Mssecure - 2003-01-27 (JPN)

Source: stksecure.exe

Data Updated: 1/27/2003

Data Version: 1.0.1.457

MSBA/Tool Version: 1.0 3.32

---

MS98-001 - Disabling Creation of Local Groups on a Domain by Non-Administrative Users

Posted: 1998/06/01

169556

Affected Products:

• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: CREATALS_x86.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/reskit/nt40/i386/CREATALS_x86.exe

---

MS98-002 - Error Message Vulnerability Against Secured Internet Servers

Posted: 1998/06/26

148427

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 3
• Internet Information Server 3.0
  • Windows NT4 Service Pack 3
• Exchange Server 5.5
  • Exchange Server 5.5 Gold
  • Exchange Server 5.5 SP1

Patch: ssl-fixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP3/ssl-fix/

---

MS98-003 - File Access Issue with Windows NT Internet Information Server

Posted: 1998/07/02

188806

Affected Products:

• Internet Information Server 3.0
  • Windows NT4 Service Pack 3

Patch: iis3fixi.exe

• ftp://ftp.microsoft.com/bussys/IIS/iis-public/fixes/usa/security/

188806

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 3
• Personal Web Server 4.0
  • Windows NT4 Service Pack 3

Patch: iis4fixi.exe

• ftp://ftp.microsoft.com/bussys/IIS/iis-public/fixes/usa/security/

---

MS98-004 - Unauthorized ODBC Data Access with RDS and IIS

Posted: 1998/07/14

184375

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Internet Information Server 3.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Q184375

• http://support.microsoft.com/default.aspx?scid=KB;en-us;q184375

---

MS98-005 - Unwanted Data Issue with Office 98 for the Macintosh

Posted: 1998/07/17

Affected Products:

• Office 98 for Macintosh
  • Office 98 for Macintosh Gold

Patch: 98-005

• http://www.microsoft.com/technet/security/bulletin/ms98-005.asp

---

MS98-006 - Potential Denial-of-Service in IIS FTP Server due to Passive Connections

Posted: 1998/07/23

189262

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 3

Patch: ftpfix4i.exe

• ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/iis4-ftpfix/ftpfix4i.exe

189262

Affected Products:

• Internet Information Server 3.0
  • Windows NT4 Service Pack 3

Patch: ftpfix3i.exe

• ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/ftp-fix/ftpfix3i.exe

---

MS98-007 - Potential SMTP and NNTP Denial-of-Service Vulnerabilities

Posted: 1998/07/24

188369

Affected Products:

• Exchange Server 5.0
  • Exchange Server 5.0 SP1
  • Exchange Server 5.0 SP2

Patch: psp2stri.exe

• ftp://ftp.microsoft.com/bussys/exchange/exchange-public/fixes/Eng/Exchg5.0/Post-SP2-STORE/

188341

Affected Products:

• Exchange Server 5.0
  • Exchange Server 5.0 SP1
  • Exchange Server 5.0 SP2

Patch: psp2imsi.exe

• ftp://ftp.microsoft.com/bussys/exchange/exchange-public/fixes/Eng/Exchg5.0/Post-SP2-IMS/

188341

Affected Products:

• Exchange Server 5.5
  • Exchange Server 5.5 Gold

Patch: MS98-007

• http://www.microsoft.com/technet/security/bulletin/ms98-007.asp

---

MS98-008 - Long file name Security Issue affecting Microsoft Outlook 98 and Microsoft Outlook Express 4.x

Posted: 1998/07/27

Affected Products:

• Outlook 98
  • Outlook 98 Gold

Patch: outptch2.exe

• http://office.microsoft.com/downloads/9798/outptch2.aspx

Affected Products:

• Outlook Express 4.01
  • Internet Explorer 4.01 SP1
  • Internet Explorer 4.01 Gold

Patch: oelong

• http://www.microsoft.com/msdownload/iebuild/oebuff/en/29128.htm

---

MS98-009 - Windows NT Privilege Elevation Attack

Posted: 1998/07/27

190288

Affected Products:

• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 3

Patch: privfixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postSP3/priv-fix/

---

MS98-010 - Information on the Back Orifice Program

Posted: 1998/08/04

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: MS98-010

• http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms98-010.asp

---

MS98-011 - Window.External JScript Vulnerability in Microsoft Internet Explorer 4.0

Posted: 1998/08/17

191200

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 Gold
  • Internet Explorer 4.01 SP1
• Internet Explorer 4.0
  • Internet Explorer 4.0 Gold

Patch: jscript.asp

• http://www.microsoft.com/windows/ie/security/jscript.asp

---

MS98-013 - Internet Explorer Cross Frame Navigate Vulnerability

Posted: 1998/09/04

168485

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 Gold
  • Internet Explorer 4.01 SP1
• Internet Explorer 4.0
  • Internet Explorer 4.0 Gold

Patch: xframe.asp

• http://support.microsoft.com/default.aspx?scid=kb;en-us;168485

---

MS98-015 - Untrusted Scripted Paste Issue in Microsoft Internet Explorer 4.01

Posted: 1998/10/16

169245

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 Gold
  • Internet Explorer 4.01 SP1

Patch: paste.asp

• http://support.microsoft.com/default.aspx?scid=kb;en-us;169245

---

MS98-016 - Dotless IP Address Issue in Microsoft Internet Explorer 4

Posted: 1998/10/23

168617

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP1

Patch: dotless.asp

• http://www.microsoft.com/windows/ie/security/dotless.asp

---

MS98-019 - IIS GET Vulnerability

Posted: 1998/12/21

192296

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4

Patch: infget4i.exe

• ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/Infget-fix/

192296

Affected Products:

• Internet Information Server 3.0
  • Windows NT4 Service Pack 4

Patch: infget3i.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP4/archive/Infget-fix/

---

MS98-018 - Excel CALL Vulnerability

Posted: 1998/12/10

196791

Affected Products:

• Office 97
  • Office 97 SR-2/SR-2b
• Excel 97
  • Office 97 SR-2/SR-2b

Patch: Xl8p9pkg

• http://officeupdate.microsoft.com/downloadDetails/Xl8p9pkg.htm

---

MS98-020 - Frame Spoof Vulnerability

Posted: 1998/12/23

167614

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP1

Patch: spoof.asp

• http://www.microsoft.com/windows/ie/security/spoof.asp

---

MS98-017 - Named Pipes Over RPC Vulnerability

Posted: 1998/11/19

195733

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 4

Patch: nprpcfxi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP4/archive/nprpc-fix/

---

MS98-012 - Updates available for Security Vulnerabilities in Microsoft PPTP

Posted: 1998/08/18

189771

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1

Patch: dun40.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP3/pptp3-fix/

189595

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 3
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3

Patch: pptpfixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP3/pptp3-fix/

189594

Affected Products:

• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3

Patch: rrasfixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP3/rras30-fix/

154091

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5

Patch: msdun13.exe

• ftp://ftp.microsoft.com/softlib/mslfiles/msdun13.exe

---

MS98-014 - RPC Spoofing Denial of Service on Windows NT

Posted: 1998/09/29

193233

Affected Products:

• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 3

Patch: snk-fixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postSP3/snk-fix/snk-fixi.exe

193233

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT 4 Terminal Server Gold

Patch: Snk-fixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40TSE/hotfixes-postSP3/Snk-fix/

---

MS99-001 - Exposure in Forms 2.0 TextBox Control that allows data to be read from user's Clipboard

Posted: 1999/01/21

214757

Affected Products:

• Office 97
  • Office 97 SR-2/SR-2b
• Outlook 98
  • Office 97 SR-2/SR-2b
• Project 98
  • Office 97 SR-2/SR-2b
• Visual Basic 5.0
  • Visual Basic 5.0 Gold
• Word 97
  • Office 97 SR-2/SR-2b
• Excel 97
  • Office 97 SR-2/SR-2b
• PowerPoint 97
  • Office 97 SR-2/SR-2b

Patch: fm2paste.exe

• http://office.microsoft.com/downloads/9798/fm2paste.aspx

---

MS99-002 - Word 97 Template Vulnerability

Posted: 1999/01/21

214652

Affected Products:

• Word 97
  • Office 97 SR-2/SR-2b

Patch: Wd97SP.EXE

• http://download.microsoft.com/download/word97win/Wd97SP/97/WIN98/EN-US/Wd97SP.EXE

---

MS99-003 - IIS Malformed FTP List Request Vulnerability

Posted: 1999/02/03

188348

Affected Products:

• Internet Information Server 3.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4

Patch: ftpls3i.exe

• ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/ftpls-fix/ftpls3i.exe

188348

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4

Patch: ftpls4i.exe

• ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/ftpls-fix/ftpls4i.exe

---

MS99-007 - Taskpads Scripting Vulnerability

Posted: 1999/02/22

218619

Affected Products:

• Windows 98 Resource Kit
  • Windows 98 Resource Kit Gold
• Windows 98 Resource Kit Sampler
  • Windows 98 Resource Kit Sampler Gold

Patch: tmcpatch.exe

• ftp://ftp.microsoft.com/reskit/win98/taskpads/tmcpatch.exe

218619

Affected Products:

• BackOffice Resource Kit SE
  • BackOffice Resource Kit SE Gold

Patch: itmcpatch.exe

• ftp://ftp.microsoft.com/reskit/nt4/x86/taskpads/

---

MS99-010 - File Access Vulnerability in Personal Web Server

Posted: 1999/03/26

216453 (FP98)

Affected Products:

• Personal Web Server 4.0
  • Personal Web Server 4.0 Gold

Patch: Pwssecup.exe

• http://support.microsoft.com/default.aspx?scid=kb;en-us;217765

216453 (FP98)

Affected Products:

• FrontPage 98 Personal Web Server 1.0
  • FrontPage 98 Personal Web Server 1.0 Gold

Patch: fppws98.exe

• http://support.microsoft.com/default.aspx?scid=kb;en-us;217765

216453 (FP98)

Affected Products:

• FrontPage 97 Personal Web Server 1.0
  • FrontPage 97 Personal Web Server 1.0 Gold

Patch: Q217765

• http://support.microsoft.com/default.aspx?scid=KB;en-us;q217765

---

MS99-005 - BackOffice Server 4.0 Does Not Delete Installation Setup File

Posted: 1999/02/12

217004

Affected Products:

• BackOffice Server 4.0
  • BackOffice Server 4.0 Gold

Patch: Q217004

• http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS99-005.asp

---

MS99-004 - Authentication Processing Error in Windows NT 4.0 Service Pack 4

Posted: 1999/02/08

214840

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 4
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 4

Patch: msv-fixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP4/archive/msv1-fix/

---

MS99-006 - Windows NT Known DLLs List Vulnerability

Posted: 1999/02/19

218473

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 4
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 4

Patch: Smssfixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP4/Smss-fix/

218473

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT 4 Terminal Server Gold

Patch: Smssfixi.Exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40TSE/hotfixes-postSP3/Smss-fix/Smssfixi.exe

---

MS99-008 - Windows NT Screen Saver Vulnerability

Posted: 1999/03/12

221991

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 4
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 4

Patch: Scrnsavi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP4/Scrnsav-fix/

221991

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT 4 Terminal Server Gold

Patch: Scrnsavi.Exe

• http://support.microsoft.com/default.aspx?scid=kb;en-us;221991

---

MS99-009 - Malformed Bind Request Vulnerability

Posted: 1999/03/16

221989

Affected Products:

• Exchange Server 5.5
  • Exchange Server 5.5 SP2

Patch: PSP2DIRI.EXE

• ftp://ftp.microsoft.com/bussys/exchange/exchange-public/fixes/eng/Exchg5.5/PostSP2/DIR-fix/

---

MS99-013 - File Viewers Vulnerability

Posted: 1999/05/07

232449

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5

Patch: fix2450i.exe

• ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/Viewcode-fix/

231368

Affected Products:

• Site Server 3.0, Commerce Edition
  • Site Server 3.0 Gold
  • Site Server 3.0 SP1
  • Site Server 3.0 SP2

Patch: viewfixi.exe

• ftp://ftp.microsoft.com/bussys/sitesrv/sitesrv-public/fixes/usa/siteserver3/hotfixes-postsp2/Viewcode-fix/

---

MS99-015 - Malformed Help File Vulnerability

Posted: 1999/05/17

231605

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: winhlp-i.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postSP5/winhlp32-fix

---

MS99-016 - Malformed Phonebook Entry Vulnerability

Posted: 1999/05/20

230677

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5

Patch: rasffixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP5/RAS-fix/

---

MS99-017 - RAS and RRAS Password Vulnerability

Posted: 1999/05/27

230681

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: raspassword-fix

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/Hotfixes-PostSP5/raspassword-fix/

233303

Affected Products:

• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: rpwdfixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/Hotfixes-PostSP5/rraspassword-fix/

---

MS99-020 - Malformed LSA Request Vulnerability

Posted: 1999/06/23

231457

Affected Products:

• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 5

Patch: lsareqi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP5/LSA3-fix/

231457

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 4

Patch: lsareqi.Exe

• http://support.microsoft.com/default.aspx?scid=kb;en-us;231457

---

MS99-021 - CSRSS Worker Thread Exhaustion Vulnerability

Posted: 1999/06/23

233323

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: csrssfxi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/Hotfixes-PostSP5/CSRSS-fix/

---

MS99-023 - Malformed Image Header Vulnerability

Posted: 1999/06/30

234557

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 4
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 4

Patch: krnlifxi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/Hotfixes-PostSP4/Kernel-fix/

234557

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 4

Patch: Krnlifxi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40tse/Hotfixes-PostSP4/Kernel-fix/

---

MS99-024 - Unprotected IOCTLs Vulnerability

Posted: 1999/07/06

236359

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: ioctlfxi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/Hotfixes-PostSP5/ioctl-fix

236359

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 4

Patch: Ioctlfxi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40tse/Hotfixes-PostSP4/IOCTL-fix/

---

MS99-025 - Unauthorized Access to IIS Servers through ODBC Data Access with RDS

Posted: 1999/07/17

184375

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Internet Information Server 3.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Q184375

• http://support.microsoft.com/default.aspx?scid=KB;en-us;q184375

---

MS99-026 - Malformed Dialer Entry Vulnerability

Posted: 1999/07/29

237185

Affected Products:

• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: dialrfxi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixes-postSP5/dialer-fix/

237185

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 4

Patch: Dialrfxi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40tse/hotfixes-postSP4/Dialer-fix/

---

MS99-027 - Encapsulated SMTP Address Vulnerability

Posted: 1999/08/06

237927

Affected Products:

• Exchange Server 5.5
  • Exchange Server 5.5 SP2

Patch: psp2imci.zip

• ftp://ftp.microsoft.com/bussys/exchange/exchange-public/fixes/Eng/Exchg5.5/PostSP2/IMC-fix/

---

MS99-028 - Terminal Server Connection Request Flooding Vulnerability

Posted: 1999/08/09

228724

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 4
  • Windows NT4 Terminal Server Service Pack 5

Patch: tsmemfxi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40tse/hotfixes-postSP4/flood-fix/

---

MS99-029 - Malformed HTTP Request Header Vulnerability

Posted: 1999/08/11

238606

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5

Patch: vdext4i.exe

• ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/HDBRK-fix/

---

MS99-031 - 「仮想マシン サンドボックス」の脆弱性に対する対策

Posted: 1999/08/25

240346

Affected Products:

• Microsoft Virtual Machine (VM)
  • Microsoft Virtual Machine (VM) Gold
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold
• Internet Explorer 4.0
  • Internet Explorer 4.0 Gold
  • Internet Explorer 4.01 SP1
  • Internet Explorer 4.01 SP2
• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: msjavx86.exe

• http://www.microsoft.com/java/vm/dl_vm40.htm

---

MS99-034 - 「断片化された IGMP パケット」の脆弱性に対する対策

Posted: 1999/09/03

238329

Affected Products:

• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: igmpfixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40TSE/hotfixes-postSP4/igmp-fix/

238329

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 4
  • Windows NT4 Terminal Server Service Pack 5

Patch: Igmpfixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40TSE/hotfixes-postSP4/igmp-fix/

238453

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5

Patch: 238453US5.exe

• http://www.microsoft.com/windows98/downloads/contents/wucritical/SRPoint/license.asp

238453

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 238453US8.EXE

• http://www.microsoft.com/windows98/downloads/contents/wucritical/SRPoint/license.asp

---

MS99-036 - 「Windows NT 4.0 が無人インストール ファイルを削除しない」ことによる脆弱性に対する対策

Posted: 1999/09/10

155197

Affected Products:

• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6
  • Windows NT4 Terminal Server Service Pack 4
  • Windows NT4 Terminal Server Service Pack 5

Patch: MS99-036

• http://www.microsoft.com/technet/security/bulletin/ms99-036.asp

---

MS99-038 - 「パケットの不正情報によりソースルーティングが有効になる」脆弱性に対する対策

Posted: 1999/09/20

238453

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5

Patch: ipsrfixi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/Hotfixes-PostSP5/spoof-fix/

---

MS99-039 - 「ドメイン解決」、「FTPダウンロード」の脆弱性に対する対策

Posted: 1999/09/23

241805

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: iprftp4i.exe

• ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/IIS40/hotfixes-postSP6/security/IPRFTP-fix/

241805

Affected Products:

• Microsoft Commercial Internet System 2.5
  • Microsoft Commercial Internet System 2.5 Gold

Patch: q242559.exe

• ftp://ftp.microsoft.com/bussys/mcis/mcis-public/fixes/usa/mcis25/security/ftpsvc-fix/

---

MS99-041 - 「RASMAN セキュリティ記述子」の脆弱性に対する対策

Posted: 1999/09/30

242294

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: fixrasi.exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/Hotfixes-PostSP6/Security/rasman-fix/

242294

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6
  • Windows NT4 Terminal Server Service Pack 5

