp2_x86_en.exe

---

MS00-086 - 「Web サーバーによるファイル要求の解析」の脆弱性に対する対策

Posted: 2000/11/06

JP277873

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: arbexei.exe

• http://www.microsoft.com/ntserver/nts/downloads/critical/q277873/download.asp

JP277873

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q277873_W2K_SP2_x86_en.EXE

• http://www.microsoft.com/Windows2000/downloads/critical/q277873/download.asp

---

MS00-087 - 「ターミナル サーバーへのログオンで発生するバッファ オーバーフロー」の脆弱性に対する対策

Posted: 2000/11/08

JP277910

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6
  • Windows NT4 Terminal Server Service Pack 5
  • Windows NT4 Terminal Server Service Pack 4

Patch: q277910i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=25565

---

MS00-088 - 「Exchange ユーザー アカウント」の脆弱性に対する対策

Posted: 2000/11/16

JP278523

Affected Products:

• Exchange 2000 Server
  • Exchange 2000 Gold
• Exchange 2000 Enterprise Server
  • Exchange 2000 Gold

Patch: Q278523ENGI.EXE

• http://download.microsoft.com/download/exchangeentserver/patch/06.00.26.4418/nt5/en-us/q278523engi.exe

---

MS00-089 - 「ドメイン アカウント ロックアウト」の脆弱性に対する対策

Posted: 2000/11/21

JP274372

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1

Patch: q274372_w2k_sp2_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/q274372/NT5/EN-US/Q274372_W2K_SP2_x86_en.EXE

---

MS00-090 - 「.ASX バッファ オーバーラン」と「.WMS スクリプト 実行」の脆弱性に対する対策

Posted: 2000/11/22

JP280419

Affected Products:

• Windows Media Player 7.0
  • Windows Media Player 7.0 Gold

Patch: wmsu34419.EXE

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=26079

JP280419

Affected Products:

• Windows Media Player 6.4
  • Windows Media Player 6.4 Gold
• Windows Media Player 6.4 for Windows 2000
  • Windows Media Player 6.4 for Windows 2000 Gold

Patch: wmsu33995.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=26069

JP280419

Affected Products:

• Windows Media Player 6.4 for Windows NT 4.0
  • Windows Media Player 6.4 for Windows NT 4.0 Gold

Patch: Wmsu33995.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=26069

---

MS00-091 - 「不完全な TCP/IP パケット」の脆弱性に対する対策

Posted: 2000/11/30

JP275567

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold
• Windows Me
  • Windows Me Gold

Patch: q275567i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=25114

JP275567

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q275567ts.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS00-092 - 「拡張ストアド プロシージャ パラメータ解析」の脆弱性に対する対策

Posted: 2000/12/01

JP280380

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP2

Patch: s70918i.exe

• http://download.microsoft.com/download/sql70/patch/7.0/win98me/en-us/s70918i.exe

JP280380

Affected Products:

• SQL Server 2000
  • SQL Server 2000 Gold
• SQL Server Desktop Engine (MSDE) 2000
  • SQL Server Desktop Engine (MSDE) 2000 Gold

Patch: s80233i.exe

• http://download.microsoft.com/download/sqlsvr2000/ss2kxp/2000/w98nt42kme/en-us/s80233i.exe

---

MS00-093 - 「印刷テンプレート」と「フォームによるファイル アップロード」の脆弱性に対する対策

Posted: 2000/12/01

JP279328

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP1

Patch: q279328.exe

• http://www.microsoft.com/windows/ie/download/critical/q279328/download.asp

JP279328

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 Gold

Patch: Q279328.exe

• http://www.microsoft.com/windows/ie/download/critical/q279328/download.asp

JP279328

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP1

Patch: q279328.Exe

• http://www.microsoft.com/windows/ie/download/critical/q279328/download.asp

---

MS00-094 - 「電話帳サービス バッファ オーバーフロー」の脆弱性に対する対策

Posted: 2000/12/04

JP276575

Affected Products:

• Connection Manager
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: Q276575_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q276575/NT5/EN-US/Q276575_W2K_SP2_x86_en.EXE

JP276575

Affected Products:

• Connection Manager
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: q276575i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=26193

JP276575

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q276575ts.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS00-095 - 「レジストリのアクセス権」の脆弱性を解決するツール

Posted: 2000/12/06

JP265714

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Q265714i.EXE

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=28812

JP265714

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q265714i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=28812

---

MS00-096 - 「SNMP パラメータ」の脆弱性を解決するツール

Posted: 2000/12/06

JP266794

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q266794_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q266794/NT5/EN-US/Q266794_W2K_SP2_x86_en.EXE

---

MS00-097 - 「Windows Media サーバーに対する接続の切断」の脆弱性を解決する修正プログラム

Posted: 2000/12/15

Q281256

Affected Products:

• Windows Media Services 4.1
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows Media Services 4.0
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: WMSU35924.EXE

• http://download.microsoft.com/download/winmediatech40/update/35924/nt45/en-us/wmsu35924.exe

---

MS00-098 - 「インデックス サービス ファイル列挙」の脆弱性に対する対策

Posted: 2000/12/19

JP280838

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: Q280838_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q280838/NT5/EN-US/Q280838_W2K_SP2_x86_en.EXE

---

MS00-099 - 「ディレクトリ サービス復元モードのパスワード」の脆弱性に対する対策

Posted: 2000/12/20

JP271641

Affected Products:

• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q271641_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q271641/NT5/EN-US/Q271641_W2K_SP2_x86_en.EXE

---

MS00-100 - 「無効なWeb フォームの提出」の脆弱性に対する対策

Posted: 2000/12/22

JP280322

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: Q280322_W2K_SP2_x86_en.EXE

• http://www.microsoft.com/Windows2000/downloads/critical/q280322/download.asp

JP280322

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: Q280322i.EXE

• http://www.microsoft.com/ntserver/nts/downloads/critical/q280322/default.asp

JP280322

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q280322

• http://www.microsoft.com/technet/security/bulletin

---

MS01-001 - Web クライアントが セキュリティの設定に関わらず NTLM 認証をしてしまう

Posted: 2001/01/11

JP282132

Affected Products:

• Windows Me
  • Windows Me Gold

Patch: 282132usam.exe

• http://download.microsoft.com/download/winme/update/14733/winme/en-us/282132usam.exe

JP282132

Affected Products:

• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Professional
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q282132_W2K_SP2_x86_en

• http://download.microsoft.com/download/win2000platform/Patch/Q282132/NT5/EN-US/Q282132_W2K_SP2_x86_en.EXE

Q282132

Affected Products:

• Office 2000
  • Office 2000 SR-1a
  • Office 2000 SR-1
  • Office 2000 Service Pack 2

Patch: fpwec

• http://officeupdate.microsoft.com/2000/downloaddetails/wecsec.htm

---

MS01-002 - PowerPoint 2000 ファイル パーサーが問題のあるバッファを含む

Posted: 2001/01/22

JP285978

Affected Products:

• PowerPoint 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
  • Office 2000 Service Pack 2

Patch: ppt2ksec.exe

• http://download.microsoft.com/download/powerpoint2000/update/sr-1a/win98me/en-us/ppt2ksec.exe

JP285978

Affected Products:

• PowerPoint 97
  • PowerPoint 97 Gold

Patch: ppt97sec.exe

• http://office.microsoft.com/downloads/9798/Ppt97sec.aspx

---

MS01-003 - Winsock Mutex の弱いアクセス権によりサービスにエラーが発生する

Posted: 2001/01/24

JP279336

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: Q279336i.EXE

• http://www.microsoft.com/ntserver/nts/downloads/critical/q279336/download.asp

JP279336

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q279336i.exe

• http://www.microsoft.com/ntserver/terminalserver/downloads/critical/q279336/download.asp

---

MS01-004 - 不正な .HTR リクエストがファイル フラグメントを読み取ってしまう

Posted: 2001/01/29

JP285985

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: frgvuli.exe

• http://download.microsoft.com/download/winntsp/patch/q285985/nt4/en-us/frgvuli.exe

JP285985

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q285985_W2K_SP3_x86_en.EXE

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=27491

---

MS01-005 - 英語版のみ : 修正パッケージの問題により修正プログラムが削除される

Posted: 2001/01/30

JP281767

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1

Patch: Q281767_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/patch/q281767/nt5/en-us/q281767_w2k_sp2_x86_en.exe

JP285083

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Gold
• Windows 2000 Professional
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Gold

Patch: Q285083_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/patch/q285083/nt5/en-us/q285083_w2k_sp2_x86_en.exe

---

MS01-006 - 無効な RDP データが Terminal Server を異常終了させる

Posted: 2001/01/31

JP286132

Affected Products:

• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q286132_W2K_SP2_x86_en.EXE

• http://www.microsoft.com/Windows2000/downloads/critical/q286132/download.asp

---

MS01-007 - Network DDE Agent の要求が、システム コンテキストでコードを実行してしまう

Posted: 2001/02/05

JP285851

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q285851_W2K_SP3_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q285851/NT5/EN-US/Q285851_W2K_SP3_x86_en.EXE

---

MS01-008 - 不正な NTLMSSP リクエストによりシステム特権でコードが実行される

Posted: 2001/02/07

JP280119

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: Q280119i.EXE

• http://download.microsoft.com/download/winntsp/patch/q280119/nt4/en-us/q280119i.exe

JP280119

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q280119i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=27824

---

MS00-009 - 「Image Source Redirect」の脆弱性に対する対策

Posted: 2000/02/16

JP251109

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2

Patch: Q251109.exe

• http://www.microsoft.com/windows/ie/security/patch5.asp

JP251109

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 Gold

Patch: q251109.exe

• http://www.microsoft.com/windows/ie/security/patch5.asp

---

MS01-009 - 無効な PPTP パケット ストリームがカーネルを枯渇させてしまう

Posted: 2001/02/13

JP283001

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: Q283001i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=27836

JP283001

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q283001ts.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS01-010 - Windows Media Player スキン ファイルが Java コードを実行してしまう

Posted: 2001/02/14

JP287045

Affected Products:

• Windows Media Player 7.0
  • Windows Media Player 7.0 Gold

Patch: wmsu38041

• %windir%\system

---

MS01-011 - ドメイン コントローラへの無効なリクエストが CPU を使い果たす

Posted: 2001/02/20

JP299687

Affected Products:

• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1

Patch: Q299687_W2K_SP3_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q299687/NT5/EN-US/Q299687_W2K_SP3_x86_en.EXE

---

MS00-075 - 「Microsoft VM による ActiveX コンポーネントの制御」 の脆弱性に対する対策

Posted: 2000/10/12

JP275609

Affected Products:

• Microsoft Virtual Machine (VM)
  • Microsoft Virtual Machine (VM) Gold
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold
• Windows Me
  • Windows Me Gold

Patch: msjavx86.exe

• http://www.microsoft.com/java/vm/dl_vm40.htm

JP287030

Affected Products:

• Microsoft Virtual Machine (VM)
  • Windows 2000 Service Pack 1
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Service Pack 1
• Windows 2000 Professional
  • Windows 2000 Service Pack 1

Patch: Q287030_W2K_SP2_x86_en.EXE

• http://www.microsoft.com/Windows2000/downloads/critical/q287030/download.asp

---

MS00-071 - 「Word の差し込み印刷機能」の脆弱性に対する対策

Posted: 2000/10/05

Q274226 (Word 2000)

Affected Products:

• Word 2000
  • Office 2000 SR-1a

Patch: wrdacc.exe

• http://officeupdate.microsoft.com/2000/downloadDetails/wrdacc.htm

Q274226 (Word 2000)

Affected Products:

• Word 97
  • Office 97 SR-2/SR-2b

Patch: wdac97.exe

• http://officeupdate.microsoft.com/2000/downloadDetails/wrdacc.htm

---

MS00-044 - 「ディレクトリ ブラウザ引数の不在」脆弱性に対する対策

Posted: 2000/07/14

JP267559

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: htrdos4i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=22709

JP267559

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q267559_W2K_SP2_x86_en.EXE

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=22708

---

MS00-045 - 「メールとブラウザがリンクしつづけてしまう」脆弱性に対する対策

Posted: 2000/07/20

JP261255

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 Gold
• Outlook Express 5.01
  • Internet Explorer 5.01 Gold

Patch: q261255.exe

• http://www.microsoft.com/windows/ie/download/critical/patch9.htm

JP261255

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2
• Outlook Express 4.01
  • Internet Explorer 4.01 SP2

Patch: Q261255.exe

• http://www.microsoft.com/windows/ie/download/critical/patch9.htm

---

MS00-046 - 「キャッシュ バイパス」の脆弱性に対する対策

Posted: 2000/07/20

JP261255

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 Gold
• Outlook Express 5.01
  • Internet Explorer 5.01 Gold

Patch: q261255.exe

• http://www.microsoft.com/windows/ie/download/critical/patch9.htm

JP261255

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2
• Outlook Express 4.01
  • Internet Explorer 4.01 SP2

Patch: Q261255.exe

• http://www.microsoft.com/windows/ie/download/critical/patch9.htm

---

MS00-048 - 「ストアドプロシージャの権限」脆弱性に対する対策

Posted: 2000/07/07

JP266766

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP1
  • SQL Server 7.0 SP2
• SQL Server Desktop Engine (MSDE) 1.0
  • SQL Server 7.0 SP1
  • SQL Server 7.0 SP2

Patch: s70918i.exe

• http://download.microsoft.com/download/sql70/patch/7.0/win98me/en-us/s70918i.exe

---

MS00-051 - 「Excel REGISTER.ID 関数の脆弱性」に対する対策

Posted: 2000/07/26

Q269252 (Excel 2000)

Affected Products:

• Excel 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
• Office 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a

Patch: xl9p3pkg.exe

• http://officeupdate.microsoft.com/2000/downloaddetails/xl9p3pkg.htm

Q269252 (Excel 2000)

Affected Products:

• Excel 97
  • Office 97 SR-2/SR-2b
• Office 97
  • Office 97 SR-2/SR-2b

Patch: xl8p10pkg.exe

• http://officeupdate.microsoft.com/downloadDetails/xl8p10pkg.htm

---

MS00-054 - 「無効な IPX Ping パケット」の脆弱性に対する対策

Posted: 2000/08/03

Q265334

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5

Patch: 265334US5.EXE

• http://download.microsoft.com/download/win95/update/8982/w95/en-us/265334us5.exe

Q265334

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 265334USA8.EXE

• http://download.microsoft.com/download/win98/update/8982/w98/en-us/265334usa8.exe

---

MS00-056 - 「Microsoft Office HTML Object Tag」の脆弱性に対する対策

Posted: 2000/08/09

Q269880

Affected Products:

• Office 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
• PowerPoint 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
• Word 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
• Excel 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a

Patch: Of9data.exe

• http://officeupdate.microsoft.com/2000/downloadDetails/Of9data.htm

---

MS00-058 - 「特殊化したヘッダ」の脆弱性に対する対策

Posted: 2000/08/14

Q256888

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold

Patch: Q256888_W2K_SP1_x86_en.EXE

• http://www.microsoft.com/Windows2000/downloads/critical/q256888/download.asp

---

MS00-061 - 「Microsoft Money のパスワード」に関する弱点を解決する修正プログラム

Posted: 2000/08/25

Q272232

Affected Products:

• Money 2000
  • Money 2000 Gold
• Money 2001
  • Money 2001 Gold

Patch: Update Internet Information

• On the Tools menu, click Update Internet Information.