Patch: fixrasi.Exe

• ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/Hotfixes-PostSP6/Security/Rasman-fix/fixrasi.exe

---

MS99-045 - 「仮想マシン ベリファイア」の脆弱性に対する対策

Posted: 1999/10/21

244283

Affected Products:

• Microsoft Virtual Machine (VM)
  • Microsoft Virtual Machine (VM) Gold
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold
• Internet Explorer 4.0
  • Internet Explorer 4.0 Gold
  • Internet Explorer 4.01 SP1
  • Internet Explorer 4.01 SP2
• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: msjavx86.exe

• http://www.microsoft.com/java/vm/dl_vm40.htm

---

MS99-046 - 「TCP/IP のシーケンス番号が予測できてしまう」脆弱性 に対する対策

Posted: 1999/10/22

243835

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5

Patch: q243835sp5i.exe

• http://download.microsoft.com/download/winntsrv40/patch/tcp-sp5/nt4/en-us/q243835sp5i.exe

243835

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: q243835i.exe

• http://download.microsoft.com/download/winntsrv40/patch/tcp-sp6/nt4/en-us/q243835i.exe

243835

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 4
  • Windows NT4 Terminal Server Service Pack 5

Patch: Q243835i.EXE

• http://download.microsoft.com/download/winntterminal/patch/q243835/nt4alpha/en-us/q243835i.exe

---

MS99-047 - 「改ざんされたスプーラ リクエスト」の脆弱性に対する対策

Posted: 1999/11/04

243649

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Q243649.exe

• http://download.microsoft.com/download/winntsrv40/patch/spooler-fix/nt4/en-us/q243649.exe

---

MS99-050 - 「サーバー側参照リダイレクト」の脆弱性に対する対策

Posted: 1999/12/08

246094

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2

Patch: q246094.exe

• http://download.microsoft.com/download/ie4095/SPRR/4.01/W9XNT4/EN-US/q246094.exe

256094

Affected Products:

• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: Q246094.exe

• http://download.microsoft.com/download/ie5/SPRR/5.0/W9XNT4/EN-US/q246094.exe

246094

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 Gold

Patch: Q246094.Exe

• http://download.microsoft.com/download/ie501/SPRR/5.01/W9XNT4/EN-US/q246094.exe

---

MS99-055 - 「リソース カタログ要求に対し改ざんされた引数が渡された場合」の脆弱性に対する対策

Posted: 1999/12/09

246045

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: Q246045.EXE

• http://download.microsoft.com/download/winntsrv40/update/srvsvc/nt4/en-us/q246045.exe

---

MS99-056 - 「 Syskey がキーストリームを再使用する」の脆弱性に対する対策

Posted: 1999/12/16

248183

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: Q248183.EXE

• http://download.microsoft.com/download/winntsp/patch/syskey/nt4/en-us/q248183.exe

248183

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 5
  • Windows NT4 Terminal Server Service Pack 4

Patch: Q248183ts.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS99-057 - 「SID に無効な引数が渡された場合」の脆弱性に対する対策

Posted: 1999/12/16

248183

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: Q248183.EXE

• http://download.microsoft.com/download/winntsp/patch/syskey/nt4/en-us/q248183.exe

---

MS00-001 - 「不正な IMAP リクエスト 」の脆弱性に対する対策

Posted: 2000/01/04

246731

Affected Products:

• Microsoft Commercial Internet System 2.0
  • Microsoft Commercial Internet System 2.0 Gold
• Microsoft Commercial Internet System 2.5
  • Microsoft Commercial Internet System 2.5 Gold

Patch: q246731engi.EXE

• http://download.microsoft.com/download/cis25b/patch/5.5.1877.37/nt4/en-us/q246731engi.exe

---

MS00-002 - 「不正なコンバージョン データ」の脆弱性に対する対策

Posted: 2000/01/20

249881

Affected Products:

• Word 98
  • Word 98 Gold
• PowerPoint 98
  • PowerPoint 98 Gold
• Word 97
  • Word 97 Gold

Patch: WW5Pkg.exe

• http://officeupdate.microsoft.com/downloaddetails/ww5pkg.htm

249881

Affected Products:

• Word 2000
  • Word 2000 Gold
• PowerPoint 2000
  • PowerPoint 2000 Gold

Patch: WW5pkg.exe

• http://officeupdate.microsoft.com/2000/downloaddetails/ww5pkg.htm

---

MS00-003 - 「偽装 LPC ポート リクエスト」の脆弱性に対する対策

Posted: 2000/01/12

247869

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: Q247869i.EXE

• http://download.microsoft.com/download/winntsp/patch/lpc/nt4/en-us/q247869i.exe

---

MS00-004 - 「RDISK レジストリ情報ファイル」の脆弱性に対する対策

Posted: 2000/01/21

249108

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Terminal Server Service Pack 4

Patch: Q249108i.exe

• http://download.microsoft.com/download/winntsp/patch/rdisk2/nt4/en-us/q249108i.exe

249108

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6
  • Windows NT4 Terminal Server Service Pack 5
  • Windows NT4 Terminal Server Service Pack 4

Patch: q249108i.EXE

• http://download.microsoft.com/download/winntsp/patch/rdisk/nt4/en-us/q249108i.exe

---

MS00-005 - 「RTF のコントロール ワードが改ざんされた場合」の脆弱性に対する対策

Posted: 2000/01/17

249973

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: Q249973i.EXE

• http://download.microsoft.com/download/winntsp/patch/rtf/nt4/en-us/q249973i.exe

249973

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.5
  • Windows 95 SR 2.1

Patch: 249973USA5.exe

• http://www.microsoft.com/windows98/downloads/contents/wucritical/rtfcontrol/license.asp

249973

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 249973USA8.exe

• http://www.microsoft.com/windows98/downloads/contents/wucritical/rtfcontrol/license.asp

249973

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 5

Patch: q249973ts.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS00-006 - 「Hit-Highlighting 引数の形式不良」の脆弱性に対する対策

Posted: 2000/01/26

251170

Affected Products:

• Indexing Services for Windows 2000
  • Windows 2000 Gold
• Internet Information Services 5.0
  • Windows 2000 Gold
• Windows 2000 Professional
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Gold

Patch: Q251170_W2K_SP1_X86_en.EXE

• http://download.microsoft.com/download/win2000pro/patch/mhh/nt5/en-us/q251170_w2k_sp1_x86_en.exe

252463

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Index Server 2.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Q252463i.EXE

• http://download.microsoft.com/download/winntsp/patch/mhh/nt4/en-us/q252463i.exe

---

MS00-007 - 「ごみ箱作成に伴う」脆弱性に対する対策

Posted: 2000/02/01

248399

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: q248399i.exe

• http://download.microsoft.com/download/winntsp/Patch/q248399/NT4ALPHA/EN-US/Q248399i.EXE

---

MS00-008 - 「レジストリ値のアクセス権」の脆弱性に対する対策

Posted: 2000/03/09

259496

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q259496i.exe

• http://download.microsoft.com/download/winntsp/patch/q259496/nt4/en-us/q259496i.exe

---

MS00-011 - 「VM ファイル参照 問題」の脆弱性に対する対策

Posted: 2000/02/18

253562

Affected Products:

• Microsoft Virtual Machine (VM)
  • Microsoft Virtual Machine (VM) Gold
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold
• Windows Me
  • Windows Me Gold

Patch: msjavx86.exe

• http://www.microsoft.com/java/vm/dl_vm40.htm

287030

Affected Products:

• Microsoft Virtual Machine (VM)
  • Windows 2000 Service Pack 1
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
• Windows 2000 Professional
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Service Pack 1

Patch: Q287030_W2K_SP2_x86_en.EXE

• (Windows Update Only): http://www.microsoft.com/java/default.htm?gssnb=0

---

MS00-021 - 「改ざんされた TCP/IP 印刷リクエスト」の脆弱性 に対する対策

Posted: 2000/03/30

257870

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: Q257870i.EXE

• http://download.microsoft.com/download/winntsp/patch/q257870/nt4/en-us/q257870i.exe

257870

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Gold
• Windows 2000 Professional
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Gold

Patch: Q257870_W2K_SP1_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/patch/q257870/nt5/en-us/q257870_w2k_sp1_x86_en.exe

257870

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q257870ts.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS00-020 - 「デスクトップの分割による」脆弱性に対する対策

Posted: 2000/06/15

260197

Affected Products:

• Windows 2000 Server
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Gold
• Windows 2000 Professional
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Gold

Patch: q260197_w2k_sp1_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q260197/NT5/EN-US/Q260197_W2K_SP1_x86_en.EXE

---

MS00-026 - 「オブジェクトに対する属性」の脆弱性に対する対策

Posted: 2000/04/20

259401

Affected Products:

• Windows 2000 Server
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Gold

Patch: q259401_w2k_sp1_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q259401/NT5/EN-US/Q259401_W2K_SP1_x86_en.EXE

---

MS00-027 - 「極端に長い環境文字列を生成する引数が指定された場合」の脆弱性 に対する対策

Posted: 2000/04/20

259622

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: q259622i.exe

• http://www.microsoft.com/Downloads/details.aspx?displaylang=en&FamilyID=F403EC53-9726-42A1-AAAC-95772ED06A9A

259622

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Gold

Patch: q259622_w2k_sp1_x86_en.exe

• http://download.microsoft.com/download/win2000platform/patch/q259622/nt5/en-us/q259622_w2k_sp1_x86_en.exe

259622

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q259622i.EXE

• http://www.microsoft.com/Downloads/details.aspx?displaylang=en&FamilyID=9BDDD606-12B6-43BF-A4EC-2AD96695950D

---

MS00-029 - 「断片化された IP パケットの組み立てなおし」の脆弱性に対する対策

Posted: 2000/05/19

259728

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: Q259728i.EXE

• http://download.microsoft.com/download/winntsp/patch/q259728/nt4alpha/en-us/q259728i.exe

259728

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Gold

Patch: Q259728_W2K_SP1_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q259728/NT5/EN-US/Q259728_W2K_SP1_x86_en.EXE

259728

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: q259728i.EXE

• http://download.microsoft.com/download/winntterminal/patch/q259728/nt4alpha/en-us/q259728i.exe

259728

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5

Patch: 259728USA5.EXE

• http://download.microsoft.com/download/win95/update/8070/w95/en-us/259728usa5.exe

259728

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 259728USA8.EXE

• http://download.microsoft.com/download/win98/update/8070/w98/en-us/259728usa8.exe

---

MS00-032 - 「Protected Store のキー暗号化」の脆弱性に対する対策

Posted: 2000/06/01

260219

Affected Products:

• Windows 2000 Server
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Gold
• Windows 2000 Professional
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Gold

Patch: q260219_w2k_sp1_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/q260219/NT5/EN-US/Q260219_W2K_SP1_x86_en.EXE

---

MS00-036 - 「ブラウザからの過度なアナウンス」の脆弱性に対する対策

Posted: 2000/05/25

262694

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: Q262694i.EXE

• http://support.microsoft.com/default.aspx?scid=kb;en-us;263307

262694

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q262694_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q262694/NT5/EN-US/Q262694_W2K_SP2_x86_en.EXE

262694

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q262694ts.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS00-040 - 「リモート レジストリ アクセス認証」の脆弱性に対する対策

Posted: 2000/06/08

264684

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: Q264684i.EXE

• http://download.microsoft.com/download/winntsp/Patch/Q264684/NT4/EN-US/Q264684i.EXE

264684

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q264684ts.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS00-047 - 「NetBIOS Name Server Protocol Spoofing」の脆弱性に対する対策

Posted: 2000/07/27

269239

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: q269239i.exe

• http://download.microsoft.com/download/winntsp/Patch/Q269239/NT4ALPHA/EN-US/Q269239i.EXE

269239

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: Q269239_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q269239/NT5/EN-US/Q269239_W2K_SP2_x86_en.EXE

269239

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q269239i.exe

• http://download.microsoft.com/download/winntterminal/Patch/q269239/NT4/EN-US/Q269239i.EXE

---

MS00-052 - 「Shell の相対パス」の脆弱性に対する対策

Posted: 2000/07/28

269049

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: Q269049i.EXE

• http://download.microsoft.com/download/winntsp/Patch/q269049/NT4ALPHA/EN-US/Q269049i.EXE

269049

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: q269049i.exe

• http://download.microsoft.com/download/winntterminal/patch/q269049/nt4alpha/en-us/q269049i.exe

269049

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: q269049_w2k_sp2_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/q269049/NT5/EN-US/Q269049_W2K_SP2_x86_en.EXE

---

MS00-053 - 「サービス コントロール マネージャの名前付きパイプを利用したなりすまし」の脆弱性に対する対策

Posted: 2000/08/02

269523

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q269523_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q269523/NT5/EN-US/Q269523_W2K_SP2_x86_en.EXE

---

MS00-057 - 「正規化エラーによる、ファイルへの誤ったアクセス権の適用」の脆弱性に対する対策

Posted: 2000/08/10

269862

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: prmcan4i.exe

• http://download.microsoft.com/download/winntsp/Patch/q269862/NT4ALPHA/EN-US/prmcan4i.exe

269862

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q269862_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q269862/NT5/EN-US/Q269862_W2K_SP2_x86_en.EXE

---

MS00-059 - 「Java VM アプレット」の脆弱性に対する対策

Posted: 2000/08/21

271752

Affected Products:

• Microsoft Virtual Machine (VM)
  • Microsoft Virtual Machine (VM) Gold
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold
• Windows Me
  • Windows Me Gold

Patch: msjavx86.exe

• http://www.microsoft.com/java/vm/dl_vm40.htm

287030

Affected Products:

• Microsoft Virtual Machine (VM)
  • Windows 2000 Service Pack 1
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Service Pack 1
• Windows 2000 Professional
  • Windows 2000 Service Pack 1

Patch: Q287030_W2K_SP2_x86_en.EXE

• (Windows Update Only): http://www.microsoft.com/java/default.htm?gssnb=0

---

MS00-060 - 「IIS クロスサイト スクリプティング」に対する脆弱性を解決する修正プログラム

Posted: 2000/08/25

260347

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: crsscri.exe

• http://download.microsoft.com/download/winntsp/patch/q275657/nt4/en-us/crsscri.exe

275657

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: Q275657_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q275657/NT5/EN-US/Q275657_W2K_SP2_x86_en.EXE

---

MS00-062 - 「ローカル セキュリティ ポリシーの破壊」の脆弱性を解決する修正プログラム

Posted: 2000/08/28

269609

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Gold

Patch: Q269609_W2K_SP1_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q269609/NT5/EN-US/Q269609_W2K_SP1_x86_en.EXE

---

MS00-063 - 「無効な URL」の脆弱性に対する対策

Posted: 2000/09/05

271652

Affected Products:

• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: Q271652i.EXE

• http://www.microsoft.com/ntserver/nts/downloads/critical/q271652/xdownload.asp

271652

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: Q271652I.EXE

• http://download.microsoft.com/download/winntsp/Patch/q271652/NT4/EN-US/Q271652i.EXE

---

MS00-065 - 「静止画像サービスを利用した権限の昇格」の脆弱性に対する対策

Posted: 2000/09/06

272736

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: q272736_w2k_sp2_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/q272736/NT5/EN-US/Q272736_W2K_SP2_x86_en.EXE

---

MS00-066 - 「無効な RPC パケット」の脆弱性に対する対策

Posted: 2000/09/11

272303

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: q272303_w2k_sp2_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/q272303/NT5/EN-US/Q272303_W2K_SP2_x86_en.EXE

---

MS00-067 - 「Windows 2000 Telnet クライアントの NTLM 認証」の脆弱性に対する対策

Posted: 2000/09/14

272743

Affected Products:

• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: q272743_w2k_sp2_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q299553/NT5/EN-US/Q299553_W2K_SP3_x86_en.EXE

---

MS00-068 - 「OCX コントロールの電子メールへの添付」の脆弱性に対する対策

Posted: 2000/09/26

274303

Affected Products:

• Windows Media Player 7.0
  • Windows Media Player 7.0 Gold

Patch: WMSU28412.EXE

• http://download.microsoft.com/download/winmediaplayer/update/28412/w982kme/en-us/wmsu28412.exe

---

MS00-069 - 「簡体字中国語用 IME の状態認識」の脆弱性に対する対策

Posted: 2000/09/29

270676

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: q270676_w2k_sp2_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/q270676/NT5/EN-US/Q270676_W2K_SP2_x86_en.EXE

---

MS00-070 - 「LPC 呼び出しおよび LPC ポート」の複数にわたる脆弱性に対する対策

Posted: 2000/10/03

266433

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: q266433i.exe

• http://download.microsoft.com/download/winntsp/Patch/q266433/NT4/EN-US/Q266433i.EXE

266433

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: q266433_w2k_sp2_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q266433/NT5/EN-US/Q266433_W2K_SP2_x86_en.EXE

---

MS00-072 - 「共有レベルのアクセス制限パスワード」の脆弱性に対する対策

Posted: 2000/10/10

273991

Affected Products:

• Windows Me
  • Windows Me Gold

Patch: 273991usam.exe

• http://download.microsoft.com/download/winme/update/11958/winme/en-us/273991usam.exe

273991

Affected Products:

• Windows 98
  • Windows 98 Gold
• Windows 98 SE
  • Windows 98se Gold

Patch: 273991USA8.EXE

• http://download.microsoft.com/download/win98se/update/11958/w98/en-us/273991usa8.exe

273991

Affected Products:

• Windows 95
  • Windows 95 Gold

Patch: 273991USA5.EXE

• http://download.microsoft.com/download/win95/update/11958/w95/en-us/273991usa5.exe

---

MS00-073 - 「不正な IPX NMPI パケット」 の脆弱性に対する対策

Posted: 2000/10/11

273727

Affected Products:

• Windows Me
  • Windows Me Gold

Patch: 273727USAM.EXE

• http://download.microsoft.com/download/winme/update/11974/winme/en-us/273727usam.exe

273727

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 273727USA8.EXE

• http://download.microsoft.com/download/win98/update/11974/w98/en-us/273727usa8.exe

273727

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5

Patch: 273727USA5.EXE

• http://download.microsoft.com/download/win95/update/11974/w95/en-us/273727usa5.exe

---

MS00-074 - 「WebTV for Windows のサービス拒否」 の脆弱性に対する対策

Posted: 2000/10/11

274113

Affected Products:

• Windows Me
  • Windows Me Gold

Patch: 274113usam.exe

• http://download.microsoft.com/download/winme/update/12278/winme/en-us/274113usam.exe

274113

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 274113USA8.EXE

• http://download.microsoft.com/download/win98se/update/12278/w98/en-us/274113usa8.exe

---

MS00-076 - 「キャッシュされた Web アカウント情報」の脆弱性に対する対策

Posted: 2000/10/12

273868

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP1

Patch: q273868.exe

• http://download.microsoft.com/download/ie501sp1/q273868/5.01_SP1/WIN98/EN-US/q273868.exe

---

MS00-077 - 「NetMeeting リモート デスクトップ共有」の脆弱性に対する対策

Posted: 2000/10/13

273854

Affected Products:

• NetMeeting
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: NM30.EXE

• http://download.microsoft.com/download/netmeeting/sp/3.01/w9xnt4/en-us/nm30.exe

299796

Affected Products:

• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Professional
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q299796_W2k_SP3_x86_en.exe

• http://download.microsoft.com/download/win2000platform/patch/q299796/nt5/en-us/q299796_w2k_sp3_x86_en.exe

---

MS00-078 - 「Web サーバー フォルダへの侵入」の脆弱性に対する対策

Posted: 2000/10/17

269862

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: prmcan4i.exe

• http://download.microsoft.com/download/winntsp/Patch/q269862/NT4ALPHA/EN-US/prmcan4i.exe

269862

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q269862_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q269862/NT5/EN-US/Q269862_W2K_SP2_x86_en.EXE

---

MS00-079 - 「ハイパーターミナルのバッファ オーバーフロー」の脆弱性に対する対策

Posted: 2000/10/18

274548

Affected Products:

• Windows Me
  • Windows Me Gold

Patch: 274548usam.exe

• http://download.microsoft.com/download/winme/update/12395/winme/en-us/274548usam.exe

274548

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 274548USA8.EXE

• http://download.microsoft.com/download/win98/update/12395/w98/en-us/274548usa8.exe

276471

Affected Products:

• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Professional
  • Windows 2000 Gold
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1

Patch: Q276471_W2K_SP3_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q276471/NT5/EN-US/Q276471_W2K_SP3_x86_en.EXE

304158

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Q304158i.exe

• http://www.microsoft.com/ntserver/nts/downloads/critical/q304158/download.asp

---

MS00-080 - 「セッション ID クッキーのマーキング」の脆弱性に対する対策

Posted: 2000/10/23

274149

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 6a

Patch: secsesi.exe

• http://www.microsoft.com/ntserver/nts/downloads/critical/q274149/download.asp

274149

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: Q274149_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q274149/NT5/EN-US/Q274149_W2K_SP2_x86_en.EXE

---

MS00-081 - 「VM のファイルの読み取り」の脆弱性に対する対策

Posted: 2000/10/25

287030

Affected Products:

• Microsoft Virtual Machine (VM)
  • Windows 2000 Service Pack 1
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
• Windows 2000 Professional
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Service Pack 1

Patch: Q287030_W2K_SP2_x86_en.EXE

• (Windows Update Only): http://www.microsoft.com/java/default.htm?gssnb=0

277014

Affected Products:

• Microsoft Virtual Machine (VM)
  • Microsoft Virtual Machine (VM) Gold
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold
• Windows Me
  • Windows Me Gold

Patch: msjavx86.exe

• http://www.microsoft.com/java/vm/dl_vm40.htm

---

MS00-082 - 「無効な MIME ヘッダー」の脆弱性に対する対策

Posted: 2000/10/31

248838

Affected Products:

• Exchange Server 5.5
  • Exchange Server 5.5 SP3

Patch: Q248838engI.EXE

• http://download.microsoft.com/download/exch55/patch/5.5.2653.22/nt45/en-us/q248838engi.exe

---

MS00-083 - 「Netmon のプロトコル解析」の脆弱性に対する対策

Posted: 2000/11/01

274835

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: Q274835i.EXE

• http://www.microsoft.com/ntserver/nts/downloads/critical/q274835/download.asp

274835

Affected Products:

• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q274835_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q274835/NT5/EN-US/Q274835_W2K_SP2_x86_en.EXE

273476

Affected Products:

• Systems Management Server 1.2
  • Systems Management Server 1.2 SP4

Patch: Q273476c.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q274835/NT5/EN-US/Q274835_W2K_SP2_x86_en.EXE

273476

Affected Products:

• Systems Management Server 2.0
  • Systems Management Server 2.0 Gold
  • Systems Management Server 2.0 SP1
  • Systems Management Server 2.0 SP2

Patch: Q273476c.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q274835/NT5/EN-US/Q274835_W2K_SP2_x86_en.EXE

274835

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q274835ts.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS00-084 - 「インデックス サービスのクロスサイト スクリプティング」の脆弱性に対する対策

Posted: 2000/11/02

278499

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Internet Information Services 5.0
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Indexing Services for Windows 2000
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q278499_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q278499/NT5/EN-US/Q278499_W2K_SP2_x86_en.EXE

---

MS00-085 - 「ActiveX におけるパラメータ照合」の脆弱性に対する対策

Posted: 2000/11/02

278511

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: Q278511_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/patch/q278511/nt5/en-us/q278511_w2k_sp2_x86_en.exe

---

MS00-086 - 「Web サーバーによるファイル要求の解析」の脆弱性に対する対策

Posted: 2000/11/06

277873

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: arbexei.exe

• http://download.microsoft.com/download/winntsp/Patch/q277873/NT4/EN-US/arbexei.exe

277873

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q277873_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q293826/NT5/EN-US/Q293826_W2K_SP3_x86_en.EXE

---

MS00-087 - 「ターミナル サーバーへのログオンで発生するバッファ オーバーフロー」の脆弱性に対する対策

Posted: 2000/11/08

277910

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6
  • Windows NT4 Terminal Server Service Pack 5
  • Windows NT4 Terminal Server Service Pack 4

Patch: q277910i.exe

• http://download.microsoft.com/download/winntterminal/Patch/q277910/NT4/EN-US/Q277910i.EXE

---

MS00-088 - 「Exchange ユーザー アカウント」の脆弱性に対する対策

Posted: 2000/11/16

278523

Affected Products:

• Exchange 2000 Server
  • Exchange 2000 Gold
• Exchange 2000 Enterprise Server
  • Exchange 2000 Gold

Patch: Q278523ENGI.EXE

• http://download.microsoft.com/download/exchangeentserver/patch/06.00.26.4418/nt5/en-us/q278523engi.exe

---

MS00-089 - 「ドメイン アカウント ロックアウト」の脆弱性に対する対策

Posted: 2000/11/21

274372

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1

Patch: q274372_w2k_sp2_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/q274372/NT5/EN-US/Q274372_W2K_SP2_x86_en.EXE

---

MS00-090 - 「.ASX バッファ オーバーラン」と「.WMS スクリプト 実行」の脆弱性に対する対策

Posted: 2000/11/22

280419

Affected Products:

• Windows Media Player 7.0
  • Windows Media Player 7.0 Gold

Patch: wmsu34419.EXE

• http://support.microsoft.com/default.aspx?scid=kb;en-us;298598

280419

Affected Products:

• Windows Media Player 6.4
  • Windows Media Player 6.4 Gold
• Windows Media Player 6.4 for Windows 2000
  • Windows Media Player 6.4 for Windows 2000 Gold

Patch: wmsu33995.exe

• http://download.microsoft.com/download/winmediaplayer/Update/33995/WIN98/EN-US/wmqfe33955.exe

280419

Affected Products:

• Windows Media Player 6.4 for Windows NT 4.0
  • Windows Media Player 6.4 for Windows NT 4.0 Gold

Patch: Wmsu33995.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=26069

---

MS00-091 - 「不完全な TCP/IP パケット」の脆弱性に対する対策

Posted: 2000/11/30

275567

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold
• Windows Me
  • Windows Me Gold

Patch: q275567i.exe

• http://download.microsoft.com/download/winntsp/Patch/Q275567/NT4/EN-US/Q275567i.EXE

275567

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q275567ts.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS00-092 - 「拡張ストアド プロシージャ パラメータ解析」の脆弱性に対する対策

Posted: 2000/12/01

280380

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP2

Patch: s70918i.exe

• http://download.microsoft.com/download/sql70/patch/7.0/win98me/en-us/s70918i.exe

280380

Affected Products:

• SQL Server 2000
  • SQL Server 2000 Gold
• SQL Server Desktop Engine (MSDE) 2000
  • SQL Server Desktop Engine (MSDE) 2000 Gold

Patch: s80233i.exe

• http://download.microsoft.com/download/sqlsvr2000/ss2kxp/2000/w98nt42kme/en-us/s80233i.exe

---

MS00-093 - 「印刷テンプレート」と「フォームによるファイル アップロード」の脆弱性に対する対策

Posted: 2000/12/01

279328

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP1

Patch: q279328.exe

• http://download.microsoft.com/download/ie501sp1/q279328/5.01_SP1/WIN98/EN-US/q279328.exe

279328

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 Gold

Patch: Q279328.exe

• http://download.microsoft.com/download/ie55/q279328/5.5/WIN98Me/EN-US/q279328.exe

279328

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP1

Patch: q279328.Exe

• http://download.microsoft.com/download/ie55sp1/q279328/5.5_SP1/WIN98Me/EN-US/q279328.exe

---

MS00-094 - 「電話帳サービス バッファ オーバーフロー」の脆弱性に対する対策

Posted: 2000/12/04

276575

Affected Products:

• Connection Manager
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: Q276575_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q276575/NT5/EN-US/Q276575_W2K_SP2_x86_en.EXE

276575

Affected Products:

• Connection Manager
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: q276575i.exe

• http://download.microsoft.com/download/winntsp/Patch/q276575/NT4/EN-US/Q276575i.EXE

276575

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q276575ts.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS00-095 - 「レジストリのアクセス権」の脆弱性を解決するツール

Posted: 2000/12/06

265714

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Q265714i.EXE

• http://download.microsoft.com/download/winntterminal/Patch/Q265714/NT4/EN-US/Q265714i.exe

265714

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q265714i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=28812

---

MS00-096 - 「SNMP パラメータ」の脆弱性を解決するツール

Posted: 2000/12/06

266794

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q266794_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q266794/NT5/EN-US/Q266794_W2K_SP2_x86_en.EXE

---

MS00-097 - 「Windows Media サーバーに対する接続の切断」の脆弱性を解決する修正プログラム

Posted: 2000/12/15

281256

Affected Products:

• Windows Media Services 4.1
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows Media Services 4.0
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: WMSU35924.EXE

• http://download.microsoft.com/download/winmediatech40/update/35924/nt45/en-us/wmsu35924.exe

---

MS00-098 - 「インデックス サービス ファイル列挙」の脆弱性に対する対策

Posted: 2000/12/19

280838

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: Q280838_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q280838/NT5/EN-US/Q280838_W2K_SP2_x86_en.EXE

---

MS00-099 - 「ディレクトリ サービス復元モードのパスワード」の脆弱性に対する対策

Posted: 2000/12/20

271641

Affected Products:

• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q271641_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q271641/NT5/EN-US/Q271641_W2K_SP2_x86_en.EXE

---

MS00-100 - 「無効なWeb フォームの提出」の脆弱性に対する対策

Posted: 2000/12/22

280322

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: Q280322_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q280322/NT5/EN-US/Q280322_W2K_SP2_x86_en.EXE

280322

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: Q280322i.EXE

• http://www.microsoft.com/ntserver/nts/downloads/critical/q280322/default.asp

280322

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q280322

• http://download.microsoft.com/download/office2000pro/fpwec2/2000/W98NT42KMe/EN-US/fpwec.exe

---

MS01-001 - Web クライアントが セキュリティの設定に関わらず NTLM 認証をしてしまう

Posted: 2001/01/11

282132

Affected Products:

• Windows Me
  • Windows Me Gold

Patch: 282132usam.exe

• http://download.microsoft.com/download/winme/update/14733/winme/en-us/282132usam.exe

282132

Affected Products:

• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Professional
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q282132_W2K_SP2_x86_en

• http://download.microsoft.com/download/win2000platform/Patch/Q282132/NT5/EN-US/Q282132_W2K_SP2_x86_en.EXE

282132

Affected Products:

• Office 2000
  • Office 2000 SR-1a
  • Office 2000 SR-1
  • Office 2000 Service Pack 2

Patch: fpwec

• http://office.microsoft.com/downloads/2000/wecsec.aspx

---

MS01-002 - PowerPoint 2000 ファイル パーサーが問題のあるバッファを含む

Posted: 2001/01/22

285978

Affected Products:

• PowerPoint 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
  • Office 2000 Service Pack 2

Patch: ppt2ksec.exe

• http://download.microsoft.com/download/powerpoint2000/update/sr-1a/win98me/en-us/ppt2ksec.exe

285978

Affected Products:

• PowerPoint 97
  • PowerPoint 97 Gold

Patch: ppt97sec.exe

• http://download.microsoft.com/download/powerpoint97win95/ppt97sec/97/WIN98/EN-US/ppt97sec.EXE

---

MS01-003 - Winsock Mutex の弱いアクセス権によりサービスにエラーが発生する

Posted: 2001/01/24

279336

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: Q279336i.EXE

• http://www.microsoft.com/ntserver/nts/downloads/critical/q279336/download.asp

279336

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q279336i.exe

• http://www.microsoft.com/ntserver/terminalserver/downloads/critical/q279336/download.asp

---

MS01-004 - 不正な .HTR リクエストがファイル フラグメントを読み取ってしまう

Posted: 2001/01/29

285985

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: frgvuli.exe

• http://download.microsoft.com/download/winntsp/patch/q285985/nt4/en-us/frgvuli.exe

285985

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q285985_W2K_SP3_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q285985/NT5/EN-US/Q285985_W2K_SP3_x86_en.EXE

---

MS01-005 - 英語版のみ : 修正パッケージの問題により修正プログラムが削除される

Posted: 2001/01/30

281767

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1

Patch: Q281767_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/patch/q281767/nt5/en-us/q281767_w2k_sp2_x86_en.exe

285083

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Gold
• Windows 2000 Professional
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Gold

Patch: Q285083_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/patch/q285083/nt5/en-us/q285083_w2k_sp2_x86_en.exe

---

MS01-006 - 無効な RDP データが Terminal Server を異常終了させる

Posted: 2001/01/31

286132

Affected Products:

• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q286132_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q286132/NT5/EN-US/Q286132_W2K_SP2_x86_en.EXE

---

MS01-007 - Network DDE Agent の要求が、システム コンテキストでコードを実行してしまう

Posted: 2001/02/05

285851

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q285851_W2K_SP3_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q285851/NT5/EN-US/Q285851_W2K_SP3_x86_en.EXE

---

MS01-008 - 不正な NTLMSSP リクエストによりシステム特権でコードが実行される

Posted: 2001/02/07

280119

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: Q280119i.EXE

• http://download.microsoft.com/download/winntsp/patch/q280119/nt4/en-us/q280119i.exe

280119

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q280119i.exe

• http://www.microsoft.com/ntserver/terminalserver/downloads/critical/q280119/download.asp

---

MS00-009 - 「Image Source Redirect」の脆弱性に対する対策

Posted: 2000/02/16

251109

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2

Patch: Q251109.exe

• http://download.microsoft.com/download/ie4095/secpach5/4.01/W9XNT4/EN-US/q251109.exe

251109

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 Gold

Patch: q251109.exe

• http://download.microsoft.com/download/ie501/secpach5/5.01/W9XNT4/EN-US/q251109.exe

---

MS01-009 - 無効な PPTP パケット ストリームがカーネルを枯渇させてしまう

Posted: 2001/02/13

283001

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: Q283001i.exe

• http://www.microsoft.com/ntserver/nts/downloads/critical/q283001/download.asp

283001

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q283001ts.exe

• http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms01-009.asp

---

MS01-010 - Windows Media Player スキン ファイルが Java コードを実行してしまう

Posted: 2001/02/14

287045

Affected Products:

• Windows Media Player 7.0
  • Windows Media Player 7.0 Gold

Patch: wmsu38041

• http://download.microsoft.com/download/winmediaplayer/Update/38041/W982KMe/EN-US/wmsu38041.exe

---

MS01-011 - ドメイン コントローラへの無効なリクエストが CPU を使い果たす

Posted: 2001/02/20

299687

Affected Products:

• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1

Patch: Q299687_W2K_SP3_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q299687/NT5/EN-US/Q299687_W2K_SP3_x86_en.EXE

---

MS00-075 - 「Microsoft VM による ActiveX コンポーネントの制御」 の脆弱性に対する対策

Posted: 2000/10/12

275609

Affected Products:

• Microsoft Virtual Machine (VM)
  • Microsoft Virtual Machine (VM) Gold
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold
• Windows Me
  • Windows Me Gold

Patch: msjavx86.exe

• http://www.microsoft.com/java/vm/dl_vm40.htm

287030

Affected Products:

• Microsoft Virtual Machine (VM)
  • Windows 2000 Service Pack 1
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Service Pack 1
• Windows 2000 Professional
  • Windows 2000 Service Pack 1

Patch: Q287030_W2K_SP2_x86_en.EXE

• (Windows Update Only): http://www.microsoft.com/java/default.htm?gssnb=0

---

MS00-071 - 「Word の差し込み印刷機能」の脆弱性に対する対策

Posted: 2000/10/05

274226 (Word 2000)

Affected Products:

• Word 2000
  • Office 2000 SR-1a

Patch: wrdacc.exe

• http://download.microsoft.com/download/word2000/wrdacc/2000/WIN98/EN-US/wrdacc.exe

274226 (Word 2000)

Affected Products:

• Word 97
  • Office 97 SR-2/SR-2b

Patch: wdac97.exe

• http://download.microsoft.com/download/word97win/Patch/4.71.1015.0/W98NT42KMe/EN-US/wd97mcrs.exe

---

MS00-044 - 「ディレクトリ ブラウザ引数の不在」脆弱性に対する対策

Posted: 2000/07/14

267559

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: htrdos4i.exe

• http://download.microsoft.com/download/winntsp/Patch/q267559/NT4ALPHA/EN-US/htrdos4i.exe

267559

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q267559_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q267559/NT5/EN-US/Q267559_W2K_SP2_x86_en.EXE

---

MS00-045 - 「メールとブラウザがリンクしつづけてしまう」脆弱性に対する対策

Posted: 2000/07/20

261255

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 Gold
• Outlook Express 5.01
  • Internet Explorer 5.01 Gold

Patch: q261255.exe

• http://www.microsoft.com/windows/ie/download/critical/patch9.htm

261255

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2
• Outlook Express 4.01
  • Internet Explorer 4.01 SP2

Patch: Q261255.exe

• http://www.microsoft.com/windows/ie/downloads/critical/patch9/default.asp

---

MS00-046 - 「キャッシュ バイパス」の脆弱性に対する対策

Posted: 2000/07/20

261255

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 Gold
• Outlook Express 5.01
  • Internet Explorer 5.01 Gold

Patch: q261255.exe

• http://www.microsoft.com/windows/ie/download/critical/patch9.htm

261255

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2
• Outlook Express 4.01
  • Internet Explorer 4.01 SP2

Patch: Q261255.exe

• http://www.microsoft.com/windows/ie/downloads/critical/patch9/default.asp

---

MS00-048 - 「ストアドプロシージャの権限」脆弱性に対する対策

Posted: 2000/07/07

266766

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP1
  • SQL Server 7.0 SP2
• SQL Server Desktop Engine (MSDE) 1.0
  • SQL Server 7.0 SP1
  • SQL Server 7.0 SP2

Patch: s70918i.exe

• http://download.microsoft.com/download/sql70/patch/7.0/win98me/en-us/s70918i.exe

---

MS00-051 - 「Excel REGISTER.ID 関数の脆弱性」に対する対策

Posted: 2000/07/26

269252 (Excel 2000)

Affected Products:

• Excel 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
• Office 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a

Patch: xl9p3pkg.exe

• http://download.microsoft.com/download/excel2000/xl9p3pkg/2000/WIN98/EN-US/xl9p3pkg.exe

269252 (Excel 2000)

Affected Products:

• Excel 97
  • Office 97 SR-2/SR-2b
• Office 97
  • Office 97 SR-2/SR-2b

Patch: xl8p10pkg.exe

• http://download.microsoft.com/download/excel97win/xl8p10pk/97/WIN98/EN-US/xl8p10pkg.exe

---

MS00-054 - 「無効な IPX Ping パケット」の脆弱性に対する対策

Posted: 2000/08/03

265334

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5

Patch: 265334US5.EXE

• http://download.microsoft.com/download/win95/update/8982/w95/en-us/265334us5.exe

265334

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 265334USA8.EXE

• http://download.microsoft.com/download/win98/update/8982/w98/en-us/265334usa8.exe

---

MS00-056 - 「Microsoft Office HTML Object Tag」の脆弱性に対する対策

Posted: 2000/08/09

269880

Affected Products:

• Office 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
• PowerPoint 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
• Word 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
• Excel 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a

Patch: Of9data.exe

• http://office.microsoft.com/downloads/2000/Of9data.aspx

---

MS00-058 - 「特殊化したヘッダ」の脆弱性に対する対策

Posted: 2000/08/14

256888

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold

Patch: Q256888_W2K_SP1_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q256888/NT5/EN-US/Q256888_W2K_SP1_x86_en.EXE

---

MS00-061 - 「Microsoft Money のパスワード」に関する弱点を解決する修正プログラム

Posted: 2000/08/25

272232

Affected Products:

• Money 2000
  • Money 2000 Gold
• Money 2001
  • Money 2001 Gold

Patch: Update Internet Information

• On the Tools menu, click Update Internet Information.

---

MS00-042 - 「アクティブ セットアップ ダウンロード」脆弱性に対する対策

Posted: 2000/06/29

269368

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 Gold

Patch: Q269368.Exe

• http://download.microsoft.com/download/ie55/secpac11/5.5/WIN98/EN-US/q269368.exe

265258

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2

Patch: q265258.exe

• http://download.microsoft.com/download/ie501sp1/secpach8/5.01_SP1/WIN98/EN-US/q265258.exe

265258

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 Gold

Patch: Q265258.exe

• http://www.microsoft.com/windows/ie/download/critical/patch8.htm

265258

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP1

Patch: q265258.Exe

• http://www.microsoft.com/windows/ie/download/critical/patch8.htm

---

MS00-043 - 「改ざんされた電子メール ヘッダ」の脆弱性に対する対策

Posted: 2000/07/18

261255

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 Gold
• Outlook Express 5.01
  • Internet Explorer 5.01 Gold

Patch: q261255.exe

• http://www.microsoft.com/windows/ie/download/critical/patch9.htm

267884

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2
• Outlook Express 4.01
  • Internet Explorer 4.01 SP2

Patch: Q261255.exe

• http://www.microsoft.com/windows/ie/downloads/critical/patch9/default.asp

---

MS00-064 - 「ユニキャスト サービスの競合状態」の脆弱性に対する対策

Posted: 2000/09/06

273014

Affected Products:

• Windows Media Services 4.0
  • Windows Media Services 4.0 Gold
• Windows Media Services 4.1
  • Windows Media Services 4.1 Gold

Patch: WMSU27678.EXE

• http://download.microsoft.com/download/winmediatech40/update/27678/nt45/en-us/wmsu27678.exe

---

MS00-033 - 「フレームのドメイン照合」、「権限のない cookie アクセス」、「コンポーネント属性の変形」の脆弱性に対する対策

Posted: 2000/05/17

269368

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2

Patch: q269368.exe

• http://download.microsoft.com/download/ie55/secpac11/5.5/WIN98/EN-US/q269368.exe

269368

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 Gold

Patch: Q269368.exe

• http://www.microsoft.com/windows/ie/download/critical/patch11.htm

---

MS00-039 - 「SSL 証明確認」の脆弱性に対する対策

Posted: 2000/06/05

269368

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2

Patch: q269368.exe

• http://download.microsoft.com/download/ie55/secpac11/5.5/WIN98/EN-US/q269368.exe

269368

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 Gold

Patch: Q269368.exe

• http://www.microsoft.com/windows/ie/download/critical/patch11.htm

---

MS00-041 - 「DTS パスワード」の脆弱性に対する対策

Posted: 2000/06/13

264880

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP1
  • SQL Server 7.0 SP2

Patch: s70918i.exe

• http://download.microsoft.com/download/sql70/patch/7.0/win98me/en-us/s70918i.exe

---

MS00-049 - 「Office HTML Script および IE Script」の脆弱性に対する対策

Posted: 2000/07/13

268365

Affected Products:

• Excel 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
• PowerPoint 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
• Office 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a

Patch: Addinsec.exe

• http://office.microsoft.com/downloads/2000/Addinsec.aspx

268365 (Excel 2000)

Affected Products:

• PowerPoint 97
  • PowerPoint 97 Gold
• Office 97
  • Office 97 Gold

Patch: ppt97sec.EXE

• http://office.microsoft.com/downloads/9798/Ppt97sec.aspx

269368

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2

Patch: q269368.exe

• http://download.microsoft.com/download/ie55/secpac11/5.5/WIN98/EN-US/q269368.exe

269368

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 Gold

Patch: Q269368.exe

• http://www.microsoft.com/windows/ie/download/critical/patch11.htm

269368

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP1

Patch: q269368.Exe

• http://www.microsoft.com/windows/ie/download/critical/patch11.htm

269368

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 Gold

Patch: Q269368.Exe

• http://www.microsoft.com/windows/ie/download/critical/patch11.htm

---

MS00-050 - 「Telnet Server Flooding」 の脆弱性に対する対策

Posted: 2000/07/24

267843

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: q267843_w2k_sp2_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/q267843/NT5/EN-US/Q267843_W2K_SP2_x86_en.EXE

---

MS00-055 - 「Scriptlet によるレンダリング」の脆弱性に対する対策

Posted: 2000/08/09

269368

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2

Patch: q269368.exe

• http://download.microsoft.com/download/ie55/secpac11/5.5/WIN98/EN-US/q269368.exe

269368

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 Gold

Patch: Q269368.exe

• http://www.microsoft.com/windows/ie/download/critical/patch11.htm

269368

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP1

Patch: q269368.Exe

• http://www.microsoft.com/windows/ie/download/critical/patch11.htm

269368

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 Gold

Patch: Q269368.Exe

• http://www.microsoft.com/windows/ie/download/critical/patch11.htm

---

MS00-034 - Microsoft Office 2000 および Office 2000 ファミリー製品の脆弱性に対する対策

Posted: 2000/05/12

262767

Affected Products:

• Office 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
• PowerPoint 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
• Outlook 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
• Word 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
• Excel 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
• Photo Draw 2000 Version 2
  • Photo Draw 2000 Version 2 Gold
• Photo Draw 2000 Version 1
  • PictureIt 2000 Gold
  • Photo Draw 2000 Version 1 Gold
• Publisher 2000
  • Publisher 2000 Gold
• Project 2000
  • Project 2000 Gold
• FrontPage 2000
  • Front Page 2000 Gold
• Works 2000
  • Works 2000 Gold
• Access 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a

Patch: Uactlsec.exe

• http://download.microsoft.com/download/office2000pro/Uactlsec/2000/WIN98/EN-US/Uactlsec.exe

---

MS00-035 - 「SQL Server 7.0 Service Pack のパスワード」の脆弱性に対する対策

Posted: 2000/05/30

263968

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP1
  • SQL Server 7.0 SP2

Patch: sqlsp.exe

• http://download.microsoft.com/download/sql70/sppwfix/7.0/win98/en-us/sqlsp.exe

---

MS00-037 - 「HTML Help File Code Execution」の脆弱性に対する対策

Posted: 2000/06/02

259166

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 Gold
• Internet Explorer 4.0
  • Internet Explorer 4.0 Gold
• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: hhupd.exe

• http://download.microsoft.com/download/ie5/patch/1.0/w9xnt4/en-us/hhupd.exe

259166

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 Gold

Patch: Q259166_W2K_SP1_x86_en.EXE

• http://download.microsoft.com/download/ie501/patch/1.0/nt5/en-us/q259166_w2k_sp1_x86_en.exe

---

MS00-038 - 「Windows Media Encoder の異常な形式の要求」の脆弱性に対する対策

Posted: 2000/05/30

264133

Affected Products:

• Windows Media Encoder 4.0
  • Windows Media Encoder 4.0 Gold
• Windows Media Encoder 4.1
  • Windows Media Encoder 4.1 Gold

Patch: WMSU20935a.EXE

• http://download.microsoft.com/download/winmediatech40/update/20935a/win98/en-us/wmsu20935a.exe

---

MS00-010 - 「サイト ウィザード入力確認」の脆弱性に対する対策

Posted: 2000/02/18

252614

Affected Products:

• Site Server 3.0, Commerce Edition
  • Site Server 3.0 Gold
  • Site Server 3.0 SP1
  • Site Server 3.0 SP2
  • Site Server 3.0 SP3
  • Site Server 3.0 SP4

Patch: Q252614.zip

• http://download.microsoft.com/download/siteserver30commerce/Patch/3.0/NT4/EN-US/Q252614.zip

---

MS00-012 - 「リモート エージェントのアクセス許可」の脆弱性に対する対策

Posted: 2000/02/22

249847

Affected Products:

• Systems Management Server 2.0
  • Systems Management Server 2.0 Gold
  • Systems Management Server 2.0 SP1

Patch: Q249847i.EXE

• http://download.microsoft.com/download/sms20/patch/q249847/nt4/en-us/q249847i.exe

---

MS00-013 - 「Windows Media サービス ハンドシェイクの順序不良」の脆弱性に対する対策

Posted: 2000/02/23

253943

Affected Products:

• Windows Media Services 4.0
  • Windows Media Services 4.0 Gold
• Windows Media Services 4.1
  • Windows Media Services 4.1 Gold

Patch: WMSU4954_NT4.EXE

• http://download.microsoft.com/download/winmediatech40/update/4954/nt4/en-us/wmsu4954_nt4.exe

253943

Affected Products:

• Windows Media Services 4.1
  • Windows Media Services 4.1 Gold
• Windows Media Services 4.0
  • Windows Media Services 4.0 Gold

Patch: WMSU4954_Win2000.EXE

• http://download.microsoft.com/download/winmediatech40/update/4954/nt5/en-us/wmsu4954_win2000.exe

---

MS00-014 - 「SQL クエリー」の脆弱性に対する対策

Posted: 2000/03/08

256052

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP1
  • SQL Server 7.0 Gold
• SQL Server Desktop Engine (MSDE) 1.0
  • SQL Server 7.0 Gold
  • SQL Server 7.0 SP1

Patch: s70780i.exe

• http://download.microsoft.com/download/sql70/patch/2000.3.1.0/nt4alpha/en-us/s70780i.exe

---

MS00-015 - 「Microsoft Clip Art Gallery」における脆弱性に対する対策

Posted: 2000/03/06

256167

Affected Products:

• Office 2000
  • Office 2000 Gold
• Works 2000
  • Works 2000 Gold
• PictureIt 2000
  • PictureIt 2000 Gold
• Home Publishing 2000
  • Home Publishing 2000 Gold
• Publisher 99
  • Publisher 99 Gold
• Photo Draw 2000 Version 1
  • Photo Draw 2000 Version 1 Gold
• Greetings 2000
  • Greetings 2000 Gold

Patch: cilupdt.exe

• http://download.microsoft.com/download/office2000/patch/4.71.1015.0/win98/en-us/cilupdt.exe

---

MS00-016 - 「改ざんされたメディア ライセンス要求」の脆弱性に対する対策

Posted: 2000/03/17

257200

Affected Products:

• Windows Media Rights Manager 1
  • Windows Media Rights Manager 1 Gold

Patch: WMRMU8912_NT4.EXE

• http://download.microsoft.com/download/winmediatech40/update/8912/nt4/en-us/wmrmu8912_nt4.exe

---

MS00-017 - 「パスに DOS デバイス名が含まれる場合」の脆弱性に対する対策

Posted: 2000/03/16

256015

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5

Patch: 256015USA5.EXE

• http://download.microsoft.com/download/win95/update/6467/w95/en-us/256015usa5.exe

256015

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 256015USA8.EXE

• http://download.microsoft.com/download/win98se/update/6467/w98/en-us/256015usa8.exe

---

MS00-018 - 「チャンクエンコーディングされたポスト」の脆弱性に対する対策

Posted: 2000/03/20

252693

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: chkenc4i.exe

• http://download.microsoft.com/download/iis40/patch/4.2.739.1/nt4/en-us/chkenc4i.exe

---

MS00-019 - 「仮想化された UNC シェア」の脆弱性に対する対策

Posted: 2000/03/30

249599

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: uncsec4i.exe

• http://download.microsoft.com/download/iis40/patch/4.2.736.1/nt4/en-us/uncsec4i.exe

249599

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold

Patch: Q249599_W2K_SP1_X86_en.EXE

• http://download.microsoft.com/download/win2000platform/patch/q249599/nt5/en-us/q249599_w2k_sp1_x86_en.exe

---

MS00-022 - 「XLM Text Macro」の脆弱性に対する対策

Posted: 2000/04/03

255605

Affected Products:

• Excel 97
  • Office 97 SR-2/SR-2b
• Office 97
  • Office 97 SR-2/SR-2b

Patch: xl8p9pkg.exe

• http://www.officeupdate.com/downloadDetails/Xl8p9pkg.htm?s=/downloadCatalog/dldExcel.asp

---

MS00-023 - 「無数のエスケープ文字」の脆弱性に対する対策

Posted: 2000/04/12

254142

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: escseq4i.exe

• http://download.microsoft.com/download/iis40/patch/4.2.740.1/nt4alpha/en-us/escseq4i.exe

254142

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold

Patch: Q254142_W2K_SP1_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/patch/q254142/nt5/en-us/q254142_w2k_sp1_x86_en.exe

---

MS00-024 - 「改ざんされたレジストリが暗号キーに与える影響」の脆弱性に対する対策

Posted: 2000/04/12

259496

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 4

Patch: Q259496i.exe

• http://download.microsoft.com/download/winntsp/patch/q259496/nt4/en-us/q259496i.exe

259496

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q259496i.Exe

• http://download.microsoft.com/download/winntsp/Patch/Q259496/NT4/EN-US/Q259496i.exe

---

MS00-025 - 「Link View サーバー側コンポーネント」の脆弱性に対する対策

Posted: 2000/04/14

259799

Affected Products:

• FrontPage 98 Server Extensions
  • FrontPage 98 Server Extensions Gold
• Internet Information Server 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Personal Web Server 4.0
  • Personal Web Server 4.0 Gold

Patch: Q259799

• http://support.microsoft.com/default.aspx?scid=kb;en-us;259799

---

MS00-028 - 「サーバー側イメージ マップ コンポーネント」の脆弱性に対する対策

Posted: 2000/04/21

260267

Affected Products:

• FrontPage 97 Server Extensions
  • FrontPage 97 Server Extensions Gold
• FrontPage 98 Server Extensions
  • FrontPage 98 Server Extensions Gold
• Internet Information Server 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Personal Web Server 4.0
  • Personal Web Server 4.0 Gold

Patch: Q260267

• http://support.microsoft.com/default.aspx?scid=kb;en-us;260267

---

MS00-030 - 「URL 内の変形された拡張子データ」の脆弱性に対する対策

Posted: 2000/05/11

260205

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: myrdot4i.exe

• http://download.microsoft.com/download/iis40/patch/q260205/nt4alpha/en-us/myrdot4i.exe

260205

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold

Patch: Q260205_W2K_SP1_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q260205/NT5/EN-US/Q260205_W2K_SP1_x86_en.EXE

---

MS00-031 - 「区切り文字なしの .HTR リクエスト」 および 「.HTR 経由のファイル フラグメントの読み取り」の脆弱性に対する対策

Posted: 2000/05/10

267559

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold

Patch: q267559_w2k_sp2_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/q267559/NT5/EN-US/Q267559_W2K_SP2_x86_en.EXE

260838

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: ismpst4i.exe

• http://download.microsoft.com/download/iis40/patch/q260838/nt4alpha/en-us/ismpst4i.exe

---

MS99-053 - 「マルチスレッド SSL ISAPI フィルタ」の脆弱性に対する対策

Posted: 1999/12/02

244613

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 4

Patch: sslune4i.exe

• http://download.microsoft.com/download/iis40/patch/4.02.0728/nt4/en-us/sslune4i.exe

---

MS99-054 - 「WPAD Spoofing」の脆弱性に対する対策

Posted: 1999/12/01

247333

Affected Products:

• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: Q247333

• http://support.microsoft.com/default.aspx?scid=KB;en-us;q247333

---

MS99-058 - 「仮想ディレクトリの名前」の脆弱性

Posted: 1999/12/21

238606

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 4

Patch: vrdcon4i.exe

• http://download.microsoft.com/download/iis40/patch/4.2.727.1/nt4/en-us/vrdcon4i.exe

---

MS99-059 - 「不正なTDSパケット ヘッダ」の脆弱性に対する対策

Posted: 1999/12/20

248749

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP1

Patch: S70761i.exe

• http://download.microsoft.com/download/sql70/patch/7.0/win98/en-us/s70761i.exe

---

MS99-060 - 「HTML メール添付ファイル」の脆弱性に対する対策

Posted: 1999/12/22

249082

Affected Products:

• Outlook Express 5 for Macintosh
  • Outlook Express 5 for Macintosh Gold
• Internet Explorer 4.5 for Macintosh
  • Internet Explorer 4.5 for Macintosh Gold

Patch: MacFiles

• http://support.microsoft.com/support/kb/articles/q249/0/82.asp

---

MS99-061 - 「エスケープ文字解析」の脆弱性に対する対策

Posted: 1999/12/21

246401

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: unschx4i.exe

• http://download.microsoft.com/download/iis40/patch/4.2.732.1/nt4/en-us/unschx4i.exe

---

MS99-052 - 「パスワードをキャッシュするレガシ メカニズムが与える」脆弱性に対する対策

Posted: 1999/11/29

168115

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5

Patch: 168115us5.exe

• http://download.microsoft.com/download/win95/update/168115/w95/en-us/168115us5.exe

168115

Affected Products:

• Windows 98
  • Windows 98 Gold

Patch: 168115us8.exe

• http://download.microsoft.com/download/win98/update/168115/w98/en-us/168115us8.exe

---

MS99-051 - 「IE タスク スケジューラ」の脆弱性に対する対策

Posted: 1999/11/29

246972

Affected Products:

• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: q246972

• http://support.microsoft.com/default.aspx?scid=KB;en-us;q246972

---

MS99-049 - 「URL を用いたファイルアクセス」の脆弱性に対する対策

Posted: 1999/11/12

245729

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5

Patch: 245729us5.exe

• http://download.microsoft.com/download/win95/update/245729/w95/en-us/245729us5.exe

245729

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1

Patch: 245729us8.exe

• http://download.microsoft.com/download/win98/update/245729/w98/en-us/245729us8.exe

---

MS99-048 - 「Active Setup Control」の脆弱性に対する対策

Posted: 1999/11/11

244540

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2

Patch: q244540.exe

• http://www.microsoft.com/msdownload/iebuild/ascontrol/en/136473.htm

244540

Affected Products:

• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: Q244540.exe

• http://www.microsoft.com/msdownload/iebuild/ascontrol/en/136473.htm

---

MS99-044 - 「Excel SYLK」の脆弱性に対する対策

Posted: 1999/10/20

241900

Affected Products:

• Excel 97
  • Office 97 SR-2/SR-2b
• Office 97
  • Office 97 SR-2/SR-2b

Patch: xl8p7pkg.exe

• http://download.microsoft.com/download/office97pro/xl8p9pkg/97/WIN98/EN-US/xl8p9pkg.exe

241900

Affected Products:

• Excel 2000
  • Office 2000 Gold
• Office 2000
  • Office 2000 Gold

Patch: xl9p2pkg.exe

• http://download.microsoft.com/download/excel2000/xl9p2pk/2000/WIN98/EN-US/xl9p2pkg.exe

---

MS99-043 - 「Javascript リダイレクト」の脆弱性に対する対策

Posted: 1999/10/18

244356

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2

Patch: q244356.exe

• http://www.microsoft.com/msdownload/iebuild/jsredir/en/138099.htm

244357

Affected Products:

• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: q244357.exe

• http://www.microsoft.com/msdownload/iebuild/jsredir/en/138101.htm

---

MS99-042 - 「IFRAME ExecCommand」の脆弱性に対する対策

Posted: 1999/10/11

243638

Affected Products:

• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: q243638.exe

• http://www.microsoft.com/msdownload/iebuild/dlbhav/en/136291.htm

---

MS99-040 - IE 5 「ダウンロード動作」の脆弱性に対する対策

Posted: 1999/09/28

243638

Affected Products:

• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: q243638.exe

• http://www.microsoft.com/msdownload/iebuild/dlbhav/en/136291.htm

---

MS99-037 - 「ImportExportFavorites」 の脆弱性に対する対策

Posted: 1999/09/10

241361

Affected Products:

• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: q241361.exe

• http://www.microsoft.com/msdownload/iebuild/iefav/en/iefav.htm

241361

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2

Patch: Q241361.exe

• http://support.microsoft.com/default.aspx?scid=kb;en-us;Q241361&sd=tech

---

MS99-035 - 「Set Cookie ヘッダによるキャッシュ」の脆弱性に対する対策

Posted: 1999/09/10

238647

Affected Products:

• Site Server 3.0
  • Site Server 3.0 Gold
  • Site Server 3.0 SP1
  • Site Server 3.0 SP2
• Site Server 3.0, Commerce Edition
  • Site Server 3.0 Gold
  • Site Server 3.0 SP1
  • Site Server 3.0 SP2
• Microsoft Commercial Internet System 2.0
  • Microsoft Commercial Internet System 2.0 Gold
• Microsoft Commercial Internet System 2.5
  • Microsoft Commercial Internet System 2.5 Gold

Patch: q238647x86eng.exe

• ftp://ftp.microsoft.com/bussys/sitesrv/sitesrv-public/fixes/usa/siteserver3/Hotfixes-PostSP2/ProxyCache/

---

MS99-033 - 「改ざんされた Telnet 引数」の脆弱性に対する対策

Posted: 1999/09/09

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5

Patch: telnet95.exe

• http://www.microsoft.com/windows95/downloads/contents/WUCritical/Telnet/Default.asp

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: TelnetUp.EXE

• http://www.microsoft.com/windows98/downloads/contents/wucritical/telnet/license.asp

---

MS99-032 - 「Scriptlet.typlib/Eyedog」の脆弱性に対する対策

Posted: 1999/08/31

240308

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP2
  • Internet Explorer 4.01 Gold
  • Internet Explorer 4.01 SP1
• Internet Explorer 4.0
  • Internet Explorer 4.0 Gold
• Internet Explorer 5
  • Internet Explorer 5 Gold
• Outlook Express 4.01
  • Internet Explorer 4.01 Gold
  • Internet Explorer 4.01 SP1
  • Internet Explorer 4.01 SP2

Patch: q240308.exe

• ftp://ftp.microsoft.com/peropsys/IE/IE-Public/Fixes/usa/Eyedog-fix/

---

MS99-030 - Office 「ODBC ドライバ」の脆弱性に対する対策

Posted: 1999/08/20

239114

Affected Products:

• Office 95
  • Office 95 Gold

Patch: Jet30Pkg.exe

• http://officeupdate.microsoft.com/downloadDetails/excel95odbc.htm

239114

Affected Products:

• Office 97
  • Office 97 Gold
  • Office 97 SR-1
  • Office 97 SR-2/SR-2b

Patch: jetCopkg.exe

• http://office.microsoft.com/downloads/9798/excel97odbc.aspx

239114

Affected Products:

• Office 2000
  • Office 2000 Gold
  • Office 2000 SR-1
  • Office 2000 SR-1a

Patch: JetcoPkg.exe

• http://office.microsoft.com/downloads/2000/excel2000odbc.aspx

---

MS99-022 - Double Byte Code Page Vulnerability

Posted: 1999/06/24

233335

Affected Products:

• Internet Information Server 3.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5

Patch: fesrc3i.exe

• ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/fesrc-fix/

233335

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 3

Patch: fesrc4i.exe

• ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/usa/security/fesrc-fix/

---

MS99-019 - Malformed HTR Request Vulnerability

Posted: 1999/06/15

234905

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5

Patch: extfixi.exe

• ftp://ftp.microsoft.com/bussys/IIS/iis-public/fixes/usa/ext-fix/

---

MS99-018 - Malformed Favorites Icon Vulnerability

Posted: 1999/05/27

241361

Affected Products:

• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: Q241361.exe

• http://www.microsoft.com/msdownload/iebuild/iefav/en/iefav.htm

241361

Affected Products:

• Internet Explorer 4.0
  • Internet Explorer 4.0 Gold
• Internet Explorer 4.01
  • Internet Explorer 4.01 Gold
  • Internet Explorer 4.01 SP1
  • Internet Explorer 4.01 SP2

Patch: q241361.exe

• http://support.microsoft.com/default.aspx?scid=kb;EN-US;241361

---

MS99-014 - Excel 97 Virus Warning Vulnerabilities

Posted: 1999/05/07

231304

Affected Products:

• Office 97
  • Office 97 SR-2/SR-2b
• Excel 97
  • Office 97 SR-2/SR-2b

Patch: Xl8p9pkg.exe

• http://officeupdate.microsoft.com/downloadDetails/Xl8p9pkg.htm

---

MS99-012 - MSHTML Update Available for Internet Explorer

Posted: 1999/04/21

226326

Affected Products:

• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: mshtml5.exe

• http://www.microsoft.com/msdownload/iebuild/mshtml/en/72111.htm

226326

Affected Products:

• Internet Explorer 4.01
  • Internet Explorer 4.01 SP1
  • Internet Explorer 4.01 SP2

Patch: mshtml4.exe

• http://www.microsoft.com/msdownload/iebuild/mshtml/en/72113.htm

---

MS99-011 - DHTML Edit Vulnerability

Posted: 1999/04/21

226326

Affected Products:

• Internet Explorer 4.0
  • Internet Explorer 4.0 Gold
• Internet Explorer 5
  • Internet Explorer 5 Gold

Patch: DHTMLED5.EXE

• http://support.microsoft.com/default.aspx?scid=kb;en-us;226326

---

MS01-012 - Outlook と Outlook Express の vCard ハンドラが問題のあるバッファを含む

Posted: 2001/02/22

283908

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP1
• Outlook Express 5.5
  • Internet Explorer 5.5 SP1

Patch: q283908.exe

• http://download.microsoft.com/download/ie55sp1/secpac14/5.5_SP1/WIN98Me/EN-US/q283908.exe

283908

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP1
• Outlook Express 5.01
  • Internet Explorer 5.01 SP1

Patch: Q283908.exe

• http://download.microsoft.com/download/ie55sp1/secpac14/5.5_SP1/WIN98Me/EN-US/q283908.exe

---

MS01-013 - Windows 2000 イベント ビューアが問題のあるバッファを含む

Posted: 2001/02/26

285156

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q285156_W2K_SP3_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q285156/NT5/EN-US/Q285156_W2K_SP3_x86_en.EXE

---

MS01-014 - 不正な URL により IIS 5.0 及び Exchange 2000 のサービスにエラーが発生する

Posted: 2001/03/01

286818

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold

Patch: Q286818_W2K_SP3_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q286818/NT5/EN-US/Q286818_W2K_SP3_x86_en.EXE

287678

Affected Products:

• Exchange 2000 Enterprise Server
  • Exchange 2000 Gold
• Exchange 2000 Server
  • Exchange 2000 Gold

Patch: Q287678engi386.EXE

• http://download.microsoft.com/download/exchangeentserver/patch/06.00.54.4418/nt5/en-us/q287678engi386.exe

---

MS01-015 - Internet Explorer がキャッシュされたコンテンツの場所を漏えいしてしまう

Posted: 2001/03/06

279328

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP1

Patch: q279328.exe

• http://download.microsoft.com/download/ie501sp1/q279328/5.01_SP1/WIN98/EN-US/q279328.exe

286045

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP1

Patch: q286045.exe

• http://download.microsoft.com/download/ie55sp1/secpac15/5.5_SP1/W98NT42KMe/EN-US/q286045.exe

286043

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP1
• Internet Explorer 5.5
  • Internet Explorer 5.5 SP1

Patch: q286043.exe

• http://download.microsoft.com/download/ie55sp1/secpac16/5.5_SP1/W9X2KMe/EN-US/q286043.exe

279328

Affected Products:

• Windows Script 5.1
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: scripten.exe

• http://www.microsoft.com/devonly/prodinfo/scripting/downloads/v51/windows2000/scripten.exe

279328

Affected Products:

• Windows Script 5.1
  • Windows 95 SR 2.5
  • Windows 95 SR 2.1
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
  • Windows 98 Gold
  • Windows 98 SP1

Patch: ste51en.exe

• http://www.microsoft.com/devonly/prodinfo/scripting/downloads/v51/other/ste51en.exe

279328

Affected Products:

• Windows Script 5.5
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Scripten.exe

• http://www.microsoft.com/devonly/prodinfo/scripting/downloads/v51/windows2000/scripten.exe

279328

Affected Products:

• Windows Script 5.5
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5
  • Windows 98 Gold
  • Windows 98 SP1
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Scr55en.exe

• http://www.microsoft.com/devonly/prodinfo/scripting/downloads/v55/other/scr55en.exe

---

MS01-016 - 不正な WebDAV リクエストにより IIS が CPU リソースを使い果たす

Posted: 2001/03/08

291845

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q291845_W2K_SP2_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q291845/NT5/EN-US/Q291845_W2K_SP2_x86_en.EXE

---

MS01-017 - VeriSign 発行の誤ったデジタル証明書による、なりすましの危険性

Posted: 2001/03/22

293818

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold
• Windows Me
  • Windows Me Gold

Patch: Crlupd.exe

• http://download.microsoft.com/download/win2000platform/Update/q293818/WIN98Me/EN-US/crlupd.exe

293818

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: crlupd.exe

• http://download.microsoft.com/download/win2000platform/Update/q293818/WIN98Me/EN-US/crlupd.exe

293818

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 4
  • Windows NT4 Terminal Server Service Pack 5
  • Windows NT4 Terminal Server Service Pack 6

Patch: crlupdts.exe

• http://download.microsoft.com/download/win2000platform/Update/q293818/WIN98Me/EN-US/crlupd.EXE

293818

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: crlupD.exe

• http://download.microsoft.com/download/win2000platform/Update/q293818/WIN98Me/EN-US/crlupd.exe

---

MS01-018 - Visual Studio 6.0 VB T-SQL オブジェクトが問題のあるバッファを含む

Posted: 2001/03/27

281297

Affected Products:

• Visual Studio 6.0
  • Visual Studio 6.0 SP 5
• Visual Basic 6.0
  • Visual Basic 6.0 Gold

Patch: Q281297.EXE

• http://download.microsoft.com/download/vstudio60ent/Patch/6.0/WIN98Me/EN-US/Q281297.EXE

---

MS01-019 - 圧縮フォルダのパスワードが復元されてしまう

Posted: 2001/03/28

252694

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 252694usa8.exe

• http://download.microsoft.com/download/win98/update/14715/w98/en-us/252694usa8.exe

252694

Affected Products:

• Windows Me
  • Windows Me Gold

Patch: 252694usam.exe

• http://download.microsoft.com/download/winme/update/14715/winme/en-us/252694usam.exe

---

MS01-020 - 不適切な MIME ヘッダーが原因で Internet Explorer が電子メールの添付ファイルを実行する

Posted: 2001/03/29

290108

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP1

Patch: Q290108.exe

• http://download.microsoft.com/download/ie55sp1/secpac17/5.5_sp1/win98me/en-us/q290108.exe

290108

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP1

Patch: q290108.exe

• http://download.microsoft.com/download/ie501sp1/secpac17/5.01_SP1/WIN98/EN-US/q290108.exe

---

MS01-021 - Web 公開時に異常なリクエストによって Web Proxy サービスが停止する

Posted: 2001/04/16

295279

Affected Products:

• ISA Server 2000
  • ISA Server 2000 Gold

Patch: isahf63.exe

• http://download.microsoft.com/download/isaserver2000/webproxy/q295279/nt5/en-us/isahf63.exe

---

MS01-022 - WebDAV Service Provider によりスクリプトがユーザーとしてリクエストを行う

Posted: 2001/04/18

296441

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold
• Windows Me
  • Windows Me Gold