---

MS00-042 - 「アクティブ セットアップ ダウンロード」脆弱性に対する対策

Posted: 2000/06/29

JP269368

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 Gold

Patch: Q269368.Exe

• http://www.microsoft.com/windows/ie/download/critical/patch11.htm

JP265258

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2

Patch: q265258.exe

• http://www.microsoft.com/windows/ie/download/critical/patch8.htm

JP265258

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 Gold

Patch: Q265258.exe

• http://www.microsoft.com/windows/ie/download/critical/patch8.htm

JP265258

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP1

Patch: q265258.Exe

• http://www.microsoft.com/windows/ie/download/critical/patch8.htm

---

MS00-043 - 「改ざんされた電子メール ヘッダ」の脆弱性に対する対策

Posted: 2000/07/18

JP261255

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 Gold
• Outlook Express 5.01
  • Internet Explorer 5.01 Gold

Patch: q261255.exe

• http://www.microsoft.com/windows/ie/download/critical/patch9.htm

Q267884

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2
• Outlook Express 4.01
  • Internet Explorer 4.01 SP2

Patch: Q261255.exe

• http://www.microsoft.com/windows/ie/download/critical/patch9.htm

---

MS00-064 - 「ユニキャスト サービスの競合状態」の脆弱性に対する対策

Posted: 2000/09/06

Q273014

Affected Products:

• Windows Media Services 4.0
  • Windows Media Services 4.0 Gold
• Windows Media Services 4.1
  • Windows Media Services 4.1 Gold

Patch: WMSU27678.EXE

• http://download.microsoft.com/download/winmediatech40/update/27678/nt45/en-us/wmsu27678.exe

---

MS00-033 - 「フレームのドメイン照合」、「権限のない cookie アクセス」、「コンポーネント属性の変形」の脆弱性に対する対策

Posted: 2000/05/17

JP269368

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2

Patch: q269368.exe

• http://www.microsoft.com/windows/ie/download/critical/patch11.htm

JP269368

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 Gold

Patch: Q269368.exe

• http://www.microsoft.com/windows/ie/download/critical/patch11.htm

---

MS00-039 - 「SSL 証明確認」の脆弱性に対する対策

Posted: 2000/06/05

JP269368

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2

Patch: q269368.exe

• http://www.microsoft.com/windows/ie/download/critical/patch11.htm

JP269368

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 Gold

Patch: Q269368.exe

• http://www.microsoft.com/windows/ie/download/critical/patch11.htm

---

MS00-041 - 「DTS パスワード」の脆弱性に対する対策

Posted: 2000/06/13

JP264880

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP1
  • SQL Server 7.0 SP2

Patch: s70918i.exe

• http://download.microsoft.com/download/sql70/patch/7.0/win98me/en-us/s70918i.exe

---

MS00-049 - 「Office HTML Script および IE Script」の脆弱性に対する対策

Posted: 2000/07/13

JP268365

Affected Products:

• Excel 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
• PowerPoint 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
• Office 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a

Patch: Addinsec.exe

• http://officeupdate.microsoft.com/2000/downloaddetails/Addinsec.htm

Q268365 (Excel 2000)

Affected Products:

• PowerPoint 97
  • PowerPoint 97 Gold
• Office 97
  • Office 97 Gold

Patch: ppt97sec.EXE

• http://officeupdate.microsoft.com/downloaddetails/PPt97sec.htm

JP269368

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2

Patch: q269368.exe

• http://www.microsoft.com/windows/ie/download/critical/patch11.htm

JP269368

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 Gold

Patch: Q269368.exe

• http://www.microsoft.com/windows/ie/download/critical/patch11.htm

JP269368

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP1

Patch: q269368.Exe

• http://www.microsoft.com/windows/ie/download/critical/patch11.htm

JP269368

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 Gold

Patch: Q269368.Exe

• http://www.microsoft.com/windows/ie/download/critical/patch11.htm

---

MS00-050 - 「Telnet Server Flooding」 の脆弱性に対する対策

Posted: 2000/07/24

JP267843

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: q267843_w2k_sp2_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/q267843/NT5/EN-US/Q267843_W2K_SP2_x86_en.EXE

---

MS00-055 - 「Scriptlet によるレンダリング」の脆弱性に対する対策

Posted: 2000/08/09

JP269368

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2

Patch: q269368.exe

• http://www.microsoft.com/windows/ie/download/critical/patch11.htm

JP269368

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 Gold

Patch: Q269368.exe

• http://www.microsoft.com/windows/ie/download/critical/patch11.htm

JP269368

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP1

Patch: q269368.Exe

• http://www.microsoft.com/windows/ie/download/critical/patch11.htm

JP269368

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 Gold

Patch: Q269368.Exe

• http://www.microsoft.com/windows/ie/download/critical/patch11.htm

---

MS00-034 - Microsoft Office 2000 および Office 2000 ファミリー製品の脆弱性に対する対策

Posted: 2000/05/12

Q262767

Affected Products:

• Office 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
• PowerPoint 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
• Outlook 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
• Word 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
• Excel 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
• Photo Draw 2000 Version 2
  • Photo Draw 2000 Version 2 Gold
• Photo Draw 2000 Version 1
  • PictureIt 2000 Gold
  • Photo Draw 2000 Version 1 Gold
• Publisher 2000
  • Publisher 2000 Gold
• Project 2000
  • Project 2000 Gold
• FrontPage 2000
  • Front Page 2000 Gold
• Works 2000
  • Works 2000 Gold
• Access 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a

Patch: Uactlsec.exe

• http://officeupdate.microsoft.com/2000/downloadDetails/Uactlsec.htm

---

MS00-035 - 「SQL Server 7.0 Service Pack のパスワード」の脆弱性に対する対策

Posted: 2000/05/30

JP263968

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP1
  • SQL Server 7.0 SP2

Patch: sqlsp.exe

• http://download.microsoft.com/download/sql70/sppwfix/7.0/win98/en-us/sqlsp.exe

---

MS00-037 - 「HTML Help File Code Execution」の脆弱性に対する対策

Posted: 2000/06/02

JP259166

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 Gold
• Internet Explorer 4.0
  • Internet Explorer 4.0 Gold
• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: hhupd.exe

• http://download.microsoft.com/download/ie5/patch/1.0/w9xnt4/en-us/hhupd.exe

JP259166

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 Gold

Patch: Q259166_W2K_SP1_x86_en.EXE

• http://download.microsoft.com/download/ie501/patch/1.0/nt5/en-us/q259166_w2k_sp1_x86_en.exe

---

MS00-038 - 「Windows Media Encoder の異常な形式の要求」の脆弱性に対する対策

Posted: 2000/05/30

Q264133

Affected Products:

• Windows Media Encoder 4.0
  • Windows Media Encoder 4.0 Gold
• Windows Media Encoder 4.1
  • Windows Media Encoder 4.1 Gold

Patch: WMSU20935a.EXE

• http://download.microsoft.com/download/winmediatech40/update/20935a/win98/en-us/wmsu20935a.exe

---

MS00-010 - 「サイト ウィザード入力確認」の脆弱性に対する対策

Posted: 2000/02/18

Q252614

Affected Products:

• Site Server 3.0, Commerce Edition
  • Site Server 3.0 Gold
  • Site Server 3.0 SP1
  • Site Server 3.0 SP2
  • Site Server 3.0 SP3
  • Site Server 3.0 SP4

Patch: Q252614.zip

• http://www.microsoft.com/downloads/Release.asp?ReleaseID=18767

---

MS00-012 - 「リモート エージェントのアクセス許可」の脆弱性に対する対策

Posted: 2000/02/22

Q249847

Affected Products:

• Systems Management Server 2.0
  • Systems Management Server 2.0 Gold
  • Systems Management Server 2.0 SP1

Patch: Q249847i.EXE

• http://download.microsoft.com/download/sms20/patch/q249847/nt4/en-us/q249847i.exe

---

MS00-013 - 「Windows Media サービス ハンドシェイクの順序不良」の脆弱性に対する対策

Posted: 2000/02/23

Q253943

Affected Products:

• Windows Media Services 4.0
  • Windows Media Services 4.0 Gold
• Windows Media Services 4.1
  • Windows Media Services 4.1 Gold

Patch: WMSU4954_NT4.EXE

• http://download.microsoft.com/download/winmediatech40/update/4954/nt4/en-us/wmsu4954_nt4.exe

Q253943

Affected Products:

• Windows Media Services 4.1
  • Windows Media Services 4.1 Gold
• Windows Media Services 4.0
  • Windows Media Services 4.0 Gold

Patch: WMSU4954_Win2000.EXE

• http://download.microsoft.com/download/winmediatech40/update/4954/nt5/en-us/wmsu4954_win2000.exe

---

MS00-014 - 「SQL クエリー」の脆弱性に対する対策

Posted: 2000/03/08

JP256052

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP1
  • SQL Server 7.0 Gold
• SQL Server Desktop Engine (MSDE) 1.0
  • SQL Server 7.0 Gold
  • SQL Server 7.0 SP1

Patch: s70780i.exe

• http://download.microsoft.com/download/sql70/patch/2000.3.1.0/nt4alpha/en-us/s70780i.exe

---

MS00-015 - 「Microsoft Clip Art Gallery」における脆弱性に対する対策

Posted: 2000/03/06

Q256167

Affected Products:

• Office 2000
  • Office 2000 Gold
• Works 2000
  • Works 2000 Gold
• PictureIt 2000
  • PictureIt 2000 Gold
• Home Publishing 2000
  • Home Publishing 2000 Gold
• Publisher 99
  • Publisher 99 Gold
• Photo Draw 2000 Version 1
  • Photo Draw 2000 Version 1 Gold
• Greetings 2000
  • Greetings 2000 Gold

Patch: cilupdt.exe

• http://download.microsoft.com/download/office2000/patch/4.71.1015.0/win98/en-us/cilupdt.exe

---

MS00-016 - 「改ざんされたメディア ライセンス要求」の脆弱性に対する対策

Posted: 2000/03/17

Q257200

Affected Products:

• Windows Media Rights Manager 1
  • Windows Media Rights Manager 1 Gold

Patch: WMRMU8912_NT4.EXE

• http://download.microsoft.com/download/winmediatech40/update/8912/nt4/en-us/wmrmu8912_nt4.exe

---

MS00-017 - 「パスに DOS デバイス名が含まれる場合」の脆弱性に対する対策

Posted: 2000/03/16

Q256015

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5

Patch: 256015USA5.EXE

• http://download.microsoft.com/download/win95/update/6467/w95/en-us/256015usa5.exe

Q256015

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 256015USA8.EXE

• http://download.microsoft.com/download/win98se/update/6467/w98/en-us/256015usa8.exe

---

MS00-018 - 「チャンクエンコーディングされたポスト」の脆弱性に対する対策

Posted: 2000/03/20

JP252693

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: chkenc4i.exe

• http://download.microsoft.com/download/iis40/patch/4.2.739.1/nt4/en-us/chkenc4i.exe

---

MS00-019 - 「仮想化された UNC シェア」の脆弱性に対する対策

Posted: 2000/03/30

JP249599

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: uncsec4i.exe

• http://download.microsoft.com/download/iis40/patch/4.2.736.1/nt4/en-us/uncsec4i.exe

JP249599

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold

Patch: Q249599_W2K_SP1_X86_en.EXE

• http://download.microsoft.com/download/win2000platform/patch/q249599/nt5/en-us/q249599_w2k_sp1_x86_en.exe

---

MS00-022 - 「XLM Text Macro」の脆弱性に対する対策

Posted: 2000/04/03

Q255605

Affected Products:

• Excel 97
  • Office 97 SR-2/SR-2b
• Office 97
  • Office 97 SR-2/SR-2b

Patch: xl8p9pkg.exe

• http://www.officeupdate.com/downloadDetails/Xl8p9pkg.htm?s=/downloadCatalog/dldExcel.asp

---

MS00-023 - 「無数のエスケープ文字」の脆弱性に対する対策

Posted: 2000/04/12

JP254142

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: escseq4i.exe

• http://download.microsoft.com/download/iis40/patch/4.2.740.1/nt4alpha/en-us/escseq4i.exe

JP254142

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold

Patch: Q254142_W2K_SP1_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/patch/q254142/nt5/en-us/q254142_w2k_sp1_x86_en.exe

---

MS00-024 - 「改ざんされたレジストリが暗号キーに与える影響」の脆弱性に対する対策

Posted: 2000/04/12

JP259496

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: Q259496i.exe

• http://download.microsoft.com/download/winntsp/patch/q259496/nt4/en-us/q259496i.exe

JP259496

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q259496i.Exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=20330

---

MS00-025 - 「Link View サーバー側コンポーネント」の脆弱性に対する対策

Posted: 2000/04/14

JP259799

Affected Products:

• FrontPage 98 Server Extensions
  • FrontPage 98 Server Extensions Gold
• Internet Information Server 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Personal Web Server 4.0
  • Personal Web Server 4.0 Gold

Patch: Q259799

• http://www.microsoft.com/technet/support/kb.asp?ID=259799

---

MS00-028 - 「サーバー側イメージ マップ コンポーネント」の脆弱性に対する対策

Posted: 2000/04/21

JP260267

Affected Products:

• FrontPage 97 Server Extensions
  • FrontPage 97 Server Extensions Gold
• FrontPage 98 Server Extensions
  • FrontPage 98 Server Extensions Gold
• Internet Information Server 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Personal Web Server 4.0
  • Personal Web Server 4.0 Gold

Patch: Q260267

• http://www.microsoft.com/technet/support/kb.asp?ID=260627

---

MS00-030 - 「URL 内の変形された拡張子データ」の脆弱性に対する対策

Posted: 2000/05/11

JP260205

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: myrdot4i.exe

• http://download.microsoft.com/download/iis40/patch/q260205/nt4alpha/en-us/myrdot4i.exe

JP260205

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold

Patch: Q260205_W2K_SP1_x86_en.EXE

• http://www.microsoft.com/Windows2000/downloads/critical/q260205/download.asp

---

MS00-031 - 「区切り文字なしの .HTR リクエスト」 および 「.HTR 経由のファイル フラグメントの読み取り」の脆弱性に対する対策

Posted: 2000/05/10

JP267559

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold

Patch: q267559_w2k_sp2_x86_en.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=22708

JP260838

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: ismpst4i.exe

• http://download.microsoft.com/download/iis40/patch/q260838/nt4alpha/en-us/ismpst4i.exe

---

MS99-053 - 「マルチスレッド SSL ISAPI フィルタ」の脆弱性に対する対策

Posted: 1999/12/02

JP244613

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 4

Patch: sslune4i.exe

• http://download.microsoft.com/download/iis40/patch/4.02.0728/nt4/en-us/sslune4i.exe

---

MS99-054 - 「WPAD Spoofing」の脆弱性に対する対策

Posted: 1999/12/01

JP247333

Affected Products:

• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: Q247333

• http://support.microsoft.com/support/kb/articles/q247/3/33.asp

---

MS99-058 - 「仮想ディレクトリの名前」の脆弱性

Posted: 1999/12/21

JP238606

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 4

Patch: vrdcon4i.exe

• http://download.microsoft.com/download/iis40/patch/4.2.727.1/nt4/en-us/vrdcon4i.exe

---

MS99-059 - 「不正なTDSパケット ヘッダ」の脆弱性に対する対策

Posted: 1999/12/20

JP248749

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP1

Patch: S70761i.exe

• http://download.microsoft.com/download/sql70/patch/7.0/win98/en-us/s70761i.exe

---

MS99-060 - 「HTML メール添付ファイル」の脆弱性に対する対策

Posted: 1999/12/22

Q249082

Affected Products:

• Outlook Express 5 for Macintosh
  • Outlook Express 5 for Macintosh Gold
• Internet Explorer 4.5 for Macintosh
  • Internet Explorer 4.5 for Macintosh Gold

Patch: MacFiles

• http://support.microsoft.com/support/kb/articles/q249/0/82.asp

---

MS99-061 - 「エスケープ文字解析」の脆弱性に対する対策

Posted: 1999/12/21

JP246401

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: unschx4i.exe

• http://download.microsoft.com/download/iis40/patch/4.2.732.1/nt4/en-us/unschx4i.exe

---

MS99-052 - 「パスワードをキャッシュするレガシ メカニズムが与える」脆弱性に対する対策

Posted: 1999/11/29

Q168115

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5

Patch: 168115us5.exe

• http://download.microsoft.com/download/win95/update/168115/w95/en-us/168115us5.exe

Q168115

Affected Products:

• Windows 98
  • Windows 98 Gold

Patch: 168115us8.exe

• http://download.microsoft.com/download/win98/update/168115/w98/en-us/168115us8.exe

---

MS99-051 - 「IE タスク スケジューラ」の脆弱性に対する対策

Posted: 1999/11/29

JP246972

Affected Products:

• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: q246972

• http://support.microsoft.com/support/kb/articles/q246/9/72.asp

---

MS99-049 - 「URL を用いたファイルアクセス」の脆弱性に対する対策

Posted: 1999/11/12

Q245729

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5

Patch: 245729us5.exe

• http://download.microsoft.com/download/win95/update/245729/w95/en-us/245729us5.exe

Q245729

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1

Patch: 245729us8.exe

• http://download.microsoft.com/download/win98/update/245729/w98/en-us/245729us8.exe

---

MS99-048 - 「Active Setup Control」の脆弱性に対する対策

Posted: 1999/11/11

JP244540

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2

Patch: q244540.exe

• http://www.microsoft.com/msdownload/iebuild/ascontrol/en/136473.htm

JP244540

Affected Products:

• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: Q244540.exe

• http://www.microsoft.com/msdownload/iebuild/ascontrol/en/136473.htm

---

MS99-044 - 「Excel SYLK」の脆弱性に対する対策

Posted: 1999/10/20

Q241900 (XL97)

Affected Products:

• Excel 97
  • Office 97 SR-2/SR-2b
• Office 97
  • Office 97 SR-2/SR-2b

Patch: xl8p7pkg.exe

• http://officeupdate.microsoft.com/downloadDetails/Xl8p7pkg.htm

Q241900 (XL97)

Affected Products:

• Excel 2000
  • Office 2000 Gold
• Office 2000
  • Office 2000 Gold

Patch: xl9p2pkg.exe

• http://officeupdate.microsoft.com/2000/downloadDetails/XL9p1pkg.htm

---

MS99-043 - 「Javascript リダイレクト」の脆弱性に対する対策

Posted: 1999/10/18

JP244356

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2

Patch: q244356.exe

• http://www.microsoft.com/msdownload/iebuild/jsredir/en/138099.htm

JP244357

Affected Products:

• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: q244357.exe

• http://www.microsoft.com/msdownload/iebuild/jsredir/en/138101.htm

---

MS99-042 - 「IFRAME ExecCommand」の脆弱性に対する対策

Posted: 1999/10/11

JP243638

Affected Products:

• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: q243638.exe

• http://www.microsoft.com/msdownload/iebuild/dlbhav/en/dlbhav.htm

---

MS99-040 - IE 5 「ダウンロード動作」の脆弱性に対する対策

Posted: 1999/09/28

JP243638

Affected Products:

• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: q243638.exe

• http://www.microsoft.com/msdownload/iebuild/dlbhav/en/dlbhav.htm

---

MS99-037 - 「ImportExportFavorites」 の脆弱性に対する対策

Posted: 1999/09/10

Q241361

Affected Products:

• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: q241361.exe

• http://www.microsoft.com/msdownload/iebuild/iefav/en/iefav.htm

Q241361

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2

Patch: Q241361.exe

• http://www.microsoft.com/msdownload/iebuild/iefav/en/iefav.htm

---

MS99-035 - 「Set Cookie ヘッダによるキャッシュ」の脆弱性に対する対策

Posted: 1999/09/10

Q238647

Affected Products:

• Site Server 3.0
  • Site Server 3.0 Gold
  • Site Server 3.0 SP1
  • Site Server 3.0 SP2
• Site Server 3.0, Commerce Edition
  • Site Server 3.0 Gold
  • Site Server 3.0 SP1
  • Site Server 3.0 SP2
• Microsoft Commercial Internet System 2.0
  • Microsoft Commercial Internet System 2.0 Gold
• Microsoft Commercial Internet System 2.5
  • Microsoft Commercial Internet System 2.5 Gold

Patch: q238647x86eng.exe

• ftp://ftp.microsoft.com/bussys/sitesrv/sitesrv-public/fixes/usa/siteserver3/Hotfixes-PostSP2/ProxyCache/

---

MS99-033 - 「改ざんされた Telnet 引数」の脆弱性に対する対策

Posted: 1999/09/09

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5

Patch: telnet95.exe

• http://www.microsoft.com/windows95/downloads/contents/WUCritical/Telnet/Default.asp

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: TelnetUp.EXE

• http://www.microsoft.com/windows98/downloads/contents/wucritical/telnet/license.asp

---

MS99-032 - 「Scriptlet.typlib/Eyedog」の脆弱性に対する対策

Posted: 1999/08/31

JP240308

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2
  • Internet Explorer 4.01 Gold
  • Internet Explorer 4.01 SP1
• Internet Explorer 4.0
  • Internet Explorer 4.0 Gold
• Internet Explorer 5
  • Internet Explorer 5 Gold
• Outlook Express 4.01
  • Internet Explorer 4.01 Gold
  • Internet Explorer 4.01 SP1
  • Internet Explorer 4.01 SP2

Patch: q240308.exe

• http://www.microsoft.com/msdownload/iebuild/scriptlet/en/125795.htm

---

MS99-030 - Office 「ODBC ドライバ」の脆弱性に対する対策

Posted: 1999/08/20

Q239114

Affected Products:

• Office 95
  • Office 95 Gold

Patch: Jet30Pkg.exe

• http://officeupdate.microsoft.com/downloadDetails/excel95odbc.htm

Q239114

Affected Products:

• Office 97
  • Office 97 Gold
  • Office 97 SR-1
  • Office 97 SR-2/SR-2b

Patch: jetCopkg.exe

• http://officeupdate.microsoft.com/downloadDetails/excel97odbc.htm

Q239114

Affected Products:

• Office 2000
  • Office 2000 Gold
  • Office 2000 SR-1
  • Office 2000 SR-1a

Patch: JetcoPkg.exe

• http://officeupdate.microsoft.com/2000/downloadDetails/excel2000odbc.htm

---

MS99-022 - Double Byte Code Page Vulnerability

Posted: 1999/06/24

JP233335

Affected Products:

• Internet Information Server 3.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5

Patch: fesrc3i.exe

• ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/fesrc-fix/

JP233335

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 3

Patch: fesrc4i.exe

• ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/fesrc-fix/

---

MS99-019 - Malformed HTR Request Vulnerability

Posted: 1999/06/15

JP234905

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5

Patch: extfixi.exe

• ftp://ftp.microsoft.com/bussys/IIS/iis-public/fixes/usa/ext-fix/

---

MS99-018 - Malformed Favorites Icon Vulnerability

Posted: 1999/05/27

Q241361

Affected Products:

• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: Q241361.exe

• http://www.microsoft.com/msdownload/iebuild/iefav/en/iefav.htm

Q241361

Affected Products:

• Internet Explorer 4.0
  • Internet Explorer 4.0 Gold
• Internet Explorer 4.01
  • Internet Explorer 4.01 Gold
  • Internet Explorer 4.01 SP1
  • Internet Explorer 4.01 SP2

Patch: q241361.exe

• http://www.microsoft.com/msdownload/iebuild/iefav/en/iefav.htm

---

MS99-014 - Excel 97 Virus Warning Vulnerabilities

Posted: 1999/05/07

Q231304

Affected Products:

• Office 97
  • Office 97 SR-2/SR-2b
• Excel 97
  • Office 97 SR-2/SR-2b

Patch: Xl8p9pkg.exe

• http://officeupdate.microsoft.com/downloadDetails/Xl8p9pkg.htm

---

MS99-012 - MSHTML Update Available for Internet Explorer

Posted: 1999/04/21

JP226326

Affected Products:

• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: mshtml5.exe

• http://www.microsoft.com/msdownload/iebuild/mshtml/en/72111.htm

JP226326

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP1
  • Internet Explorer 4.01 SP2

Patch: mshtml4.exe

• http://www.microsoft.com/msdownload/iebuild/mshtml/en/72113.htm

---

MS99-011 - DHTML Edit Vulnerability

Posted: 1999/04/21

JP226326

Affected Products:

• Internet Explorer 4.0
  • Internet Explorer 4.0 Gold
• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: DHTMLED5.EXE

• http://www.microsoft.com/msdownload/iebuild/DHTML_Edit/en/71370.htm

---

MS01-012 - Outlook と Outlook Express の vCard ハンドラが問題のあるバッファを含む

Posted: 2001/02/22

JP283908

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP1
• Outlook Express 5.5
  • Internet Explorer 5.5 SP1

Patch: q283908.exe

• http://www.microsoft.com/windows/ie/download/critical/q283908/download.asp

JP283908

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP1
• Outlook Express 5.01
  • Internet Explorer 5.01 SP1

Patch: Q283908.exe

• http://www.microsoft.com/windows/ie/download/critical/q283908/default.asp

---

MS01-013 - Windows 2000 イベント ビューアが問題のあるバッファを含む

Posted: 2001/02/26

JP285156

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q285156_W2K_SP3_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q285156/NT5/EN-US/Q285156_W2K_SP3_x86_en.EXE

---

MS01-014 - 不正な URL により IIS 5.0 及び Exchange 2000 のサービスにエラーが発生する

Posted: 2001/03/01

JP286818

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: Q286818_W2K_SP3_x86_en.EXE

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=28155

JP287678

Affected Products:

• Exchange 2000 Enterprise Server
  • Exchange 2000 Gold
• Exchange 2000 Server
  • Exchange 2000 Gold

Patch: Q287678engi386.EXE

• http://download.microsoft.com/download/exchangeentserver/patch/06.00.54.4418/nt5/en-us/q287678engi386.exe

---

MS01-015 - Internet Explorer がキャッシュされたコンテンツの場所を漏えいしてしまう

Posted: 2001/03/06

JP279328

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP1

Patch: q279328.exe

• http://www.microsoft.com/windows/ie/download/critical/q279328/default.asp

JP286045

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP1

Patch: q286045.exe

• http://www.microsoft.com/windows/ie/download/critical/q286045/default.asp

JP286043

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP1
• Internet Explorer 5.5
  • Internet Explorer 5.5 SP1

Patch: q286043.exe

• http://www.microsoft.com/windows/ie/download/critical/q286043/default.asp

Q279328

Affected Products:

• Windows Script 5.1
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: scripten.exe

• http://www.microsoft.com/msdownload/vbscript/scripting51.asp

Q279328

Affected Products:

• Windows Script 5.1
  • Windows 95 SR 2.5
  • Windows 95 SR 2.1
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
  • Windows 98 Gold
  • Windows 98 SP1

Patch: ste51en.exe

• http://www.microsoft.com/msdownload/vbscript/scripting51.asp

Q279328

Affected Products:

• Windows Script 5.5
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Scripten.exe

• http://www.microsoft.com/msdownload/vbscript/scripting.asp

Q279328

Affected Products:

• Windows Script 5.5
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5
  • Windows 98 Gold
  • Windows 98 SP1
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Scr55en.exe