Patch: rbupdate.exe

• http://download.microsoft.com/download/win2000platform/update/1.5/win98me/en-us/rbupdate.exe

296441

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows 2000 Professional
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Rbupdate.exe

• http://download.microsoft.com/download/win2000platform/update/1.5/win98me/en-us/rbupdate.exe

---

MS01-023 - ISAPI エクステンションの未チェックのバッファにより IIS 5.0 サーバーのセキュリティが侵害される

Posted: 2001/05/01

296576

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1

Patch: Q296576_W2K_SP2_x86_en.EXE

• http://www.microsoft.com/ntserver/nts/downloads/critical/q296185/download.asp

---

MS01-024 - ドメイン コントローラへの不正なリクエストがメモリを使い果たす

Posted: 2001/05/08

299687

Affected Products:

• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1

Patch: Q299687_W2K_SP3_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q299687/NT5/EN-US/Q299687_W2K_SP3_x86_en.EXE

---

MS01-025 - Index Server の検索機能が未チェックのバッファを含む

Posted: 2001/05/10

294472

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Index Server 2.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Q294472i.exe

• http://www.microsoft.com/ntserver/nts/downloads/critical/q294472/download.asp

296185

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Index Server 2.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Q296185i.exe

• http://www.microsoft.com/ntserver/nts/downloads/critical/q296185/download.asp

296185

Affected Products:

• Indexing Services for Windows 2000
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Professional
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q296185_W2K_SP3_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q296185/NT5/EN-US/Q296185_W2K_SP3_x86_en.EXE

---

MS01-026 - 2001 年 5 月 14 日 IIS 用の累積的な修正プログラム

Posted: 2001/05/14

293826

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q293826_W2K_SP3_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q293826/NT5/EN-US/Q293826_W2K_SP3_x86_en.EXE

295534

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Q295534i.exe

• http://www.microsoft.com/ntserver/nts/downloads/critical/q293826/download.asp

---

MS01-027 - Web サーバー証明書検証の問題により Web サイトの偽装が可能になる

Posted: 2001/05/16

295106

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP2

Patch: q295106.exe

• http://download.microsoft.com/download/ie501sp2/secpac18/5.01_SP2/WIN98/EN-US/q295106.exe

299618

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP1

Patch: q299618.exe

• http://download.microsoft.com/download/ie55sp1/secpac19/5.5_SP1/WIN98Me/EN-US/q299618.exe

---

MS01-028 - テンプレートにリンクしている RTF 文書が警告なしでマクロを実行する

Posted: 2001/05/21

288266

Affected Products:

• Word 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
  • Office 2000 Service Pack 2

Patch: wd2kmsec.exe

• http://download.microsoft.com/download/word2000/wd2kmse/1/WIN98Me/EN-US/wd2kmsec.exe

288266

Affected Products:

• Word 97
  • Office 97 SR-2/SR-2b

Patch: wd97mcrs.exe

• http://download.microsoft.com/download/word97win/Patch/4.71.1015.0/W98NT42KMe/EN-US/wd97mcrs.exe

---

MS01-029 - Windows Media Player .ASX プロセッサが未チェックのバッファを含む

Posted: 2001/05/23

296138

Affected Products:

• Windows Media Player 6.4
  • Windows Media Player 6.4 Gold
• Windows Media Player 6.4 for Windows 2000
  • Windows Media Player 6.4 for Windows 2000 Gold

Patch: WMSU47357.exe

• http://download.microsoft.com/download/winmediaplayer/update/47357/win98/en-us/wmsu47357.exe

296138

Affected Products:

• Windows Media Player 7.0
  • Windows Media Player 7.0 Gold

Patch: mp71.exe

• http://download.microsoft.com/download/winmediaplayer/wmp71/7.1/w982kme/en-us/mp71.exe

296138

Affected Products:

• Windows Media Player 6.4 for Windows NT 4.0
  • Windows Media Player 6.4 for Windows NT 4.0 Gold

Patch: Wmsu47357.exe

• http://download.microsoft.com/download/winmediaplayer/update/47357/win98/en-us/wmsu47357.exe

---

MS01-030 - Exchange 2000 Outlook Web Access Service で添付ファイルの不正処理によりスクリプトが実行される

Posted: 2001/06/06

301361

Affected Products:

• Exchange Server 5.5
  • Exchange Server 5.5 SP4

Patch: Q301361i386.EXE

• http://download.microsoft.com/download/exch55/patch/05.05.12.2655/nt45/en-us/q301361i386.exe

299535

Affected Products:

• Exchange 2000 Enterprise Server
  • Exchange 2000 Gold
• Exchange 2000 Server
  • Exchange 2000 Gold

Patch: Q299535engi386.EXE

• http://download.microsoft.com/download/exchangeentserver/patch/06.00.27.4419/nt5/en-us/q299535engi386.exe

---

MS01-031 - 推測可能な名前付きパイプが Telnet 経由でアクセス権の昇格を可能にする

Posted: 2001/06/07

299553

Affected Products:

• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q299553_W2K_SP3_x86_en.EXE

• http://support.microsoft.com/default.aspx?scid=kb;en-us;282806

---

MS01-032 - SQL クエリ方法により、キャッシュされた管理者接続が再使用される

Posted: 2001/06/12

299717

Affected Products:

• SQL Server 2000
  • SQL Server 2000 Gold
• SQL Server Desktop Engine (MSDE) 2000
  • SQL Server Desktop Engine (MSDE) 2000 Gold

Patch: s80296i.exe

• http://download.microsoft.com/download/sqlsvr2000/patch/s80296i/w98nt42kme/en-us/s80296i.exe

299717

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP3

Patch: s70996i.exe

• http://download.microsoft.com/download/sql70/patch/s70996i/win98me/en-us/s70996i.exe

---

MS01-033 - Index Server ISAPI エクステンションの未チェックのバッファにより Web サーバーが攻撃される

Posted: 2001/06/18

300972

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Indexing Services for Windows 2000
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q300972_W2K_SP3_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/q300972/NT5/EN-US/Q300972_W2K_SP3_x86_en.EXE

300972

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 6a
• Index Server 2.0
  • Windows NT4 Service Pack 6a

Patch: Q300972i.exe

• http://www.microsoft.com/ntserver/nts/downloads/critical/q300972/download.asp

300972

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q300972ts.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS01-034 - 不正な Word 文書が自動的にマクロを実行する

Posted: 2001/06/21

288266

Affected Products:

• Word 97
  • Office 97 SR-2/SR-2b

Patch: wd97mcrs.exe

• http://download.microsoft.com/download/word97win/Patch/4.71.1015.0/W98NT42KMe/EN-US/wd97mcrs.exe

288266

Affected Products:

• Word 2000
  • Office 2000 SR-1
  • Office 2000 SR-1a
  • Office 2000 Service Pack 2

Patch: wd2kmsec.exe

• http://download.microsoft.com/download/word2000/wd2kmse/1/WIN98Me/EN-US/wd2kmsec.exe

302294

Affected Products:

• Word 2002
  • Word 2002 Gold

Patch: WRD1001.exe

• http://office.microsoft.com/downloads/2002/wrd1001.aspx

---

MS01-035 - FrontPage Server Extension のサブコンポーネントが未チェックのバッファを含む

Posted: 2001/06/21

300477

Affected Products:

• Front Page 2000 Server Extensions
  • Windows 2000 Service Pack 2

Patch: Q300477_W2K_SP3_x86_en.EXE

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=30727

300477

Affected Products:

• Front Page 2000 Server Extensions
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Q300477.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=31038

---

MS01-036 - LDAP SSL で公開される機能がパスワードの変更を可能にする

Posted: 2001/06/25

299687

Affected Products:

• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1

Patch: Q299687_W2K_SP3_x86_en.EXE

• http://download.microsoft.com/download/win2000platform/Patch/Q299687/NT5/EN-US/Q299687_W2K_SP3_x86_en.EXE

---

MS01-037 - SMTP サービスの認証エラーがメールの中継を可能にする

Posted: 2001/07/05

302755

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q302755_W2k_SP3_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q302755/NT5/EN-US/Q302755_W2k_SP3_x86_en.exe

---

MS01-038 - Outlook ビュー コントロールにより、安全でない機能が利用できる

Posted: 2001/07/12

303833

Affected Products:

• Outlook 2000
  • Office 2000 Service Pack 2

Patch: outlctlx.exe

• http://download.microsoft.com/download/outlook2000/outlctlx/1/win98me/en-us/outlctlx.exe

303825

Affected Products:

• Outlook 2002
  • Outlook 2002 Gold

Patch: olk1003.exe

• http://office.microsoft.com/downloads/2002/OLK1003.aspx

---

MS01-039 - Services for Unix 2.0 の Telnet および NFS サービスでメモリ リークが発生する

Posted: 2001/07/24

294380

Affected Products:

• Services for Unix 2.0 (NT)
  • Services for Unix 2.0 (NT) Gold

Patch: q294380_sfu_2_x86.exe

• http://download.microsoft.com/download/winntsp/patch/q294380/nt4/en-us/q294380_sfu_2_x86.exe

301514

Affected Products:

• Services for Unix 2.0 (NT)
  • Services for Unix 2.0 (NT) Gold

Patch: q301514_sfu_2_x86.exe

• http://download.microsoft.com/download/winntsp/patch/q301514/nt4/en-us/q301514_sfu_2_x86.exe

294380

Affected Products:

• Services for Unix 2.0 (Win2K)
  • Services for Unix 2.0 (Win2K) Gold

Patch: q294380_sfu_2_x86.Exe

• http://download.microsoft.com/download/win2000platform/patch/q294380/nt5/en-us/q294380_sfu_2_x86.exe

301514

Affected Products:

• Services for Unix 2.0 (Win2K)
  • Services for Unix 2.0 (Win2K) Gold

Patch: q301514_sfu_2_x86.Exe

• http://www.microsoft.com/technet/security/bulletin

---

MS01-040 - 無効な RDP データの受信により、ターミナル サービスでメモリ リークが発生する場合がある

Posted: 2001/07/25

292435

Affected Products:

• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: q292435_w2k_sp3_x86_en.exe

• http://download.microsoft.com/download/win2000platform/patch/q292435/nt5/en-us/q292435_w2k_sp3_x86_en.exe

292435

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 5
  • Windows NT4 Terminal Server Service Pack 6

Patch: q292435i.exe

• http://download.microsoft.com/download/winntsp/patch/q292435/nt4/en-us/q292435i.exe

---

MS01-041 - 不正な RPC リクエストがサービスを異常終了させる

Posted: 2001/07/26

299444

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: Q299444i.exe

• http://www.microsoft.com/downloads/release.asp?ReleaseID=31240

299444

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 6a

Patch: Q299444I.exe

• http://www.microsoft.com/ntserver/nts/downloads/critical/q299444/download.asp

298012

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: q298012_w2k_sp3_x86_en.exe

• http://download.microsoft.com/download/win2000platform/patch/q298012/nt5/en-us/q298012_w2k_sp3_x86_en.exe

298012

Affected Products:

• SQL Server 2000
  • SQL Server 2000 Gold

Patch: q298012_sql2000_x86_en.exe

• http://download.microsoft.com/download/sqlsvr2000/hotfix/q298012/win98mexp/en-us/q298012_sql2000_x86_en.exe

298012

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP2

Patch: q298012_sql70sp2_x86_en.exe

• http://download.microsoft.com/download/sql70/hotfix/q298012/win98mexp/en-us/q298012_sql70sp2_x86_en.exe

304062

Affected Products:

• Exchange Server 5.5
  • Exchange Server 5.5 SP4

Patch: q304062engi386.exe

• http://download.microsoft.com/download/exch55/patch/5.5.2654.51/nt45/en-us/q304062engi386.exe

304063

Affected Products:

• Exchange 2000 Server
  • Exchange 2000 Gold
• Exchange 2000 Enterprise Server
  • Exchange 2000 Gold

Patch: q304063engi386.exe

• http://download.microsoft.com/download/exchangeentserver/patch/06.00.06.4419/nt5/en-us/q304063engi386.exe

299444

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q299444ts.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS01-042 - Windows Media Player .NSC ファイル処理に未チェックのバッファが含まれる

Posted: 2001/07/26

304404

Affected Products:

• Windows Media Player 6.4
  • Windows Media Player 6.4 Gold
• Windows Media Player 6.4 for Windows 2000
  • Windows Media Player 6.4 for Windows 2000 Gold

Patch: wmsu55362.exe

• http://download.microsoft.com/download/winmediaplayer/update/55362/win98/en-us/wmsu55362.exe

304404

Affected Products:

• Windows Media Player 7.1
  • Windows Media Player 7.1 Gold

Patch: wMsu55362.exe

• http://download.microsoft.com/download/winmediaplayer/update/55362/win98/en-us/wmsu55362.exe

304404

Affected Products:

• Windows Media Player 7.0
  • Windows Media Player 7.0 Gold

Patch: wmSu55362.exe

• http://download.microsoft.com/download/winmediaplayer/update/55362/win98/en-us/wmsu55362.exe

304404

Affected Products:

• Windows Media Player 6.4 for Windows NT 4.0
  • Windows Media Player 6.4 for Windows NT 4.0 Gold

Patch: Wmsu55362.exe

• http://download.microsoft.com/download/winmediaplayer/update/55362/win98/en-us/wmsu55362.exe

---

MS01-043 - NNTP サービスでメモリ リークが発生する

Posted: 2001/08/14

303984

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: q304876engi386.exe

• http://www.microsoft.com/ntserver/nts/downloads/critical/q304876/download.asp

303984

Affected Products:

• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: q303984_w2k_sp3_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/q303984/NT5/EN-US/Q303984_W2K_SP3_x86_en.EXE

---

MS01-044 - 2001 年 8 月 15 日 IIS 用の累積的な修正プログラム

Posted: 2001/08/15

301625

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 6a
  • Windows NT4 Service Pack 5

Patch: q301625i.exe

• http://www.microsoft.com/ntserver/nts/downloads/critical/q301625/download.asp

301625

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: q301625_w2k_sp3_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/q301625/NT5/EN-US/Q301625_W2K_SP3_x86_en.EXE

---

MS01-045 - H.323 ゲートキーパーのメモリーリーク及び Web Proxy のクロスサイトスクリプティングの脆弱性

Posted: 2001/08/16

289503

Affected Products:

• ISA Server 2000
  • ISA Server 2000 Gold

Patch: isahf68.exe

• http://download.microsoft.com/download/isaserver2000/patch/q295389-q289503/nt5/en-us/isahf68.exe

---

MS01-046 - Windows 2000 赤外線デバイスドライバでのアクセス違反により、システムが再起動する

Posted: 2001/08/21

252795

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q252795_W2K_SP3_x86_en.EXE

• http://support.microsoft.com/default.aspx?scid=kb;en-us;252795

---

MS01-047 - OWA 機能により、認証されていないユーザーがグローバル アドレス一覧を列挙することができる

Posted: 2001/09/06

307195

Affected Products:

• Exchange Server 5.5
  • Exchange Server 5.5 SP4

Patch: Q307195engi386.EXE

• http://download.microsoft.com/download/exch55/patch/05.05.39.2655/nt45/en-us/q307195engi386.exe

---

MS01-048 - RPC Endpoint Mapper への不正なリクエストにより、RPC サービスが異常終了する

Posted: 2001/09/10

305399

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: Q305399i.exe

• http://www.microsoft.com/ntserver/nts/downloads/critical/q305399/download.asp

---

MS01-049 - 深くネスト化した OWA リクエストによりサーバーの CPU が消費される

Posted: 2001/09/26

303451

Affected Products:

• Exchange 2000 Enterprise Server
  • Exchange 2000 SP1
• Exchange 2000 Server
  • Exchange 2000 SP1

Patch: Q303451engi386.EXE

• http://download.microsoft.com/download/exchangeentserver/patch/06.00.50.4720/nt5/en-us/q303451engi386.exe

---

MS01-050 - 不正な Excel または PowerPoint の文書がマクロのセキュリティを無視する

Posted: 2001/10/04

306604

Affected Products:

• Excel 2000
  • Office 2000 SR-1a
  • Office 2000 Service Pack 2

Patch: xl2000

• http://download.microsoft.com/download/excel2000/e2kmac/1/w98nt42kme/en-us/e2kmac.exe

306606

Affected Products:

• Excel 2002
  • Office 2002 Gold

Patch: xl2002

• http://download.microsoft.com/download/excel2002/exc1001/1/w98nt42kme/en-us/exc1001.exe

306603

Affected Products:

• PowerPoint 2000
  • Office 2000 SR-1a
  • Office 2000 Service Pack 2

Patch: Ppt2000

• http://download.microsoft.com/download/powerpoint2000/p2kmac/1/w98nt42kme/en-us/p2kmac.exe

306606

Affected Products:

• PowerPoint 2002
  • Office 2002 Gold

Patch: Ppt2002

• http://download.microsoft.com/download/powerpoint2002/ppt1001/1/w98nt42kme/en-us/ppt1001.exe

---

MS01-051 - 不正なドットなし IP アドレスにより Web ページがイントラネット ゾーンで処理されてしまう

Posted: 2001/10/10

306121

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP2

Patch: q306121.exe

• http://download.microsoft.com/download/ie501sp2/secpac20/5.01SP2/WIN98/en-us/q306121.exe

306121

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP2

Patch: Q306121.exe

• http://download.microsoft.com/download/ie55sp2/secpac20/5.5_SP2/WIN98Me/EN-US/q306121.exe

306121

Affected Products:

• Internet Explorer 6
  • Internet Explorer 6 Gold

Patch: q306121.Exe

• http://download.microsoft.com/download/IE60/Secpac20/6/W98NT42KMeXP/EN-US/q306121.exe