• http://www.microsoft.com/msdownload/vbscript/scripting.asp

---

MS01-016 - 不正な WebDAV リクエストにより IIS が CPU リソースを使い果たす

Posted: 2001/03/08

JP291845

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q291845_W2K_SP2_x86_en.EXE

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=28564

---

MS01-017 - VeriSign 発行の誤ったデジタル証明書による、なりすましの危険性

Posted: 2001/03/22

JP293818

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold
• Windows Me
  • Windows Me Gold

Patch: Crlupd.exe

• http://download.microsoft.com/download/win2000platform/Update/q293818/WIN98Me/EN-US/crlupd.exe

JP293818

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: crlupd.exe

• http://download.microsoft.com/download/win2000platform/Update/q293818/WIN98Me/EN-US/crlupd.exe

JP293818

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 4
  • Windows NT4 Terminal Server Service Pack 5
  • Windows NT4 Terminal Server Service Pack 6

Patch: crlupdts.exe

• http://www.microsoft.com/technet/security/bulletin

JP293818

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: crlupD.exe

• http://download.microsoft.com/download/win2000platform/Update/q293818/WIN98Me/EN-US/crlupd.exe

---

MS01-018 - Visual Studio 6.0 VB T-SQL オブジェクトが問題のあるバッファを含む

Posted: 2001/03/27

Q281297

Affected Products:

• Visual Studio 6.0
  • Visual Studio 6.0 SP 5
• Visual Basic 6.0
  • Visual Basic 6.0 Gold

Patch: Q281297.EXE

• http://msdn.microsoft.com/vstudio/downloads/debugging/default.asp

---

MS01-019 - 圧縮フォルダのパスワードが復元されてしまう

Posted: 2001/03/28

Q252694

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 252694usa8.exe

• http://download.microsoft.com/download/win98/update/14715/w98/en-us/252694usa8.exe

Q252694

Affected Products:

• Windows Me
  • Windows Me Gold

Patch: 252694usam.exe

• http://download.microsoft.com/download/winme/update/14715/winme/en-us/252694usam.exe

---

MS01-020 - 不適切な MIME ヘッダーが原因で Internet Explorer が電子メールの添付ファイルを実行する

Posted: 2001/03/29

JP290108

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP1

Patch: Q290108.exe

• http://www.microsoft.com/windows/ie/download/critical/Q290108/default.asp

JP290108

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP1

Patch: q290108.exe

• http://www.microsoft.com/windows/ie/download/critical/Q290108/default.asp

---

MS01-021 - Web 公開時に異常なリクエストによって Web Proxy サービスが停止する

Posted: 2001/04/16

JP295279

Affected Products:

• ISA Server 2000
  • ISA Server 2000 Gold

Patch: isahf63.exe

• http://download.microsoft.com/download/isaserver2000/webproxy/q295279/nt5/en-us/isahf63.exe

---

MS01-022 - WebDAV Service Provider によりスクリプトがユーザーとしてリクエストを行う

Posted: 2001/04/18

JP296441

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold
• Windows Me
  • Windows Me Gold

Patch: rbupdate.exe

• http://download.microsoft.com/download/win2000platform/update/1.5/win98me/en-us/rbupdate.exe

JP296441

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows 2000 Professional
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Rbupdate.exe

• http://download.microsoft.com/download/win2000platform/update/1.5/win98me/en-us/rbupdate.exe

---

MS01-023 - ISAPI エクステンションの未チェックのバッファにより IIS 5.0 サーバーのセキュリティが侵害される

Posted: 2001/05/01

JP296576

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q296576_W2K_SP2_x86_en.EXE

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=29321

---

MS01-024 - ドメイン コントローラへの不正なリクエストがメモリを使い果たす

Posted: 2001/05/08

JP299687

Affected Products:

• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1

Patch: Q299687_W2K_SP3_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q299687/NT5/EN-US/Q299687_W2K_SP3_x86_en.EXE

---

MS01-025 - Index Server の検索機能が未チェックのバッファを含む

Posted: 2001/05/10

JP294472

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Index Server 2.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Q294472i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=29660

JP296185

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Index Server 2.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Q296185i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=29631

JP296185

Affected Products:

• Indexing Services for Windows 2000
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Professional
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q296185_W2K_SP3_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q296185/NT5/EN-US/Q296185_W2K_SP3_x86_en.EXE

---

MS01-026 - 2001 年 5 月 14 日 IIS 用の累積的な修正プログラム

Posted: 2001/05/14

JP293826

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q293826_W2K_SP3_x86_en.EXE

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=29764

JP295534

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Q295534i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=29787

---

MS01-027 - Web サーバー証明書検証の問題により Web サイトの偽装が可能になる

Posted: 2001/05/16

JP295106

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP2

Patch: q295106.exe

• http://www.microsoft.com/windows/ie/download/critical/q295106/default.asp

JP299618

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP1

Patch: q299618.exe

• http://www.microsoft.com/windows/ie/download/critical/q299618/default.asp

---

MS01-028 - テンプレートにリンクしている RTF 文書が警告なしでマクロを実行する

Posted: 2001/05/21

JP288266

Affected Products:

• Word 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
  • Office 2000 Service Pack 2

Patch: wd2kmsec.exe

• http://download.microsoft.com/download/word2000/wd2kmse/1/win98me/en-us/wd2kmsec.exe

JP288266

Affected Products:

• Word 97
  • Office 97 SR-2/SR-2b

Patch: wd97mcrs.exe

• http://download.microsoft.com/download/word97win/patch/4.71.1015.0/w98nt42kme/en-us/wd97mcrs.exe

---

MS01-029 - Windows Media Player .ASX プロセッサが未チェックのバッファを含む

Posted: 2001/05/23

JP296138

Affected Products:

• Windows Media Player 6.4
  • Windows Media Player 6.4 Gold
• Windows Media Player 6.4 for Windows 2000
  • Windows Media Player 6.4 for Windows 2000 Gold

Patch: WMSU47357.exe

• http://download.microsoft.com/download/winmediaplayer/update/47357/win98/en-us/wmsu47357.exe

JP296138

Affected Products:

• Windows Media Player 7.0
  • Windows Media Player 7.0 Gold

Patch: mp71.exe

• http://download.microsoft.com/download/winmediaplayer/wmp71/7.1/w982kme/en-us/mp71.exe

JP296138

Affected Products:

• Windows Media Player 6.4 for Windows NT 4.0
  • Windows Media Player 6.4 for Windows NT 4.0 Gold

Patch: Wmsu47357.exe

• http://download.microsoft.com/download/winmediaplayer/update/47357/win98/en-us/wmsu47357.exe

---

MS01-030 - Exchange 2000 Outlook Web Access Service で添付ファイルの不正処理によりスクリプトが実行される

Posted: 2001/06/06

JP301361

Affected Products:

• Exchange Server 5.5
  • Exchange Server 5.5 SP4

Patch: Q301361i386.EXE

• http://download.microsoft.com/download/exch55/patch/05.05.12.2655/nt45/en-us/q301361i386.exe

JP299535

Affected Products:

• Exchange 2000 Enterprise Server
  • Exchange 2000 Gold
• Exchange 2000 Server
  • Exchange 2000 Gold

Patch: Q299535engi386.EXE

• http://download.microsoft.com/download/exchangeentserver/patch/06.00.27.4419/nt5/en-us/q299535engi386.exe

---

MS01-031 - 推測可能な名前付きパイプが Telnet 経由でアクセス権の昇格を可能にする

Posted: 2001/06/07

JP299553

Affected Products:

• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Professional
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q299553_W2K_SP3_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q299553/NT5/EN-US/Q299553_W2K_SP3_x86_en.EXE

---

MS01-032 - SQL クエリ方法により、キャッシュされた管理者接続が再使用される

Posted: 2001/06/12

JP299717

Affected Products:

• SQL Server 2000
  • SQL Server 2000 Gold
• SQL Server Desktop Engine (MSDE) 2000
  • SQL Server Desktop Engine (MSDE) 2000 Gold

Patch: s80296i.exe

• http://download.microsoft.com/download/sqlsvr2000/patch/s80296i/w98nt42kme/en-us/s80296i.exe

JP299717

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP3

Patch: s70996i.exe

• http://download.microsoft.com/download/sql70/patch/s70996i/win98me/en-us/s70996i.exe

---

MS01-033 - Index Server ISAPI エクステンションの未チェックのバッファにより Web サーバーが攻撃される

Posted: 2001/06/18

JP300972

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Indexing Services for Windows 2000
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q300972_W2K_SP3_x86_en.EXE

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=30800

JP300972

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 6a
• Index Server 2.0
  • Windows NT4 Service Pack 6a

Patch: Q300972i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=30833

JP300972

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q300972ts.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS01-034 - 不正な Word 文書が自動的にマクロを実行する

Posted: 2001/06/21

JP288266

Affected Products:

• Word 97
  • Office 97 SR-2/SR-2b

Patch: wd97mcrs.exe

• http://download.microsoft.com/download/word97win/patch/4.71.1015.0/w98nt42kme/en-us/wd97mcrs.exe

JP288266

Affected Products:

• Word 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
  • Office 2000 Service Pack 2

Patch: wd2kmsec.exe

• http://download.microsoft.com/download/word2000/wd2kmse/1/win98me/en-us/wd2kmsec.exe

JP302294

Affected Products:

• Word 2002
  • Word 2002 Gold

Patch: WRD1001.exe

• http://office.microsoft.com/downloads/2002/wrd1001.aspx

---

MS01-035 - FrontPage Server Extension のサブコンポーネントが未チェックのバッファを含む

Posted: 2001/06/21

JP300477

Affected Products:

• Front Page 2000 Server Extensions
  • Windows 2000 Service Pack 2

Patch: Q300477_W2K_SP3_x86_en.EXE

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=30727

JP300477

Affected Products:

• Front Page 2000 Server Extensions
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Q300477.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=31038

---

MS01-036 - LDAP SSL で公開される機能がパスワードの変更を可能にする

Posted: 2001/06/25

JP299687

Affected Products:

• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1

Patch: Q299687_W2K_SP3_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q299687/NT5/EN-US/Q299687_W2K_SP3_x86_en.EXE

---

MS01-037 - SMTP サービスの認証エラーがメールの中継を可能にする

Posted: 2001/07/05

JP302755

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q302755_W2k_SP3_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q302755/NT5/EN-US/Q302755_W2k_SP3_x86_en.exe

---

MS01-038 - Outlook ビュー コントロールにより、安全でない機能が利用できる

Posted: 2001/07/12

JP303833

Affected Products:

• Outlook 2000
  • Office 2000 Service Pack 2

Patch: outlctlx.exe

• http://download.microsoft.com/download/outlook2000/outlctlx/1/win98me/en-us/outlctlx.exe

JP303825

Affected Products:

• Outlook 2002
  • Outlook 2002 Gold

Patch: olk1003.exe

• http://office.microsoft.com/downloads/2002/OLK1003.aspx

---

MS01-039 - Services for Unix 2.0 の Telnet および NFS サービスでメモリ リークが発生する

Posted: 2001/07/24

JP294380

Affected Products:

• Services for Unix 2.0 (NT)
  • Services for Unix 2.0 (NT) Gold

Patch: q294380_sfu_2_x86.exe

• http://download.microsoft.com/download/winntsp/patch/q294380/nt4/en-us/q294380_sfu_2_x86.exe

JP301514

Affected Products:

• Services for Unix 2.0 (NT)
  • Services for Unix 2.0 (NT) Gold

Patch: q301514_sfu_2_x86.exe

• http://download.microsoft.com/download/winntsp/patch/q301514/nt4/en-us/q301514_sfu_2_x86.exe

JP294380

Affected Products:

• Services for Unix 2.0 (Win2K)
  • Services for Unix 2.0 (Win2K) Gold

Patch: q294380_sfu_2_x86.Exe

• http://download.microsoft.com/download/win2000platform/patch/q294380/nt5/en-us/q294380_sfu_2_x86.exe

JP301514

Affected Products:

• Services for Unix 2.0 (Win2K)
  • Services for Unix 2.0 (Win2K) Gold

Patch: q301514_sfu_2_x86.Exe

• http://www.microsoft.com/technet/security/bulletin

---

MS01-040 - 無効な RDP データの受信により、ターミナル サービスでメモリ リークが発生する場合がある

Posted: 2001/07/25

JP292435

Affected Products:

• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: q292435_w2k_sp3_x86_en.exe

• http://download.microsoft.com/download/win2000platform/patch/q292435/nt5/en-us/q292435_w2k_sp3_x86_en.exe

JP292435

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 5
  • Windows NT4 Terminal Server Service Pack 6

Patch: q292435i.exe

• http://download.microsoft.com/download/winntsp/patch/q292435/nt4/en-us/q292435i.exe

---

MS01-041 - 不正な RPC リクエストがサービスを異常終了させる

Posted: 2001/07/26

JP299444

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: Q299444i.exe

• http://www.microsoft.com/downloads/release.asp?ReleaseID=31240

JP299444

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 6a

Patch: Q299444I.exe

• http://www.microsoft.com/downloads/release.asp?ReleaseID=31240

JP298012

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: q298012_w2k_sp3_x86_en.exe

• http://download.microsoft.com/download/win2000platform/patch/q298012/nt5/en-us/q298012_w2k_sp3_x86_en.exe

JP298012

Affected Products:

• SQL Server 2000
  • SQL Server 2000 Gold

Patch: q298012_sql2000_x86_en.exe

• http://download.microsoft.com/download/sqlsvr2000/hotfix/q298012/win98mexp/en-us/q298012_sql2000_x86_en.exe

JP298012

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP2

Patch: q298012_sql70sp2_x86_en.exe

• http://download.microsoft.com/download/sql70/hotfix/q298012/win98mexp/en-us/q298012_sql70sp2_x86_en.exe

JP304062

Affected Products:

• Exchange Server 5.5
  • Exchange Server 5.5 SP4

Patch: q304062engi386.exe

• http://download.microsoft.com/download/exch55/patch/5.5.2654.51/nt45/en-us/q304062engi386.exe

JP304063

Affected Products:

• Exchange 2000 Server
  • Exchange 2000 Gold
• Exchange 2000 Enterprise Server
  • Exchange 2000 Gold

Patch: q304063engi386.exe

• http://download.microsoft.com/download/exchangeentserver/patch/06.00.06.4419/nt5/en-us/q304063engi386.exe

JP299444

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q299444ts.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS01-042 - Windows Media Player .NSC ファイル処理に未チェックのバッファが含まれる

Posted: 2001/07/26

JP304404

Affected Products:

• Windows Media Player 6.4
  • Windows Media Player 6.4 Gold
• Windows Media Player 6.4 for Windows 2000
  • Windows Media Player 6.4 for Windows 2000 Gold

Patch: wmsu55362.exe

• http://download.microsoft.com/download/winmediaplayer/update/55362/win98/en-us/wmsu55362.exe

JP304404

Affected Products:

• Windows Media Player 7.1
  • Windows Media Player 7.1 Gold

Patch: wMsu55362.exe

• http://download.microsoft.com/download/winmediaplayer/update/55362/win98/en-us/wmsu55362.exe

JP304404

Affected Products:

• Windows Media Player 7.0
  • Windows Media Player 7.0 Gold

Patch: wmSu55362.exe

• http://download.microsoft.com/download/winmediaplayer/update/55362/win98/en-us/wmsu55362.exe

JP304404

Affected Products:

• Windows Media Player 6.4 for Windows NT 4.0
  • Windows Media Player 6.4 for Windows NT 4.0 Gold

Patch: Wmsu55362.exe

• http://download.microsoft.com/download/winmediaplayer/update/55362/win98/en-us/wmsu55362.exe

---

MS01-043 - NNTP サービスでメモリ リークが発生する

Posted: 2001/08/14

JP303984

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: q304876engi386.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=31955

JP303984

Affected Products:

• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: q303984_w2k_sp3_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/q303984/NT5/EN-US/Q303984_W2K_SP3_x86_en.EXE

---

MS01-044 - 2001 年 8 月 15 日 IIS 用の累積的な修正プログラム

Posted: 2001/08/15

JP301625

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: q301625i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=32061

JP301625

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: q301625_w2k_sp3_x86_en.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=32011

---

MS01-045 - H.323 ゲートキーパーのメモリーリーク及び Web Proxy のクロスサイトスクリプティングの脆弱性

Posted: 2001/08/16

JP289503

Affected Products:

• ISA Server 2000
  • ISA Server 2000 Gold

Patch: isahf68.exe

• http://download.microsoft.com/download/isaserver2000/patch/q295389-q289503/nt5/en-us/isahf68.exe

---

MS01-046 - Windows 2000 赤外線デバイスドライバでのアクセス違反により、システムが再起動する

Posted: 2001/08/21

JP252795

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q252795_W2K_SP3_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q252795/NT5/EN-US/Q252795_W2K_SP3_x86_en.EXE

---

MS01-047 - OWA 機能により、認証されていないユーザーがグローバル アドレス一覧を列挙することができる

Posted: 2001/09/06

JP307195

Affected Products:

• Exchange Server 5.5
  • Exchange Server 5.5 SP4

Patch: Q307195engi386.EXE

• http://download.microsoft.com/download/exch55/patch/05.05.39.2655/nt45/en-us/q307195engi386.exe

---

MS01-048 - RPC Endpoint Mapper への不正なリクエストにより、RPC サービスが異常終了する

Posted: 2001/09/10

JP305399

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: Q305399i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=32503

---

MS01-049 - 深くネスト化した OWA リクエストによりサーバーの CPU が消費される

Posted: 2001/09/26

JP303451

Affected Products:

• Exchange 2000 Enterprise Server
  • Exchange 2000 SP1
• Exchange 2000 Server
  • Exchange 2000 SP1

Patch: Q303451engi386.EXE

• http://download.microsoft.com/download/exchangeentserver/patch/06.00.50.4720/nt5/en-us/q303451engi386.exe

---

MS01-050 - 不正な Excel または PowerPoint の文書がマクロのセキュリティを無視する

Posted: 2001/10/04

Q306603

Affected Products:

• Excel 2000
  • Office 2000 SR-1a
  • Office 2000 Service Pack 2

Patch: xl2000

• http://download.microsoft.com/download/excel2000/e2kmac/1/w98nt42kme/en-us/e2kmac.exe

Q306603

Affected Products:

• Excel 2002
  • Office 2002 Gold

Patch: xl2002

• http://download.microsoft.com/download/excel2002/exc1001/1/w98nt42kme/en-us/exc1001.exe

Q306603

Affected Products:

• PowerPoint 2000
  • Office 2000 SR-1a
  • Office 2000 Service Pack 2

Patch: Ppt2000

• http://download.microsoft.com/download/powerpoint2000/p2kmac/1/w98nt42kme/en-us/p2kmac.exe

Q306603

Affected Products:

• PowerPoint 2002
  • Office 2002 Gold

Patch: Ppt2002

• http://download.microsoft.com/download/powerpoint2002/ppt1001/1/w98nt42kme/en-us/ppt1001.exe

---

MS01-051 - 不正なドットなし IP アドレスにより Web ページがイントラネット ゾーンで処理されてしまう

Posted: 2001/10/10

JP306121

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP2

Patch: q306121.exe

• http://www.microsoft.com/windows/ie/downloads/critical/q306121/default.asp

JP306121

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP2

Patch: Q306121.exe

• http://www.microsoft.com/windows/ie/downloads/critical/q306121/default.asp

JP306121

Affected Products:

• Internet Explorer 6
  • Internet Explorer 6 Gold

Patch: q306121.Exe

• http://www.microsoft.com/windows/ie/downloads/critical/q306121/default.asp

---

MS01-052 - 無効な RDP データが Terminal Service を異常終了させる

Posted: 2001/10/18

JP307454

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q307454i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=33131

JP307454

Affected Products:

• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q307454_W2K_SP3_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/q307454/NT5/EN-US/Q307454_W2K_SP3_x86_en.exe

---

MS01-053 - ダウンロードされたアプリケーションが OS X の Internet Explorer 5.1 for Mac で実行される

Posted: 2001/10/23

JP311052

Affected Products:

• IE 5.1 for Macintosh
  • IE 5.1 for Macintosh Gold

Patch: MacIE501

• http://www.apple.com/macosx/upgrade/softwareupdates.html

---

MS01-054 - 無効なユニバーサル プラグ アンド プレイのリクエストがシステムのオペレーションを妨害する

Posted: 2001/11/01

Q311311

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 309073USA8.EXE

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=34951

Q311311

Affected Products:

• Windows Me
  • Windows Me Gold

Patch: WinMEUPnP

• http://windowsupdate.microsoft.com

JP309521

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold

Patch: Q309521_x86.exe

• http://windowsupdate.microsoft.com

---

MS01-055 - 2001 年 11 月 13 日 Internet Explorer 用の累積的な修正プログラム

Posted: 2001/11/08

JP312461

Affected Products:

• Internet Explorer 6
  • Internet Explorer 6 Gold

Patch: q312461.exe

• http://www.microsoft.com/windows/ie/downloads/critical/q312461/default.asp

JP312461

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP2

Patch: Q312461.exe

• http://www.microsoft.com/windows/ie/downloads/critical/q312461/default.asp

---

MS01-056 - Windows Media Player の .ASF ファイル処理に、未チェックのバッファが含まれる

Posted: 2001/11/20

JP308567

Affected Products:

• Windows Media Player 7.1
  • Windows Media Player 7.1 Gold

Patch: wm308567.exe

• http://download.microsoft.com/download/winmediaplayer/update/308567/win98mexp/en-us/wm308567.exe

JP308567

Affected Products:

• Windows Media Player 7.0
  • Windows Media Player 7.0 Gold

Patch: wM308567.exe

• http://download.microsoft.com/download/winmediaplayer/update/308567/win98mexp/en-us/wm308567.exe

JP308567

Affected Products:

• Windows Media Player 6.4
  • Windows Media Player 6.4 Gold
• Windows Media Player 6.4 for Windows 2000
  • Windows Media Player 6.4 for Windows 2000 Gold

Patch: wm308567.Exe

• http://download.microsoft.com/download/winmediaplayer/update/308567/win98mexp/en-us/wm308567.exe

JP309521

Affected Products:

• Windows Media Player for Windows XP
  • Windows XP Gold
  • Windows Media Player for Windows XP Gold

Patch: WinXPUPnP

• http://windowsupdate.microsoft.com

JP308567

Affected Products:

• Windows Media Player 6.4 for Windows NT 4.0
  • Windows Media Player 6.4 for Windows NT 4.0 Gold

Patch: Wm308567.exe

• http://download.microsoft.com/download/winmediaplayer/update/308567/win98mexp/en-us/wm308567.exe

---

MS01-057 - 特別な形式の HTML メールのスクリプトが Exchange 5.5 OWA で実行される

Posted: 2001/12/06

JP313576

Affected Products:

• Exchange Server 5.5
  • Exchange Server 5.5 SP4

Patch: Q313576i386.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=34402

---

MS01-058 - 2001 年 12 月 13 日 Internet Explorer 用の累積的な修正プログラム

Posted: 2001/12/13

JP313675

Affected Products:

• Internet Explorer 6
  • Internet Explorer 6 Gold

Patch: Q313675.exe

• http://www.microsoft.com/windows/ie/downloads/critical/Q313675/default.asp

JP313675

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP2

Patch: q313675.exe

• http://www.microsoft.com/windows/ie/downloads/critical/Q313675/default.asp

---

MS01-059 - ユニバーサル プラグ アンド プレイ (UPnP) に含まれる未チェックのバッファによりシステムが侵害される

Posted: 2001/12/19

JP315000

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold

Patch: Q315000_WXP_SP1_x86_ENU.exe

• http://download.microsoft.com/download/whistler/patch/q315000/wxp/en-us/q315000_wxp_sp1_x86_enu.exe

Q315000

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 314941USA8.EXE

• http://www.microsoft.com/technet/security/bulletin

Q315000

Affected Products:

• Windows Me
  • Windows Me Gold

Patch: 314757USAM.EXE

• http://www.microsoft.com/technet/security/bulletin

---

MS01-060 - SQL Server テキスト フォーマット機能が未チェックのバッファを含む

Posted: 2001/12/20

JP304850

Affected Products:

• SQL Server 2000
  • SQL Server 2000 SP1

Patch: s80428i.exe

• http://download.microsoft.com/download/sqlsvr2000/patch/1.0/w98nt42kmexp/en-us/s80428i.exe

JP304851

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP3

Patch: sql7

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=35685

---

MS02-001 - 信頼するドメインが認証データ内の SID (セキュリティ ID) のドメイン メンバシップを確認しない

Posted: 2002/01/22

JP311401

Affected Products:

• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 2
• Windows 2000 Professional
  • Windows 2000 Service Pack 2

Patch: w2kSP2SRP1.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q311401/NT5/EN-US/w2kSP2SRP1.exe

JP311401

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Service Pack 2

Patch: w2kSP2SRP1.Exe

• http://download.microsoft.com/download/win2000platform/Patch/Q311401/NT5/EN-US/w2kSP2SRP1.exe

JP317636

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q317636i.EXE

• http://www.microsoft.com/ntserver/terminalserver/downloads/critical/q317636/default.asp

---

MS02-002 - 不正なネットワーク リクエストにより Office v. X for Mac が異常終了する

Posted: 2002/02/06

JP317879

Affected Products:

• Office v. X for Mac
  • Office v. X for Mac Gold

Patch: MacPatch

• http://www.microsoft.com/mac/download

---

MS02-003 - Exchange 2000 System Attendant がレジストリ リモート アクセス権を不適切に設定する

Posted: 2002/02/07

JP316056

Affected Products:

• Exchange 2000 Server
  • Exchange 2000 SP2
• Exchange 2000 Enterprise Server
  • Exchange 2000 SP2

Patch: Q316056engi386.EXE

• http://download.microsoft.com/download/exchangeentserver/patch/06.00.21.5770/nt5/en-us/q316056engi386.exe

---

MS02-004 - Telnet Server に含まれる未チェックのバッファにより、任意のコードが実行される

Posted: 2002/02/07

JP307298

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Interix 2.2
  • Interix 2.2 Gold

Patch: Q307298_W2K_SP3_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/q307298/NT5/EN-US/Q307298_W2K_SP3_x86_en.exe

---

MS02-005 - 2002 年 2 月 11 日 Internet Explorer の累積的な修正プログラム

Posted: 2002/02/11

JP316059

Affected Products:

• Internet Explorer 6
  • Internet Explorer 6 Gold

Patch: q316059.exe

• http://www.microsoft.com/windows/ie/downloads/critical/q316059/default.asp

JP316059

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP2

Patch: Q316059.exe

• http://www.microsoft.com/windows/ie/downloads/critical/q316059/default.asp

JP316059

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP1

Patch: q316059.Exe

• http://www.microsoft.com/windows/ie/downloads/critical/q316059/default.asp

JP316059

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP2

Patch: Q316059.Exe

• http://www.microsoft.com/windows/ie/downloads/critical/q316059/default.asp

---

MS02-006 - SNMP サービスに含まれる未チェックのバッファにより、任意のコードが実行される

Posted: 2002/02/12

JP314147

Affected Products:

• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Q314147i.exe

• http://www.microsoft.com/downloads/release.asp?ReleaseID=36167

JP314147

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold
• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 4
  • Windows NT4 Terminal Server Service Pack 5
  • Windows NT4 Terminal Server Service Pack 6

Patch: nopatch

• http://www.microsoft.com/technet/security/bulletin

JP314147

Affected Products:

• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
• Windows 2000 Professional
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1

Patch: Q314147_W2K_SP3_X86_EN.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q314147/NT5/EN-US/Q314147_W2K_SP3_X86_EN.exe

JP314147

Affected Products:

• Windows XP Professional
  • Windows XP Gold
• Windows XP Home Edition
  • Windows XP Gold

Patch: Q314147_WXP_SP1_x86_ENU.exe

• http://download.microsoft.com/download/whistler/patch/q314147/wxp/en-us/q314147_wxp_sp1_x86_enu.exe

---

MS02-007 - SQL Server のリモート データ ソース関数に未チェックのバッファが含まれる

Posted: 2002/02/20

JP316333

Affected Products:

• SQL Server 2000
  • SQL Server 2000 SP2
• SQL Server Desktop Engine (MSDE) 2000
  • SQL Server Desktop Engine (MSDE) 2000 SP2

Patch: 8.00.0578.exe

• http://support.microsoft.com/default.aspx?scid=http://download.microsoft.com/download/SQLSVR2000/Update/8.00.0578/W982KMeXP/EN-US/8.00.0578.exe

JP318268

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP3
• SQL Server Desktop Engine (MSDE) 1.0
  • SQL Server 7.0 SP3

Patch: s71021a.exe

• http://support.microsoft.com/default.aspx?scid=http://download.microsoft.com/download/sql70/Update/s71021a/ALPHA/EN-US/s71021a.exe

---

MS02-008 - XMLHTTP コントロールにより、ローカル ファイルにアクセスすることができる

Posted: 2002/02/21

JP318202

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6
• Windows 2000 Professional
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold

Patch: Q318202_MSXML20_x86_en.exe

• http://download.microsoft.com/download/xml/Patch/2.6/W9XNT4MeXP/EN-US/Q318202_MSXML20_x86.exe

JP318203

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6
• Windows 2000 Professional
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold

Patch: Q318203_MSXML30_x86.exe

• http://download.microsoft.com/download/xml/patch/3.0/w9xnt4mexp/en-us/q318203_msxml30_x86.exe

JP317244

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6
• Windows 2000 Professional
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows XP Home Edition
  • Windows XP Gold
  • Windows XP Service Pack 1
• Windows XP Professional
  • Windows XP Gold
  • Windows XP Service Pack 1

Patch: msxml4qfe.exe

• http://download.microsoft.com/download/xml/patch/q317244/w9xnt4mexp/en-us/msxml4qfe.exe

---

MS02-009 - Internet Explorer の不正な VBScript 処理により Web ページがローカル ファイルを読み取る

Posted: 2002/02/21

JP318089

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP2
  • Internet Explorer 5.01 SP3

Patch: vbs51nen.exe

• http://www.microsoft.com/windows/ie/downloads/critical/q318089/default.asp

JP318089

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP1

Patch: vbs55nen.exe

• http://www.microsoft.com/windows/ie/downloads/critical/q318089/Default.asp

JP318089

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP2

Patch: Vbs55nen.exe

• http://www.microsoft.com/windows/ie/downloads/critical/q318089/default.Asp

JP318089

Affected Products:

• Internet Explorer 6
  • Internet Explorer 6 Gold

Patch: vbs56nen.exe

• http://www.microsoft.com/windows/ie/downloads/critical/q318089/Default.Asp

---

MS02-010 - ISAPI フィルタの未チェックのバッファにより、Commerce Server が攻撃を受ける

Posted: 2002/02/21

JP317615

Affected Products:

• Commerce Server 2000
  • Commerce Server 2000 SP2

Patch: tempcs

• http://www.microsoft.com/technet/security/bulletin

---

MS02-011 - 認証問題により、承認されていないユーザーが SMTP サービスに認証することができる

Posted: 2002/02/27

JP313450

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Service Pack 2

Patch: Q313450_W2K_SP3_X86_EN.Exe

• http://download.microsoft.com/download/win2000platform/patch/q313450/nt5/en-us/q313450_w2k_sp3_x86_en.exe

JP289258

Affected Products:

• Exchange Server 5.5
  • Exchange Server 5.5 SP4

Patch: Q289258engi386.EXE

• http://download.microsoft.com/download/exch55/patch/05.05.55.2655/nt45/en-us/q289258engi386.exe

---

MS02-012 - 不正なデータ送信リクエストにより Windows SMTP サービスが異常終了する

Posted: 2002/02/27

JP313450

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Service Pack 2

Patch: Q313450_W2K_SP3_X86_EN.exe

• http://download.microsoft.com/download/win2000platform/patch/q313450/nt5/en-us/q313450_w2k_sp3_x86_en.exe

JP313450

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold
• Internet Information Services 5.1
  • Windows XP Gold

Patch: Q313450_WXP_SP1_x86_ENU.exe

• http://download.microsoft.com/download/whistler/patch/q313450/wxp/en-us/q313450_wxp_sp1_x86_enu.exe

---

MS02-013 - 2002 年 3 月 4 日 VM 用の累積的な修正プログラム

Posted: 2002/03/04

JP300845

Affected Products:

• Windows XP Professional
  • Windows XP Gold
• Windows XP Home Edition
  • Windows XP Gold
• Windows Me
  • Windows Me Gold
• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows 98 SE
  • Windows 98se Gold
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Microsoft Virtual Machine (VM)
  • Microsoft Virtual Machine (VM) Gold

Patch: msjavx86.exe

• http://www.microsoft.com/java/vm/dl_vm40.htm

JP300845

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 2
• Windows 2000 Professional
  • Windows 2000 Service Pack 2

Patch: Q300845_W2K_SP3_X86_EN.exe

• http://www.microsoft.com/java/vm/dl_vm40.htm

---

MS02-014 - Windows Shell の未チェックのバッファにより、コードが実行される

Posted: 2002/03/07

JP313829

Affected Products:

• Windows 98 SE
  • Windows 98se Gold
• Windows 98
  • Windows 98 SP1
  • Windows 98 Gold

Patch: win9802-014

• http://www.microsoft.com/technet/security/bulletin

JP313829

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: Q313829i.exe

• http://www.microsoft.com/downloads/release.asp?ReleaseID=36867

JP313829

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: q313829i.exe

• http://www.microsoft.com/downloads/release.asp?ReleaseID=36869

JP313829

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2

Patch: Q313829_W2K_SP3_X86_EN.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q313829/NT5/EN-US/Q313829_W2K_SP3_X86_EN.exe

---

MS02-015 - 2002 年 3 月 28 日 Internet Explorer 用の累積的な修正プログラム

Posted: 2002/03/28

JP319182

Affected Products:

• Internet Explorer 6
  • Internet Explorer 6 Gold

Patch: q319182.exe

• http://download.microsoft.com/download/ie60/secpac26/6/w98nt42kmexp/en-us/q319182.exe

JP319182

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP2
  • Internet Explorer 5.01 SP3

Patch: Q319182.exe

• http://download.microsoft.com/download/ie501sp2/secpac26/5.01_sp2/w982knt4/en-us/q319182.exe

JP319182

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP1

Patch: q319182.Exe

• http://download.microsoft.com/download/ie55sp1/secpac26/5.5_sp1/win98me/en-us/q319182.exe

JP319182

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP2

Patch: Q319182.EXE

• http://download.microsoft.com/download/ie55sp2/secpac26/5.5_sp2/win98me/en-us/q319182.exe

---

MS02-016 - Q318593 : 読み取り専用アクセスのグループ ポリシー ファイルを開くと、ポリシーの適用が妨害される

Posted: 2002/04/04

JP318593

Affected Products:

• Windows 2000 Server
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2

Patch: Q318593_W2K_SP3_X86_EN.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q318593/NT5/EN-US/Q318593_W2K_SP3_X86_EN.exe

---

MS02-017 - Q311967: Multiple UNC Provider の未チェックのバッファによりコードが実行される

Posted: 2002/04/04

JP311967

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a

Patch: Q312895i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=37630

JP311967

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: q312895i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=37652

JP311967

Affected Products:

• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q311967_W2K_SP3_X86_EN.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q311967/NT5/EN-US/Q311967_W2K_SP3_X86_EN.exe

JP311967

Affected Products:

• Windows XP Professional
  • Windows XP Gold
• Windows XP Home Edition
  • Windows XP Gold

Patch: Q311967_WXP_SP1_x86_ENU.exe

• http://download.microsoft.com/download/whistler/patch/q311967/wxp/en-us/q311967_wxp_sp1_x86_enu.exe

---

MS02-018 - Internet Information Services 用の累積的な修正プログラム (Q319733)

Posted: 2002/04/10

JP319733

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Q319733i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=37931

JP319733

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q319733_W2K_SP3_X86_EN.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=37824

JP319733

Affected Products:

• Internet Information Services 5.1
  • Windows XP Gold

Patch: Q319733_WXP_SP1_x86_ENU.exe

• http://download.microsoft.com/download/iis50/patch/q319733/wxp/en-us/q319733_wxp_sp1_x86_enu.exe

JP319733

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q319733ts.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS02-019 - Internet Explorer for Mac および Office for Mac の未チェックのバッファによってコードが実行される (Q321309)

Posted: 2002/04/16

JP321309

Affected Products:

• Excel v. X for Macintosh
  • Excel v. X for Macintosh Gold
• Excel 2001 for Macintosh
  • Excel 2001 for Macintosh Gold
• PowerPoint 2001 for Macintosh
  • PowerPoint 2001 for Macintosh Gold
• PowerPoint 98 for Macintosh
  • PowerPoint 98 for Macintosh Gold
• PowerPoint v. X for Macintosh
  • PowerPoint v. X for Macintosh Gold
• Internet Explorer 5.1 for Machintosh OS 8 and 9
  • Internet Explorer 5.1 for Machintosh OS 8 and 9 Gold
• Internet Explorer 5.1 for Macintosh OS X
  • Internet Explorer 5.1 for Macintosh OS X Gold
• Entourage 2001 for Macintosh
  • Entourage 2001 for Macintosh Gold
• Entourage v. X for Macintosh
  • Entourage v. X for Macintosh Gold
• Outlook Express 5 for Macintosh
  • Outlook Express 5 for Macintosh Gold

Patch: macpatches

• http://www.microsoft.com/technet/security/bulletin

---

MS02-020 - SQL 拡張プロシージャ機能に未チェックのバッファが含まれる (Q319507)

Posted: 2002/04/17

JP318268

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP3
• SQL Server Desktop Engine (MSDE) 1.0
  • SQL Server 7.0 SP3

Patch: 7.00.1030_SQL7_sp3_x86_enu.exe

• http://download.microsoft.com/download/sql70/patch/sp3/win98mexp/en-us/7.00.1030_sql7_sp3_x86_enu.exe

JP316333

Affected Products:

• SQL Server Desktop Engine (MSDE) 2000
  • SQL Server Desktop Engine (MSDE) 2000 SP2
• SQL Server 2000
  • SQL Server 2000 SP2

Patch: 8.00.0608_SQL2K_sp2_x86_enu.exe

• http://download.microsoft.com/download/sqlsvr2000/patch/sp2/win98mexp/en-us/8.00.0608_sql2k_sp2_x86_enu.exe

---

MS02-021 - 電子メール エディタの問題により、返信または転送でスクリプトが実行される (Q321804)

Posted: 2002/04/25

JP320441

Affected Products:

• Word 2002
  • Word 2002 Gold

Patch: wrd1003.exe

• http://rputools/technet/treeview/default.asp?url=/technet/security/bulletin/MS02-021.asp

Q320536

Affected Products:

• Word 2000
  • Word 2000 Gold
  • Office 2000 SR-1
  • Office 2000 SR-1a
  • Office 2000 Service Pack 2

Patch: wrd0901.exe

• http://office.microsoft.com/downloads/2000/wrd0901.aspx

---

MS02-022 - MSN チャット コントロールの未チェックのバッファによりコードが実行される (Q321661)

Posted: 2002/05/08

JP321661

Affected Products:

• MSN Messenger
  • MSN Messenger Gold

Patch: messenger

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=38790

---

MS02-023 - 2002 年 5 月 15 日 Internet Explorer 用の累積的な修正プログラム (Q321232)

Posted: 2002/05/15

JP321232

Affected Products:

• Internet Explorer 6
  • Internet Explorer 6 Gold

Patch: q321232.exe

• http://www.microsoft.com/windows/ie/downloads/critical/Q321232/default.asp

JP321232

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP2

Patch: Q321232.exe

• http://www.microsoft.com/windows/ie/downloads/critical/Q321232/default.asp

JP321232

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP1

Patch: Q321232.Exe

• http://www.microsoft.com/windows/ie/downloads/critical/Q321232/default.asp

JP321232

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP2
  • Internet Explorer 5.01 SP3

Patch: q321232.Exe

• http://www.microsoft.com/windows/ie/downloads/critical/Q321232/default.asp

---

MS02-024 - Windows Debugger の認証問題により、権限が昇格する (Q320206)

Posted: 2002/05/22

JP320206

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q320206_W2K_SP4_X86_EN.exe

• http://download.microsoft.com/download/win2000platform/patch/q320206/nt5/en-us/q320206_w2k_sp4_x86_en.exe

JP320206

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a

Patch: Q320206i.exe

• http://download.microsoft.com/download/winntsp/patch/q320206/nt4/en-us/q320206i.exe

JP320206

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: q320206i.exe

• http://download.microsoft.com/download/winntterminal/patch/q320206/nt4/en-us/q320206i.exe

---

MS02-025 - 不正なメール属性により Exchange 2000 が CPU リソースを使い果たす (Q320436)

Posted: 2002/05/28

JP320436

Affected Products:

• Exchange 2000 Server
  • Exchange 2000 SP2
• Exchange 2000 Enterprise Server
  • Exchange 2000 SP2

Patch: Q320436enui386.EXE

• http://download.microsoft.com/download/exchangeentserver/patch/06.00.91.5770/nt5/en-us/q320436enui386.exe

---

MS02-026 - ASP.NET ワーカー プロセスに未チェックのバッファが含まれる (Q322289)

Posted: 2002/06/06

JP322289

Affected Products:

• .NET Framework
  • .NET Framework Gold

Patch: NDP10_QFEM_Q322289_En.exe

• http://download.microsoft.com/download/netframeworkredistributable/patch/1/nt45xp/en-us/ndp10_qfem_q322289_en.exe

---

MS02-027 - Gopher プロトコル ハンドラの未チェックのバッファにより、攻撃者の任意のコードが実行される (Q323889)

Posted: 2002/06/11

JP323889

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP2
  • Internet Explorer 5.01 SP3

Patch: Placeholder IE 5.01

• http://www.microsoft.com/technet/security/bulletin

JP323889

Affected Products:

• Proxy Server 2.0
  • Proxy Server 2.0 Gold

Patch: 29106_ENU_i386_zip.exe

• http://download.microsoft.com/download/proxy20/patch/2.0.177/nt45/en-us/29106_enu_i386_zip.exe

JP323889

Affected Products:

• ISA Server 2000
  • ISA Server 2000 SP1

Patch: isahf177.exe

• http://download.microsoft.com/download/isaserver2000/patch/3.0.1200.177/nt5/en-us/isahf177.exe

JP323889

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP1

Patch: Placeholder IE5.5 SP1

• http://www.microsoft.com/technet/security/bulletin

JP323889

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP2

Patch: Placeholder IE5.5 SP2

• http://www.microsoft.com/technet/security/bulletin

JP323889

Affected Products:

• Internet Explorer 6
  • Internet Explorer 6 Gold

Patch: Placeholder IE6

• http://www.microsoft.com/technet/security/bulletin

---

MS02-028 - HTR のチャンクされたエンコードのヒープ オーバーランにより Web サーバーのセキュリティが侵害される (Q321599)

Posted: 2002/06/11

JP321599

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q321599_W2K_SP4_X86_EN.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=39217

JP321599

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 6a

Patch: Q321599i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=39579

---

MS02-029 - リモート アクセス サービスの電話帳の未チェックのバッファによりコードが実行される (Q318138)

Posted: 2002/06/11

JP318138

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q318138_W2K_SP3_X86_EN.exe

• http://download.microsoft.com/download/win2000platform/patch/q318138/nt5/en-us/q318138_w2k_sp3_x86_en.exe

JP318138

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold

Patch: Q318138_WXP_SP1_x86_ENU.exe

• http://download.microsoft.com/download/whistler/patch/q318138/wxp/en-us/q318138_wxp_sp1_x86_enu.exe

JP318138

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: Q318138i.exe

• http://www.microsoft.com/ntserver/nts/downloads/security/q318138/default.asp

JP318138

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: q318138i.exe

• http://www.microsoft.com/ntserver/terminalserver/downloads/security/q318138/default.asp

JP318138

Affected Products:

• Windows NT Server 4.0, Enterprise Edition, RRAS
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, RRAS
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0, RRAS
  • Windows NT4 Service Pack 6a

Patch: Q318138i.Exe

• http://www.microsoft.com/ntserver/nts/downloads/security/q318138/default.asp

JP318138

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition RRAS
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q318138i.EXE

• http://www.microsoft.com/ntserver/terminalserver/downloads/security/q318138/default.asp

---

MS02-030 - SQLXML の未チェックのバッファによりコードが実行される (Q321911)

Posted: 2002/06/12

Q321858

Affected Products:

• SQL Server 2000
  • SQL Server 2000 SP2
• MDAC 2.6
  • MDAC 2.6 Gold

Patch: Q321858_SQL_Security_MDAC26.exe

• http://download.microsoft.com/download/sqlsvr2000/sqlxml/q321858/nt45xp/en-us/q321858_sql_security_mdac26.exe

Q321858

Affected Products:

• MDAC 2.7
  • MDAC2.7 Gold
• SQL Server 2000
  • SQL Server 2000 SP2

Patch: Q321858_SQL_Security_MDAC27.exe

• http://download.microsoft.com/download/sqlsvr2000/sqlxml/q321858/nt45xp/en-us/q321858_sql_security_mdac27.exe

Q321460

Affected Products:

• SQL Server 2000
  • SQL Server 2000 SP2

Patch: SQLXML2_Q321460.EXE

• http://download.microsoft.com/download/sqlsvr2000/patch/q321460/w98nt42kme/en-us/sqlxml2_q321460.exe

Q320833

Affected Products:

• SQL Server 2000
  • SQL Server 2000 SP2

Patch: SQLXML3_Q320833.EXE

• http://download.microsoft.com/download/sqlsvr2000/patch/q320833/w98nt42kme/en-us/sqlxml3_q320833.exe

---

MS02-031 - Excel for Windows および Word for Windows 用の累積的な修正プログラム (Q324458)

Posted: 2002/06/19

JP324126

Affected Products:

• Excel 2000
  • Office 2000 SR-1a
• Office 2000
  • Office 2000 SR-1a

Patch: exc0901.exe

• http://download.microsoft.com/download/excel2000/patch/exc0901/w982kmexp/en-us/exc0901.exe

JP323548

Affected Products:

• Office XP
  • Office XP SP1
• Excel 2002
  • Office XP SP1

Patch: exc1002.exe

• http://download.microsoft.com/download/excel2002/patch/exc1002/w982kmexp/en-us/exc1002.exe

JP323547

Affected Products:

• Office XP
  • Office XP SP1
• Word 2002
  • Office XP SP1

Patch: wrd1004.exe

• http://download.microsoft.com/download/word2002/patch/wrd1004/w982kmexp/en-us/wrd1004.exe

---

MS02-032 - 2002 年 6 月 26 日 Windows Media Player 用の累積的な修正プログラム (Q320920)

Posted: 2002/06/26

JP320920

Affected Products:

• Windows Media Player 6.4
  • Windows Media Player 6.4 Gold
• Windows Media Player 6.4 for Windows 2000
  • Windows Media Player 6.4 for Windows 2000 Gold

Patch: wm320920_64.exe

• http://download.microsoft.com/download/winmediaplayer/update/320920/w98nt42kme/en-us/wm320920_64.exe

JP320920

Affected Products:

• Windows Media Player 6.4 for Windows NT 4.0
  • Windows Media Player 6.4 for Windows NT 4.0 Gold

Patch: Wm320920_64.exe

• http://download.microsoft.com/download/winmediaplayer/update/320920/w98nt42kme/en-us/wm320920_64.exe

JP320920

Affected Products:

• Windows Media Player 7.1
  • Windows Media Player 7.1 Gold

Patch: wm320920_71.exe

• http://download.microsoft.com/download/winmediaplayer/update/320920/w982kme/en-us/wm320920_71.exe

JP320920

Affected Products:

• Windows Media Player for Windows XP
  • Windows XP Gold
  • Windows Media Player for Windows XP Gold

Patch: wm320920_8.exe

• http://download.microsoft.com/download/winmediaplayer/update/320920/wxp/en-us/wm320920_8.exe

---

MS02-033 - プロファイル サービスの未チェックのバッファにより Commerce Server でコードが実行される (Q322273)

Posted: 2002/06/26

JP322273

Affected Products:

• Commerce Server 2000
  • Commerce Server 2000 Gold
  • Commerce Server 2000 SP2
• Commerce Server 2002
  • Commerce Server 2002 Gold

Patch: tempcs2

• http://download.microsoft.com/download/comserver/Patch/1.1/NT5/EN-US/Q322273_EN.EXE

---

MS02-034 - SQL Server 用の累積的な修正プログラム (Q316333)

Posted: 2002/07/10

Q322853

Affected Products:

• SQL Server 2000
  • SQL Server 2000 SP2
• SQL Server Desktop Engine (MSDE) 2000
  • SQL Server Desktop Engine (MSDE) 2000 SP2

Patch: 8.00.0650_enu.exe

• http://download.microsoft.com/download/sqlsvr2000/update/8.00.0650/w98nt42kmexp/en-us/8.00.0650_enu.exe

---

MS02-035 - SQL Server のインストール プロセスで、パスワードがシステムに残る (Q263968)

Posted: 2002/07/10

JP263968

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 Gold
  • SQL Server 7.0 SP1
  • SQL Server 7.0 SP3
  • SQL Server 7.0 SP4

Patch: SQLKillPwd.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=40205

JP263968

Affected Products:

• SQL Server 2000
  • SQL Server 2000 Gold
  • SQL Server 2000 SP1
  • SQL Server 2000 SP2

Patch: SQL2kKillPwd.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=40206

---

MS02-036 - Microsoft Metadirectory Services の認証問題により、権限が昇格する (Q317138)

Posted: 2002/07/24

JP317138

Affected Products:

• Microsoft Metadirectory Services 2.2
  • Microsoft Metadirectory Services 2.2 SP1

Patch: Q317138.EXE

• http://download.microsoft.com/download/mms22/patch/q317138/nt5/en-us/q317138.exe

---

MS02-037 - SMTP クライアント EHLO コマンドへのサーバー応答で、バッファ オーバーランが発生する (Q326322)

Posted: 2002/07/24

JP326322

Affected Products:

• Exchange Server 5.5
  • Exchange Server 5.5 SP4

Patch: Q326322enui386.EXE

• http://download.microsoft.com/download/exch55/patch/05.05.59.2656/nt45/en-us/q326322enui386.exe

---

MS02-038 - SQL Server 2000 ユーティリティの未チェックのバッファにより、コードが実行される (Q316333)

Posted: 2002/07/24

JP316333

Affected Products:

• SQL Server 2000
  • SQL Server 2000 SP2
• SQL Server Desktop Engine (MSDE) 2000
  • SQL Server Desktop Engine (MSDE) 2000 SP2

Patch: 8.00.0655_enu.exe

• http://download.microsoft.com/download/sqlsvr2000/update/8.00.0655/w98nt42kmexp/en-us/8.00.0655_enu.exe

---

MS02-039 - SQL Server 2000 解決サービスのバッファのオーバーランにより、コードが実行される (Q323875)

Posted: 2002/07/24

JP323875

Affected Products:

• SQL Server 2000
  • SQL Server 2000 SP2

Patch: Q319243_MDAC27_x86.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=40602

---

MS02-040 - MDAC 機能の未チェックのバッファにより、SQL Server が侵害される (Q326573)

Posted: 2002/07/30

JP326573

Affected Products:

• MDAC 2.5
  • MDAC 2.5 SP2
• SQL Server 7.0
  • SQL Server 7.0 SP4

Patch: Q323264_MDAC25_x86_en.exe

• http://download.microsoft.com/download/dasdk/patch/q323264/w9xnt4/en-us/q323264_mdac25_x86_en.exe

JP326573

Affected Products:

• MDAC 2.6
  • MDAC 2.6 SP2
• SQL Server 2000
  • SQL Server 2000 SP2
• SQL Server 7.0
  • SQL Server 7.0 SP4

Patch: Q323266_MDAC26_x86_en.exe

• http://download.microsoft.com/download/dasdk/patch/q323266/win98me/en-us/q323266_mdac26_x86_en.exe

JP326573

Affected Products:

• MDAC 2.7
  • MDAC2.7 Gold
• SQL Server 2000
  • SQL Server 2000 SP2
• SQL Server 7.0
  • SQL Server 7.0 SP4

Patch: Q323263_MDAC27_x86_en.exe

• http://download.microsoft.com/download/dasdk/patch/q323263/w98nt42kme/en-us/q323263_mdac27_x86_en.exe

---

MS02-041 - Content Management Server の未チェックのバッファにより、サーバーが侵害される (Q326075)

Posted: 2002/08/06

JP326075

Affected Products:

• Content Management Server 2001
  • Content Management Server 2001 SP1

Patch: mcms2001srp1.exe

• http://download.microsoft.com/download/contentmanagementser/sp/1.0/nt5/en-us/mcms2001srp1.exe

---

MS02-042 - 接続マネージャの問題により、権限が昇格する (Q326886)

Posted: 2002/08/15

JP326886

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Professional
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3

Patch: Q326886_W2K_SP4_X86_EN.exe

• http://www.microsoft.com/downloads/Release.asp?ReleaseID=41406

---

MS02-043 - SQL Server 用の累積的な修正プログラム (Q316333)

Posted: 2002/08/15

JP327068

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP4
• SQL Server Desktop Engine (MSDE) 1.0
  • SQL Server 7.0 SP4

Patch: 7.00.1076_enu.exe

• http://www.microsoft.com/Release.asp?ReleaseID=Q327068

JP316333

Affected Products:

• SQL Server 2000
  • SQL Server 2000 SP2
• SQL Server Desktop Engine (MSDE) 2000
  • SQL Server Desktop Engine (MSDE) 2000 SP2

Patch: 8.00.0667_enu.exe

• http://www.microsoft.com/Release.asp?ReleaseID=Q316333

---

MS02-044 - Office Web Components に安全でない機能が含まれる (Q328130)

Posted: 2002/08/21

JP328130

Affected Products:

• Project 2002
  • Project 2002 Gold

Patch: prj1001.exe

• http://download.microsoft.com/download/msftproject2002/prj1001/10/WIN98MeXP/EN-US/prj1001.exe

JP328130

Affected Products:

• Project Server 2002
  • Project Server 2002 Gold

Patch: ps1001en.exe

• http://download.microsoft.com/download/microsoftproject2002/ps1001en/10/WIN98MeXP/EN-US/ps1001en.exe

JP328130

Affected Products:

• Office 2000
  • Office 2000 Service Pack 2
  • Office 2000 Gold
• Office XP
  • Office XP SP1
  • Office XP Gold
• Small Business Server 2000
  • Small Business Server 2000 Gold
• ISA Server 2000
  • ISA Server 2000 SP1
  • ISA Server 2000 Gold
• Commerce Server 2000
  • Commerce Server 2000 SP2
  • Commerce Server 2000 Gold
• Commerce Server 2002
  • Commerce Server 2002 Gold
• BizTalk Server 2002
  • BizTalk Server 2002 Gold
• BizTalk Server 2000
  • BizTalk Server 2000 Gold
• BackOffice Server 2000
  • BackOffice Server 2000 Gold
• Office Web Components 2000
  • Office Web Components 2000 Gold
• Office Web Components 2002
  • Office Web Components 2002 Gold

Patch: owcupd.exe

• http://download.microsoft.com/download/office2000/Patch/owcupd/WIN98MeXP/EN-US/owcupd.exe

---

MS02-045 - ネットワーク共有プロバイダの未チェックのバッファにより、サービス拒否が起こる (Q326830)

Posted: 2002/08/21

JP326830

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 3
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 3
  • Windows 2000 Service Pack 2
• Windows 2000 Professional
  • Windows 2000 Service Pack 3
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 3
  • Windows 2000 Service Pack 2

Patch: Q326830_W2K_SP4_X86_EN.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=41468

JP326830

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold

Patch: Q326830_WXP_SP1_x86_ENU.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=41524

JP326830

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a

Patch: Q326830i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=41493

JP326830

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q326830i.Exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=41519

---

MS02-046 - TSAC ActiveX コントロールのバッファ オーバーランにより、コードが実行される (Q327521)

Posted: 2002/08/21

JP327521

Affected Products:

• Microsoft Terminal Services Advanced Client (TSAC) ActiveX control
  • Microsoft Terminal Services Advanced Client (TSAC) ActiveX control Gold

Patch: tswebsetup.exe

• http://www.microsoft.com/windowsxp/pro/downloads/rdwebconn.asp

---

MS02-047 - Internet Explorer 用の累積的な修正プログラム (Q323759)

Posted: 2002/08/21

JP323759

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP2

Patch: q323759.exe

• http://www.microsoft.com/windows/ie/downloads/critical/q323759ie/default.asp

JP323759

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP1

Patch: Q323759.exe

• http://www.microsoft.com/windows/ie/downloads/critical/q323759ie/default.asp

JP323759

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP2

Patch: q323759.Exe

• http://www.microsoft.com/windows/ie/downloads/critical/q323759ie/default.asp

JP323759

Affected Products:

• Internet Explorer 6
  • Internet Explorer 6 Gold

Patch: Q323759.Exe

• http://www.microsoft.com/windows/ie/downloads/critical/q323759ie/default.asp

JP323759

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP3

Patch: q323759.EXe

• http://www.microsoft.com/windows/ie/downloads/critical/q323759ie/default.asp

---

MS02-048 - Certificate Enrollment Control の問題により、デジタル証明書が削除される (Q323172)

Posted: 2002/08/28

JP323172

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold

Patch: Q323172_WXP_SP1_x86_ENU.exe

• http://www.microsoft.com/technet/security/bulletin

JP323172

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a

Patch: Q323172i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=41747

JP323172

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q323172i.Exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=41361

JP323172

Affected Products:

• Windows Me
  • Windows Me Gold

Patch: 323172USAM.EXE

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=41121

JP323172

Affected Products:

• Windows 98 SE
  • Windows 98se Gold
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1

Patch: 323172USA8.EXE

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=41151

JP323172

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3

Patch: q323172_W2K_SP4_X86_EN.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=41568

---

MS02-049 - 警告なしで Web ページが Visual FoxPro 6.0 アプリケーションを起動する (Q326568)

Posted: 2002/09/04

JP326568

Affected Products:

• Visual FoxPro 6.0
  • Visual FoxPro 6.0 Gold

Patch: vfp_q326568_en.exe

• http://www.microsoft.com/Release.asp?ReleaseID=42297

---

MS02-050 - 証明書確認の問題により、ID が偽装される (Q329115)

Posted: 2002/09/04

Q329115

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a

Patch: Q329115i.Exe

• http://www.microsoft.com/ntserver/nts/downloads/critical/q329115/default.asp

Q329115

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: q329115i.EXE

• http://www.microsoft.com/ntserver/terminalserver/downloads/critical/q329115/default.asp

Q329115

Affected Products:

• Windows XP Professional
  • Windows XP Gold
  • Windows XP Service Pack 1
• Windows XP Home Edition
  • Windows XP Gold
  • Windows XP Service Pack 1

Patch: Q329115_WXP_SP2_x86_ENU.exe

• http://www.microsoft.com/windowsxp/pro/downloads/q329115.asp

Q329115

Affected Products:

• Windows 98 SE
  • Windows 98se Gold
• Windows 98
  • Windows 98 Gold

Patch: Q329115-Win98

• http://www.microsoft.com/windows98/downloads/contents/WUCritical/q329115/default.asp

Q329115

Affected Products:

• Windows Me
  • Windows Me Gold

Patch: Q329115-WinME

• http://www.windowsupdate.com

Q329115

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Professional
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3

Patch: Q329115_W2K_SP4_X86_EN.exe

• http://www.microsoft.com/windows2000/downloads/critical/q329115/default.asp

---

MS02-051 - RDP プロトコルの暗号の問題により、情報が漏えいされる (Q324380)

Posted: 2002/09/18

JP324380

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
  • Windows 2000 Service Pack 1
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
  • Windows 2000 Service Pack 1
• Windows 2000 Professional
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
  • Windows 2000 Service Pack 1

Patch: Q324380_W2K_SP4_X86_EN.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=41326

JP324380

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold

Patch: Q324380_WXP_SP1_x86_ENU.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID= 41288

---

MS02-052 - Microsoft VM JDBC クラスの問題により、コードが実行される (Q329077)

Posted: 2002/09/18

JP329077

Affected Products:

• Microsoft Virtual Machine (VM)
  • Microsoft Virtual Machine (VM) Gold

Patch: vm-sfix3.exe

• http://windowsupdate.microsoft.com

---

MS02-053 - Smart HTML インタープリタでバッファオーバーランによりコードが実行される (Q324096)

Posted: 2002/09/24

JP324096

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold
• Front Page 2000 Server Extensions
  • Front Page 2000 Server Extensions Gold

Patch: FPSE0901.exe

• http://www.microsoft.com/technet/security/bulletin

JP324096

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Professional
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Front Page 2000 Server Extensions
  • Front Page 2000 Server Extensions Gold

Patch: Q324096_W2K_SP4_X86_EN.exe

• http://www.microsoft.com/technet/security/bulletin

JP324096

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold
• Front Page 2000 Server Extensions
  • Front Page 2000 Server Extensions Gold

Patch: Q324096_WXP_SP1_x86_ENU.exe

• http://www.microsoft.com/technet/security/bulletin

JP324096

Affected Products:

• Front Page Server Extensions 2002
  • Front Page Server Extensions 2002 Gold

Patch: Q324096_WXP_SP1_x86_HEB.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS02-054 - ファイル展開機能に含まれる未チェックのバッファにより、コードが実行される (Q329048)

Posted: 2002/10/02

JP329048

Affected Products:

• Windows Me
  • Windows Me Gold

Patch: 329048USAM.EXE

• http://windowsupdate.microsoft.com

JP329048

Affected Products:

• Windows XP Home Edition
  • Windows XP Service Pack 1
• Windows XP Professional
  • Windows XP Service Pack 1

Patch: Q329048_WXP_SP2_x86_ENU.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=43419

JP329048

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold

Patch: q329048_WXP_SP2_x86_ENU.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=43419

JP329048

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 329048USA8.EXE

• http://www.microsoft.com/windows98/downloads/contents/WUCritical/q329048/default.asp

---

MS02-055 - Windows ヘルプ機能の未チェックのバッファにより、コードが実行される (Q323255)

Posted: 2002/10/02

JP323255

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
  • Windows XP Service Pack 1
• Windows XP Professional
  • Windows XP Gold
  • Windows XP Service Pack 1

Patch: Q323255_WXP_SP2_x86_ENU.exe

• http://download.microsoft.com/download/whistler/Patch/Q323255/WXP/EN-US/Q323255_WXP_SP2_x86_ENU.exe

JP323255

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3

Patch: Q323255_W2K_SP4_X86_EN.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=40213

JP323255

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a

Patch: Hhupd.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=43308

JP323255

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 323255USA8.EXE

• http://www.microsoft.com/windows98/downloads/contents/WUCritical/q323255/default.asp

JP323255

Affected Products:

• Windows Me
  • Windows Me Gold

Patch: 323255USAM.EXE

• http://windowsupdate.microsoft.com

---

MS02-056 - SQL Server 用の累積的な修正プログラム (Q316333)

Posted: 2002/10/02

JP316333

Affected Products:

• SQL Server 2000
  • SQL Server 2000 SP2
• SQL Server Desktop Engine (MSDE) 2000
  • SQL Server Desktop Engine (MSDE) 2000 SP2

Patch: 8.00.0679_enu.exe

• http://www.microsoft.com/Release.asp?ReleaseID=Q316333

JP316333

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP4
• SQL Server Desktop Engine (MSDE) 1.0
  • SQL Server 7.0 SP4

Patch: 7.00.1077_enu.exe

• http://www.microsoft.com/Release.asp?ReleaseID=Q327068

---

MS02-057 - Services for Unix 3.0 に含まれる Interix SDK の問題によりコードが実行される (Q329209)

Posted: 2002/10/02

JP329209

Affected Products:

• Services For Unix 3.0 Interix SDK
  • Services For Unix 3.0 Interix SDK Gold

Patch: q329209_sfu_3_x86_en.exe

• http://www.microsoft.com/downloads/Release.asp?ReleaseID=43447

---

MS02-058 - Outlook Express の S/MIME 解析の未チェックのバッファによりシステムが侵害される(Q328676)

Posted: 2002/10/09

JP328676

Affected Products:

• Outlook Express 5.5
  • Internet Explorer 5.5 SP2
• Outlook Express 6.0
  • Internet Explorer 6 SP1

Patch: OE-Q328676

• http://www.microsoft.com/windows/ie/downloads/critical/q328676/default.asp

---

MS02-059 - Word フィールドおよび Excel の外部データ更新の問題により、情報が漏えいされる (Q330008)

Posted: 2002/10/16

JP330008

Affected Products:

• Word 2002
  • Word 2002 Gold
• Office XP
  • Office XP SP1
  • Office XP SP2

Patch: Word2002MS02-059

• http://office.microsoft.com/downloads/2002/wrd1005.aspx

JP330008

Affected Products:

• Word 2000
  • Word 2000 Gold
• Office 2000
  • Office 2000 Service Pack 1
  • Office 2000 Service Pack 2

Patch: Word2000MS02-059

• http://office.microsoft.com/downloads/2000/wrd0902.aspx

JP330008

Affected Products:

• Word 97
  • Word 97 Gold
• Word 98
  • Word 98 Gold

Patch: Word98JMS02-059

• http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q330080

JP330008

Affected Products:

• Word X for Macintosh
  • Word X for Macintosh Gold
• Office v.X for Macintosh
  • Office v.X for Macintosh SR 1

Patch: Wordx.VMacMS02-059

• http://www.microsoft.com/mac/download/officex/officex_1011.asp

JP330008

Affected Products:

• Word 2001 for Macintosh
  • Word 2001 for Macintosh Gold
• Office 2001 for Macintosh
  • Office 2001 for Macintosh SR1

Patch: Word2001MacMS02-059

• http://www.microsoft.com/mac/download/office2001/2001_SSL.asp

JP330008

Affected Products:

• Word 98 for Macintosh
  • Word 98 for Macintosh Gold
• Office 98 for Macintosh
  • Office 98 for Macintosh Gold

Patch: Word98MacMS02-059

• http://www.microsoft.com/mac/download/office98/98_SSL.asp

JP330008

Affected Products:

• Excel 2002
  • Excel 2002 Gold
• Office XP
  • Office XP SP1
  • Office XP SP2

Patch: Excel2002MS02-059

• http://office.microsoft.com/downloads/2002/exc1003.aspx

---

MS02-060 - Windows XP 「ヘルプとサポート センター」 の問題によりファイルが削除される (Q328940)

Posted: 2002/10/16

JP328940

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold

Patch: Q328940_WXP_SP1_x86_ENU.exe

• http://download.microsoft.com/download/whistler/Patch/Q328940/WXP/EN-US/Q328940_WXP_SP1_x86_ENU.exe

---

MS02-061 - SQL Server Web タスクで権限が昇格する (Q316333)

Posted: 2002/10/16

JP316333

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP4
• SQL Server Desktop Engine (MSDE) 1.0
  • SQL Server 7.0 SP4

Patch: 7.00.1078_enu.exe

• http://support.microsoft.com/default.aspx?scid=kb;en-us;Q327068&sd=tech

JP316333

Affected Products:

• SQL Server 2000
  • SQL Server 2000 SP2
• SQL Server Desktop Engine (MSDE) 2000
  • SQL Server Desktop Engine (MSDE) 2000 SP2

Patch: 8.00.0686_enu.exe

• http://support.microsoft.com/default.aspx?scid=kb;en-us;Q316333&sd=tech

---

MS02-062 - Internet Information Service 用の累積的な修正プログラム (Q327696)

Posted: 2002/10/30

JP327696

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 6a

Patch: Q327696I.EXE

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=43566

JP327696

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3

Patch: Q327696_W2K_SP4_X86_EN.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=43296

JP327696

Affected Products:

• Internet Information Services 5.1
  • Windows XP Service Pack 1
  • Windows XP Gold

Patch: Q327696_WXP_SP2_x86_ENU.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=43578

---

MS02-063 - PPTP サービスの未チェックのバッファにより、サービス拒否の攻撃を受ける (Q329834)

Posted: 2002/10/30

JP329834

Affected Products:

• Windows 2000 Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Professional
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3

Patch: Q329834_W2K_SP4_X86_EN.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q329834/NT5/EN-US/Q329834_W2K_SP4_X86_EN.exe

JP329834

Affected Products:

• Windows XP Professional
  • Windows XP Gold
• Windows XP Home Edition
  • Windows XP Gold

Patch: q329834_WXP_SP2_x86_ENU.exe

• http://www.microsoft.com/Release.asp?ReleaseID=43635

JP329834

Affected Products:

• Windows XP Home Edition
  • Windows XP Service Pack 1
• Windows XP Professional
  • Windows XP Service Pack 1

Patch: Q329834_WXP_SP2_x86_ENU.exe

• http://www.microsoft.com/Release.asp?ReleaseID=43635

---

MS02-064 - Windows 2000 の既定のアクセス権により、トロイの木馬プログラムが実行される (Q327522)

Posted: 2002/10/30

JP327522

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Professional
  • Windows 2000 Gold
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3

Patch: W2K_MS02-064

• http://www.microsoft.com/technet/security/bulletin

---

MS02-065 - Microsoft Data Access Components のバッファ オーバーランにより、コードが実行される (Q329414)

Posted: 2002/11/19

Q329414

Affected Products:

• MDAC 2.1
  • MDAC 2.1 Gold
  • MDAC 2.1 SP1
  • MDAC 2.1 SP1A
  • MDAC 2.1 SP2
• MDAC 2.5
  • MDAC 2.5 Gold
  • MDAC 2.5 SP1
  • MDAC 2.5 SP2
  • MDAC 2.5 SP3
• MDAC 2.6
  • MDAC 2.6 Gold
  • MDAC 2.6 SP1
  • MDAC 2.6 SP2
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold
• Windows Me
  • Windows Me Gold
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Professional
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3

Patch: q329414_mdacall_x86.exe

• http://www.microsoft.com/downloads/Release.asp?ReleaseID=44733

---

MS02-066 - Internet Explorer 用の累積的な修正プログラム (Q328970)

Posted: 2002/11/20

Q328970

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP3

Patch: q328970.exe

• http://www.microsoft.com/windows/ie/downloads/critical/q328970/default.asp

Q328970

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP2

Patch: q328970.Exe

• http://www.microsoft.com/windows/ie/downloads/critical/q328970/default.asp

Q328970

Affected Products:

• Internet Explorer 6
  • Internet Explorer 6 Gold

Patch: Q328970.Exe

• http://www.microsoft.com/windows/ie/downloads/critical/q328970/default.asp

Q328970

Affected Products:

• Internet Explorer 6
  • Internet Explorer 6 SP1

Patch: Q328970.EXe

• http://www.microsoft.com/windows/ie/downloads/critical/q328970/default.asp

---