---

MS01-052 - 無効な RDP データが Terminal Service を異常終了させる

Posted: 2001/10/18

307454

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q307454i.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=33131

307454

Affected Products:

• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q307454_W2K_SP3_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/q307454/NT5/EN-US/Q307454_W2K_SP3_x86_en.exe

---

MS01-053 - ダウンロードされたアプリケーションが OS X の Internet Explorer 5.1 for Mac で実行される

Posted: 2001/10/23

311052

Affected Products:

• IE 5.1 for Macintosh
  • IE 5.1 for Macintosh Gold

Patch: MacIE501

• http://www.apple.com/macosx/upgrade/softwareupdates.html

---

MS01-054 - 無効なユニバーサル プラグ アンド プレイのリクエストがシステムのオペレーションを妨害する

Posted: 2001/11/01

311311

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 309073USA8.EXE

• http://download.microsoft.com/download/whistler/Patch/Q315000/WXP/EN-US/Q315000_WXP_SP1_x86_ENU.exe

311311

Affected Products:

• Windows Me
  • Windows Me Gold

Patch: WinMEUPnP

• http://download.microsoft.com/download/winme/Update/21388/WinMe/EN-US/311311USAM.EXE

309521

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold

Patch: Q309521_x86.exe

• http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms01-054.asp

---

MS01-055 - 2001 年 11 月 13 日 Internet Explorer 用の累積的な修正プログラム

Posted: 2001/11/08

312461

Affected Products:

• Internet Explorer 6
  • Internet Explorer 6 Gold

Patch: q312461.exe

• http://download.microsoft.com/download/IE60/secpac23/6/W98NT42KMeXP/EN-US/q313675.exe

312461

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP2

Patch: Q312461.exe

• http://download.microsoft.com/download/ie55sp2/secpac23/5.5_SP2/WIN98Me/EN-US/q313675.exe

---

MS01-056 - Windows Media Player の .ASF ファイル処理に、未チェックのバッファが含まれる

Posted: 2001/11/20

308567

Affected Products:

• Windows Media Player 7.1
  • Windows Media Player 7.1 Gold

Patch: wm308567.exe

• http://download.microsoft.com/download/winmediaplayer/update/308567/win98mexp/en-us/wm308567.exe

308567

Affected Products:

• Windows Media Player 7.0
  • Windows Media Player 7.0 Gold

Patch: wM308567.exe

• http://download.microsoft.com/download/winmediaplayer/update/308567/win98mexp/en-us/wm308567.exe

308567

Affected Products:

• Windows Media Player 6.4
  • Windows Media Player 6.4 Gold
• Windows Media Player 6.4 for Windows 2000
  • Windows Media Player 6.4 for Windows 2000 Gold

Patch: wm308567.Exe

• http://download.microsoft.com/download/winmediaplayer/update/308567/win98mexp/en-us/wm308567.exe

309521

Affected Products:

• Windows Media Player for Windows XP
  • Windows XP Gold
  • Windows Media Player for Windows XP Gold

Patch: WinXPUPnP

• http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms01-054.asp

308567

Affected Products:

• Windows Media Player 6.4 for Windows NT 4.0
  • Windows Media Player 6.4 for Windows NT 4.0 Gold

Patch: Wm308567.exe

• http://download.microsoft.com/download/winmediaplayer/update/308567/win98mexp/en-us/wm308567.exe

---

MS01-057 - 特別な形式の HTML メールのスクリプトが Exchange 5.5 OWA で実行される

Posted: 2001/12/06

313576

Affected Products:

• Exchange Server 5.5
  • Exchange Server 5.5 SP4

Patch: Q313576i386.exe

• http://download.microsoft.com/download/exch55/Patch/05.05.77.2655/NT45/EN-US/Q313576engi386.EXE

---

MS01-058 - 2001 年 12 月 13 日 Internet Explorer 用の累積的な修正プログラム

Posted: 2001/12/13

313675

Affected Products:

• Internet Explorer 6
  • Internet Explorer 6 Gold

Patch: Q313675.exe

• http://download.microsoft.com/download/IE60/secpac23/6/W98NT42KMeXP/EN-US/q313675.exe

313675

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP2

Patch: q313675.exe

• http://download.microsoft.com/download/ie55sp2/secpac23/5.5_SP2/WIN98Me/EN-US/q313675.exe

---

MS01-059 - ユニバーサル プラグ アンド プレイ (UPnP) に含まれる未チェックのバッファによりシステムが侵害される

Posted: 2001/12/19

315000

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold

Patch: Q315000_WXP_SP1_x86_ENU.exe

• http://download.microsoft.com/download/whistler/patch/q315000/wxp/en-us/q315000_wxp_sp1_x86_enu.exe

315000

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 314941USA8.EXE

• http://download.microsoft.com/download/win98SE/Patch/Q314941/W98/EN-US/314941USA8.EXE

315000

Affected Products:

• Windows Me
  • Windows Me Gold

Patch: 314757USAM.EXE

• http://download.microsoft.com/download/winme/Update/22940/WinMe/EN-US/314757USAM.EXE

---

MS01-060 - SQL Server テキスト フォーマット機能が未チェックのバッファを含む

Posted: 2001/12/20

304850

Affected Products:

• SQL Server 2000
  • SQL Server 2000 SP1

Patch: s80428i.exe

• http://download.microsoft.com/download/sqlsvr2000/patch/1.0/w98nt42kmexp/en-us/s80428i.exe

304851

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP3

Patch: sql7

• http://support.microsoft.com/default.aspx?scid=kb;en-us;304851

---

MS02-001 - 信頼するドメインが認証データ内の SID (セキュリティ ID) のドメイン メンバシップを確認しない

Posted: 2002/01/22

311401

Affected Products:

• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 2
• Windows 2000 Professional
  • Windows 2000 Service Pack 2

Patch: w2kSP2SRP1.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q311401/NT5/EN-US/w2kSP2SRP1.exe

311401

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Service Pack 2

Patch: w2kSP2SRP1.Exe

• http://download.microsoft.com/download/win2000platform/Patch/Q311401/NT5/EN-US/w2kSP2SRP1.exe

317636

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q317636i.EXE

• http://www.microsoft.com/ntserver/terminalserver/downloads/critical/q317636/download.asp

---

MS02-002 - 不正なネットワーク リクエストにより Office v. X for Mac が異常終了する

Posted: 2002/02/06

317879

Affected Products:

• Office v. X for Mac
  • Office v. X for Mac Gold

Patch: MacPatch

• http://www.microsoft.com/mac/download

---

MS02-003 - Exchange 2000 System Attendant がレジストリ リモート アクセス権を不適切に設定する

Posted: 2002/02/07

316056

Affected Products:

• Exchange 2000 Server
  • Exchange 2000 SP2
• Exchange 2000 Enterprise Server
  • Exchange 2000 SP2

Patch: Q316056engi386.EXE

• http://download.microsoft.com/download/exchangeentserver/patch/06.00.21.5770/nt5/en-us/q316056engi386.exe

---

MS02-004 - Telnet Server に含まれる未チェックのバッファにより、任意のコードが実行される

Posted: 2002/02/07

307298

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Interix 2.2
  • Interix 2.2 Gold

Patch: Q307298_W2K_SP3_x86_en.exe

• http://download.microsoft.com/download/win2000platform/Patch/q307298/NT5/EN-US/Q307298_W2K_SP3_x86_en.exe

---

MS02-005 - 2002 年 2 月 11 日 Internet Explorer の累積的な修正プログラム

Posted: 2002/02/11

316059

Affected Products:

• Internet Explorer 6
  • Internet Explorer 6 Gold

Patch: q316059.exe

• http://download.microsoft.com/download/IE60/secpac25/6/W98NT42KMeXP/EN-US/q316059.exe

316059

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP2

Patch: Q316059.exe

• http://download.microsoft.com/download/ie55sp2/secpac25/5.5_sp2/WIN98Me/EN-US/q316059.exe

316059

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP1

Patch: q316059.Exe

• http://download.microsoft.com/download/ie55sp1/secpac25/5.5_sp1/WIN98Me/EN-US/q316059.exe

316059

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP2

Patch: Q316059.Exe

• http://download.microsoft.com/download/ie501sp2/secpac25/5.01_sp2/NT5/EN-US/q316059.exe

---

MS02-006 - SNMP サービスに含まれる未チェックのバッファにより、任意のコードが実行される

Posted: 2002/02/12

314147

Affected Products:

• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Q314147i.exe

• http://download.microsoft.com/download/winntsp/Patch/Q314147/NT4/EN-US/Q314147i.exe

314147

Affected Products:

• Windows 95
  • Windows 95 Gold
  • Windows 95 SR 2.1
  • Windows 95 SR 2.5
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold
• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 4
  • Windows NT4 Terminal Server Service Pack 5
  • Windows NT4 Terminal Server Service Pack 6

Patch: nopatch

• http://download.microsoft.com/download/WIN98/UPDATE/23433/W98/EN-US/314147USA8.EXE

314147

Affected Products:

• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
• Windows 2000 Professional
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1

Patch: Q314147_W2K_SP3_X86_EN.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q314147/NT5/EN-US/Q314147_W2K_SP3_X86_EN.exe

314147

Affected Products:

• Windows XP Professional
  • Windows XP Gold
• Windows XP Home Edition
  • Windows XP Gold

Patch: Q314147_WXP_SP1_x86_ENU.exe

• http://download.microsoft.com/download/whistler/patch/q314147/wxp/en-us/q314147_wxp_sp1_x86_enu.exe

---

MS02-007 - SQL Server のリモート データ ソース関数に未チェックのバッファが含まれる

Posted: 2002/02/20

316333

Affected Products:

• SQL Server 2000
  • SQL Server 2000 SP2
• SQL Server Desktop Engine (MSDE) 2000
  • SQL Server Desktop Engine (MSDE) 2000 SP2

Patch: 8.00.0578.exe

• http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS02-007.asp

318268

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP3
• SQL Server Desktop Engine (MSDE) 1.0
  • SQL Server 7.0 SP3

Patch: s71021a.exe

• http://download.microsoft.com/download/sql70/Update/s71021a/ALPHA/EN-US/s71021a.exe

---

MS02-008 - XMLHTTP コントロールにより、ローカル ファイルにアクセスすることができる

Posted: 2002/02/21

318202

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6
• Windows 2000 Professional
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold

Patch: Q318202_MSXML20_x86_en.exe

• http://download.microsoft.com/download/xml/Patch/2.6/W9XNT4MeXP/EN-US/Q318202_MSXML20_x86.exe

318203

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6
• Windows 2000 Professional
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold

Patch: Q318203_MSXML30_x86.exe

• http://download.microsoft.com/download/xml/patch/3.0/w9xnt4mexp/en-us/q318203_msxml30_x86.exe

317244

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6
• Windows 2000 Professional
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
  • Windows 2000 Gold
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows XP Home Edition
  • Windows XP Gold
  • Windows XP Service Pack 1
• Windows XP Professional
  • Windows XP Gold
  • Windows XP Service Pack 1

Patch: msxml4qfe.exe

• http://download.microsoft.com/download/xml/patch/q317244/w9xnt4mexp/en-us/msxml4qfe.exe

---

MS02-009 - Internet Explorer の不正な VBScript 処理により Web ページがローカル ファイルを読み取る

Posted: 2002/02/21

318089

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP2
  • Internet Explorer 5.01 SP3

Patch: vbs51nen.exe

• http://www.microsoft.com/windows/ie/downloads/critical/q318089/download.asp

318089

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP1

Patch: vbs55nen.exe

• http://www.microsoft.com/windows/ie/downloads/critical/q318089/download.asp

318089

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP2

Patch: Vbs55nen.exe

• http://www.microsoft.com/windows/ie/downloads/critical/q318089/default.Asp

318089

Affected Products:

• Internet Explorer 6
  • Internet Explorer 6 Gold

Patch: vbs56nen.exe

• http://www.microsoft.com/windows/ie/downloads/critical/q318089/download.asp

---

MS02-010 - ISAPI フィルタの未チェックのバッファにより、Commerce Server が攻撃を受ける

Posted: 2002/02/21

317615

Affected Products:

• Commerce Server 2000
  • Commerce Server 2000 SP2

Patch: tempcs

• http://download.microsoft.com/download/comserver/Patch/1.0/NT5/EN-US/Q317615_COMMERCE_2000_EN.EXE

---

MS02-011 - 認証問題により、承認されていないユーザーが SMTP サービスに認証することができる

Posted: 2002/02/27

313450

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Service Pack 2

Patch: Q313450_W2K_SP3_X86_EN.Exe

• http://download.microsoft.com/download/win2000platform/patch/q313450/nt5/en-us/q313450_w2k_sp3_x86_en.exe

289258

Affected Products:

• Exchange Server 5.5
  • Exchange Server 5.5 SP4

Patch: Q289258engi386.EXE

• http://download.microsoft.com/download/exch55/patch/05.05.55.2655/nt45/en-us/q289258engi386.exe

---

MS02-012 - 不正なデータ送信リクエストにより Windows SMTP サービスが異常終了する

Posted: 2002/02/27

313450

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Service Pack 2

Patch: Q313450_W2K_SP3_X86_EN.exe

• http://download.microsoft.com/download/win2000platform/patch/q313450/nt5/en-us/q313450_w2k_sp3_x86_en.exe

313450

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold
• Internet Information Services 5.1
  • Windows XP Gold

Patch: Q313450_WXP_SP1_x86_ENU.exe

• http://download.microsoft.com/download/whistler/patch/q313450/wxp/en-us/q313450_wxp_sp1_x86_enu.exe

---

MS02-013 - 2002 年 3 月 4 日 VM 用の累積的な修正プログラム

Posted: 2002/03/04

300845

Affected Products:

• Windows XP Professional
  • Windows XP Gold
• Windows XP Home Edition
  • Windows XP Gold
• Windows Me
  • Windows Me Gold
• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows 98 SE
  • Windows 98se Gold
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Microsoft Virtual Machine (VM)
  • Microsoft Virtual Machine (VM) Gold

Patch: msjavx86.exe

• http://www.microsoft.com/java/vm/dl_vm40.htm

300845

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 2
• Windows 2000 Professional
  • Windows 2000 Service Pack 2

Patch: Q300845_W2K_SP3_X86_EN.exe

• http://www.microsoft.com/java/vm/dl_vm40.htm

---

MS02-014 - Windows Shell の未チェックのバッファにより、コードが実行される

Posted: 2002/03/07

313829

Affected Products:

• Windows 98 SE
  • Windows 98se Gold
• Windows 98
  • Windows 98 SP1
  • Windows 98 Gold

Patch: win9802-014

• http://download.microsoft.com/download/ie4095/actdesk/4.01_sp2/w9XNT4/en-us/q313829.exe

313829

Affected Products:

• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: Q313829i.exe

• http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US/Q313829i.exe

313829

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: q313829i.exe

• http://download.microsoft.com/download/winntsp/Patch/Q313829/NT4/EN-US/Q313829i.exe

313829

Affected Products:

• Windows 2000 Professional
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2

Patch: Q313829_W2K_SP3_X86_EN.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q313829/NT5/EN-US/Q313829_W2K_SP3_X86_EN.exe

---

MS02-015 - 2002 年 3 月 28 日 Internet Explorer 用の累積的な修正プログラム

Posted: 2002/03/28

319182

Affected Products:

• Internet Explorer 6
  • Internet Explorer 6 Gold

Patch: q319182.exe

• http://download.microsoft.com/download/ie60/secpac26/6/w98nt42kmexp/en-us/q319182.exe

319182

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP2
  • Internet Explorer 5.01 SP3

Patch: Q319182.exe

• http://download.microsoft.com/download/ie501sp2/secpac26/5.01_sp2/w982knt4/en-us/q319182.exe

319182

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP1

Patch: q319182.Exe

• http://download.microsoft.com/download/ie55sp1/secpac26/5.5_sp1/win98me/en-us/q319182.exe

319182

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP2

Patch: Q319182.EXE

• http://download.microsoft.com/download/ie55sp2/secpac26/5.5_sp2/win98me/en-us/q319182.exe

---

MS02-016 - Q318593 : 読み取り専用アクセスのグループ ポリシー ファイルを開くと、ポリシーの適用が妨害される

Posted: 2002/04/04

318593

Affected Products:

• Windows 2000 Server
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2

Patch: Q318593_W2K_SP3_X86_EN.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q318593/NT5/EN-US/Q318593_W2K_SP3_X86_EN.exe

---

MS02-017 - Q311967: Multiple UNC Provider の未チェックのバッファによりコードが実行される

Posted: 2002/04/04

311967

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a

Patch: Q312895i.exe

• http://www.microsoft.com/ntserver/nts/downloads/critical/q311967/download.asp

311967

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: q312895i.exe

• http://www.microsoft.com/ntserver/terminalserver/downloads/critical/q311967/download.asp

311967

Affected Products:

• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q311967_W2K_SP3_X86_EN.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q311967/NT5/EN-US/Q311967_W2K_SP3_X86_EN.exe

311967

Affected Products:

• Windows XP Professional
  • Windows XP Gold
• Windows XP Home Edition
  • Windows XP Gold

Patch: Q311967_WXP_SP1_x86_ENU.exe

• http://download.microsoft.com/download/whistler/patch/q311967/wxp/en-us/q311967_wxp_sp1_x86_enu.exe

---

MS02-018 - Internet Information Services 用の累積的な修正プログラム (Q319733)

Posted: 2002/04/10

319733

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a

Patch: Q319733i.exe

• http://www.microsoft.com/ntserver/nts/downloads/security/q319733/download.asp

319733

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q319733_W2K_SP3_X86_EN.exe

• http://download.microsoft.com/download/iis50/Patch/Q319733/NT5/EN-US/Q319733_W2K_SP3_X86_EN.exe

319733

Affected Products:

• Internet Information Services 5.1
  • Windows XP Gold

Patch: Q319733_WXP_SP1_x86_ENU.exe

• http://download.microsoft.com/download/iis50/patch/q319733/wxp/en-us/q319733_wxp_sp1_x86_enu.exe

319733

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q319733ts.exe

• http://www.microsoft.com/ntserver/terminalserver/downloads/critical/q317636/download.asp

---

MS02-019 - Internet Explorer for Mac および Office for Mac の未チェックのバッファによってコードが実行される (Q321309)

Posted: 2002/04/16

321309

Affected Products:

• Excel v. X for Macintosh
  • Excel v. X for Macintosh Gold
• Excel 2001 for Macintosh
  • Excel 2001 for Macintosh Gold
• PowerPoint 2001 for Macintosh
  • PowerPoint 2001 for Macintosh Gold
• PowerPoint 98 for Macintosh
  • PowerPoint 98 for Macintosh Gold
• PowerPoint v. X for Macintosh
  • PowerPoint v. X for Macintosh Gold
• Internet Explorer 5.1 for Machintosh OS 8 and 9
  • Internet Explorer 5.1 for Machintosh OS 8 and 9 Gold
• Internet Explorer 5.1 for Macintosh OS X
  • Internet Explorer 5.1 for Macintosh OS X Gold
• Entourage 2001 for Macintosh
  • Entourage 2001 for Macintosh Gold
• Entourage v. X for Macintosh
  • Entourage v. X for Macintosh Gold
• Outlook Express 5 for Macintosh
  • Outlook Express 5 for Macintosh Gold

Patch: macpatches

• http://support.microsoft.com/default.aspx?scid=fh;EN-US;kbhowto&sd=TECH&ln=EN-US&FR=0

---

MS02-020 - SQL 拡張プロシージャ機能に未チェックのバッファが含まれる (Q319507)

Posted: 2002/04/17

318268

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP3
• SQL Server Desktop Engine (MSDE) 1.0
  • SQL Server 7.0 SP3

Patch: 7.00.1030_SQL7_sp3_x86_enu.exe

• http://download.microsoft.com/download/sql70/patch/sp3/win98mexp/en-us/7.00.1030_sql7_sp3_x86_enu.exe

316333

Affected Products:

• SQL Server Desktop Engine (MSDE) 2000
  • SQL Server Desktop Engine (MSDE) 2000 SP2
• SQL Server 2000
  • SQL Server 2000 SP2

Patch: 8.00.0608_SQL2K_sp2_x86_enu.exe

• http://download.microsoft.com/download/sqlsvr2000/patch/sp2/win98mexp/en-us/8.00.0608_sql2k_sp2_x86_enu.exe

---

MS02-021 - 電子メール エディタの問題により、返信または転送でスクリプトが実行される (Q321804)

Posted: 2002/04/25

320441

Affected Products:

• Word 2002
  • Word 2002 Gold

Patch: wrd1003.exe

• http://office.microsoft.com/downloads/2002/wrd1003.aspx

320536

Affected Products:

• Word 2000
  • Word 2000 Gold
  • Office 2000 SR-1
  • Office 2000 SR-1a
  • Office 2000 Service Pack 2

Patch: wrd0901.exe

• http://download.microsoft.com/download/word2000/Patch/wrd0901/WIN98MeXP/EN-US/wrd0901.exe

---

MS02-022 - MSN チャット コントロールの未チェックのバッファによりコードが実行される (Q321661)

Posted: 2002/05/08

321661

Affected Products:

• MSN Messenger
  • MSN Messenger Gold

Patch: messenger

• http://download.microsoft.com/download/chat/Patch/4.1/W98XP/EN-US/MSNChatSecFix.exe

---

MS02-023 - 2002 年 5 月 15 日 Internet Explorer 用の累積的な修正プログラム (Q321232)

Posted: 2002/05/15

321232

Affected Products:

• Internet Explorer 6
  • Internet Explorer 6 Gold

Patch: q321232.exe

• http://download.microsoft.com/download/IE60/secpac27/6/W98NT42KMeXP/EN-US/q321232.exe

321232

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP2

Patch: Q321232.exe

• http://download.microsoft.com/download/ie55sp2/secpac27/5.5_sp2/W98NT42KMe/EN-US/q321232.exe

321232

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP1

Patch: Q321232.Exe

• http://download.microsoft.com/download/ie55sp1/secpac27/5.5_sp1/W98NT42KMe/EN-US/q321232.exe

321232

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP2
  • Internet Explorer 5.01 SP3

Patch: q321232.Exe

• http://download.microsoft.com/download/ie501sp2/secpac27/5.01_sp2/NT45/EN-US/q321232.exe

---

MS02-024 - Windows Debugger の認証問題により、権限が昇格する (Q320206)

Posted: 2002/05/22

320206

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q320206_W2K_SP4_X86_EN.exe

• http://download.microsoft.com/download/win2000platform/patch/q320206/nt5/en-us/q320206_w2k_sp4_x86_en.exe

320206

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a

Patch: Q320206i.exe

• http://download.microsoft.com/download/winntsp/patch/q320206/nt4/en-us/q320206i.exe

320206

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: q320206i.exe

• http://download.microsoft.com/download/winntterminal/patch/q320206/nt4/en-us/q320206i.exe

---

MS02-025 - 不正なメール属性により Exchange 2000 が CPU リソースを使い果たす (Q320436)

Posted: 2002/05/28

320436

Affected Products:

• Exchange 2000 Server
  • Exchange 2000 SP2
• Exchange 2000 Enterprise Server
  • Exchange 2000 SP2

Patch: Q320436enui386.EXE

• http://download.microsoft.com/download/exchangeentserver/patch/06.00.91.5770/nt5/en-us/q320436enui386.exe

---

MS02-026 - ASP.NET ワーカー プロセスに未チェックのバッファが含まれる (Q322289)

Posted: 2002/06/06

322289

Affected Products:

• .NET Framework
  • .NET Framework Gold

Patch: NDP10_QFEM_Q322289_En.exe

• http://download.microsoft.com/download/netframeworkredistributable/patch/1/nt45xp/en-us/ndp10_qfem_q322289_en.exe

---

MS02-027 - Gopher プロトコル ハンドラの未チェックのバッファにより、攻撃者の任意のコードが実行される (Q323889)

Posted: 2002/06/11

323889

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP2
  • Internet Explorer 5.01 SP3

Patch: Placeholder IE 5.01

• http://download.microsoft.com/download/ie501sp2/p28_IE/5.01_sp2/NT5/EN-US/q323759.exe

323889

Affected Products:

• Proxy Server 2.0
  • Proxy Server 2.0 Gold

Patch: 29106_ENU_i386_zip.exe

• http://download.microsoft.com/download/proxy20/patch/2.0.177/nt45/en-us/29106_enu_i386_zip.exe

323889

Affected Products:

• ISA Server 2000
  • ISA Server 2000 SP1

Patch: isahf177.exe

• http://download.microsoft.com/download/isaserver2000/patch/3.0.1200.177/nt5/en-us/isahf177.exe

323889

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP1

Patch: Placeholder IE5.5 SP1

• http://download.microsoft.com/download/ie55sp1/p28_IE/5.5_sp1/W98NT42KMe/EN-US/q323759.exe

323889

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP2

Patch: Placeholder IE5.5 SP2

• http://download.microsoft.com/download/ie55sp2/p28_IE/5.5_sp2/W98NT42KMe/EN-US/q323759.exe

323889

Affected Products:

• Internet Explorer 6
  • Internet Explorer 6 Gold

Patch: Placeholder IE6

• http://download.microsoft.com/download/IE60/p28_IE/6/W98NT42KMeXP/EN-US/q323759.exe

---

MS02-028 - HTR のチャンクされたエンコードのヒープ オーバーランにより Web サーバーのセキュリティが侵害される (Q321599)

Posted: 2002/06/11

321599

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q321599_W2K_SP4_X86_EN.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q321599/NT5/EN-US/Q321599_W2K_SP4_X86_EN.exe

321599

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 6a

Patch: Q321599i.exe

• http://www.microsoft.com/ntserver/nts/downloads/security/q321599/download.asp

---

MS02-029 - リモート アクセス サービスの電話帳の未チェックのバッファによりコードが実行される (Q318138)

Posted: 2002/06/11

318138

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2

Patch: Q318138_W2K_SP3_X86_EN.exe

• http://download.microsoft.com/download/win2000platform/patch/q318138/nt5/en-us/q318138_w2k_sp3_x86_en.exe

318138

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold

Patch: Q318138_WXP_SP1_x86_ENU.exe

• http://download.microsoft.com/download/whistler/patch/q318138/wxp/en-us/q318138_wxp_sp1_x86_enu.exe

318138

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a

Patch: Q318138i.exe

• http://www.microsoft.com/ntserver/nts/downloads/security/q318138/download.asp

318138

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: q318138i.exe

• http://www.microsoft.com/ntserver/terminalserver/downloads/security/Q318138/download.asp

318138

Affected Products:

• Windows NT Server 4.0, Enterprise Edition, RRAS
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, RRAS
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0, RRAS
  • Windows NT4 Service Pack 6a

Patch: Q318138i.Exe

• http://www.microsoft.com/ntserver/nts/downloads/security/q318138/default.asp

318138

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition RRAS
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q318138i.EXE

• http://www.microsoft.com/ntserver/terminalserver/downloads/security/q318138/default.asp

---

MS02-030 - SQLXML の未チェックのバッファによりコードが実行される (Q321911)

Posted: 2002/06/12

321911

Affected Products:

• SQL Server 2000
  • SQL Server 2000 SP2

Patch: MS02-030 SQLXML

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=39547

---

MS02-031 - Excel for Windows および Word for Windows 用の累積的な修正プログラム (Q324458)

Posted: 2002/06/19

324126

Affected Products:

• Excel 2000
  • Office 2000 SR-1a
• Office 2000
  • Office 2000 SR-1a

Patch: exc0901.exe

• http://download.microsoft.com/download/excel2000/patch/exc0901/w982kmexp/en-us/exc0901.exe

323548

Affected Products:

• Office XP
  • Office XP SP1
• Excel 2002
  • Office XP SP1

Patch: exc1002.exe

• http://download.microsoft.com/download/excel2002/patch/exc1002/w982kmexp/en-us/exc1002.exe

323547

Affected Products:

• Office XP
  • Office XP SP1
• Word 2002
  • Office XP SP1

Patch: wrd1004.exe

• http://download.microsoft.com/download/word2002/patch/wrd1004/w982kmexp/en-us/wrd1004.exe

---

MS02-032 - 2002 年 6 月 26 日 Windows Media Player 用の累積的な修正プログラム (Q320920)

Posted: 2002/06/26

320920

Affected Products:

• Windows Media Player 6.4
  • Windows Media Player 6.4 Gold
• Windows Media Player 6.4 for Windows 2000
  • Windows Media Player 6.4 for Windows 2000 Gold

Patch: wm320920_64.exe

• http://download.microsoft.com/download/winmediaplayer/update/320920/w98nt42kme/en-us/wm320920_64.exe

320920

Affected Products:

• Windows Media Player 6.4 for Windows NT 4.0
  • Windows Media Player 6.4 for Windows NT 4.0 Gold

Patch: Wm320920_64.exe

• http://download.microsoft.com/download/winmediaplayer/update/320920/w98nt42kme/en-us/wm320920_64.exe

320920

Affected Products:

• Windows Media Player 7.1
  • Windows Media Player 7.1 Gold

Patch: wm320920_71.exe

• http://download.microsoft.com/download/winmediaplayer/update/320920/w982kme/en-us/wm320920_71.exe

320920

Affected Products:

• Windows Media Player for Windows XP
  • Windows XP Gold
  • Windows Media Player for Windows XP Gold

Patch: wm320920_8.exe

• http://download.microsoft.com/download/winmediaplayer/update/320920/wxp/en-us/wm320920_8.exe

---

MS02-033 - プロファイル サービスの未チェックのバッファにより Commerce Server でコードが実行される (Q322273)

Posted: 2002/06/26

322273

Affected Products:

• Commerce Server 2000
  • Commerce Server 2000 Gold
  • Commerce Server 2000 SP2
• Commerce Server 2002
  • Commerce Server 2002 Gold

Patch: tempcs2

• http://download.microsoft.com/download/comserver/Patch/1.1/NT5/EN-US/Q322273_EN.EXE

---

MS02-034 - SQL Server 用の累積的な修正プログラム (Q316333)

Posted: 2002/07/10

322853

Affected Products:

• SQL Server 2000
  • SQL Server 2000 SP2
• SQL Server Desktop Engine (MSDE) 2000
  • SQL Server Desktop Engine (MSDE) 2000 SP2

Patch: 8.00.0650_enu.exe

• http://download.microsoft.com/download/sqlsvr2000/update/8.00.0650/w98nt42kmexp/en-us/8.00.0650_enu.exe

---

MS02-035 - SQL Server のインストール プロセスで、パスワードがシステムに残る (Q263968)

Posted: 2002/07/10

263968

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 Gold
  • SQL Server 7.0 SP1
  • SQL Server 7.0 SP3
  • SQL Server 7.0 SP4

Patch: SQLKillPwd.exe

• http://download.microsoft.com/download/SQLSVR2000/Utility/2.0/W98NT42KMeXP/EN-US/killpwd.exe

263968

Affected Products:

• SQL Server 2000
  • SQL Server 2000 Gold
  • SQL Server 2000 SP1
  • SQL Server 2000 SP2

Patch: SQL2kKillPwd.exe

• http://download.microsoft.com/download/SQLSVR2000/Utility/2.0/W98NT42KMeXP/EN-US/killpwd.exe

---

MS02-036 - Microsoft Metadirectory Services の認証問題により、権限が昇格する (Q317138)

Posted: 2002/07/24

317138

Affected Products:

• Microsoft Metadirectory Services 2.2
  • Microsoft Metadirectory Services 2.2 SP1

Patch: Q317138.EXE

• http://download.microsoft.com/download/mms22/patch/q317138/nt5/en-us/q317138.exe

---

MS02-037 - SMTP クライアント EHLO コマンドへのサーバー応答で、バッファ オーバーランが発生する (Q326322)

Posted: 2002/07/24

326322

Affected Products:

• Exchange Server 5.5
  • Exchange Server 5.5 SP4

Patch: Q326322enui386.EXE

• http://download.microsoft.com/download/exch55/patch/05.05.59.2656/nt45/en-us/q326322enui386.exe

---

MS02-038 - SQL Server 2000 ユーティリティの未チェックのバッファにより、コードが実行される (Q316333)

Posted: 2002/07/24

316333

Affected Products:

• SQL Server 2000
  • SQL Server 2000 SP2
• SQL Server Desktop Engine (MSDE) 2000
  • SQL Server Desktop Engine (MSDE) 2000 SP2

Patch: 8.00.0655_enu.exe

• http://download.microsoft.com/download/sqlsvr2000/update/8.00.0655/w98nt42kmexp/en-us/8.00.0655_enu.exe

---

MS02-039 - SQL Server 2000 解決サービスのバッファのオーバーランにより、コードが実行される (Q323875)

Posted: 2002/07/24

323875

Affected Products:

• SQL Server 2000
  • SQL Server 2000 SP2

Patch: Q319243_MDAC27_x86.exe

• http://download.microsoft.com/download/SQLSVR2000/Patch/Q323875/W98NT42KMeXP/EN-US/Q323875_SQL2000_SP2_en.EXE

---

MS02-040 - MDAC 機能の未チェックのバッファにより、SQL Server が侵害される (Q326573)

Posted: 2002/07/30

326573

Affected Products:

• MDAC 2.5
  • MDAC 2.5 SP2
• SQL Server 7.0
  • SQL Server 7.0 SP4

Patch: Q323264_MDAC25_x86_en.exe

• http://download.microsoft.com/download/dasdk/patch/q323264/w9xnt4/en-us/q323264_mdac25_x86_en.exe

326573

Affected Products:

• MDAC 2.6
  • MDAC 2.6 SP2
• SQL Server 2000
  • SQL Server 2000 SP2

Patch: Q323266_MDAC26_x86_en.exe

• http://download.microsoft.com/download/dasdk/patch/q323266/win98me/en-us/q323266_mdac26_x86_en.exe

326573

Affected Products:

• MDAC 2.7
  • MDAC2.7 Gold

Patch: Q323263_MDAC27_x86_en.exe

• http://download.microsoft.com/download/dasdk/patch/q323263/w98nt42kme/en-us/q323263_mdac27_x86_en.exe

---

MS02-041 - Content Management Server の未チェックのバッファにより、サーバーが侵害される (Q326075)

Posted: 2002/08/06

326075

Affected Products:

• Content Management Server 2001
  • Content Management Server 2001 SP1

Patch: mcms2001srp1.exe

• http://download.microsoft.com/download/contentmanagementser/sp/1.0/nt5/en-us/mcms2001srp1.exe

---

MS02-042 - 接続マネージャの問題により、権限が昇格する (Q326886)

Posted: 2002/08/15

326886

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Professional
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3

Patch: Q326886_W2K_SP4_X86_EN.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q326886/NT5/EN-US/Q326886_W2K_SP4_X86_EN.exe

---

MS02-043 - SQL Server 用の累積的な修正プログラム (Q316333)

Posted: 2002/08/15

327068

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP4
• SQL Server Desktop Engine (MSDE) 1.0
  • SQL Server 7.0 SP4

Patch: 7.00.1076_enu.exe

• http://support.microsoft.com/default.aspx?scid=kb;en-us;327068

316333

Affected Products:

• SQL Server 2000
  • SQL Server 2000 SP2
• SQL Server Desktop Engine (MSDE) 2000
  • SQL Server Desktop Engine (MSDE) 2000 SP2

Patch: 8.00.0667_enu.exe

• http://support.microsoft.com/default.aspx?scid=kb;en-us;316333

---

MS02-044 - Office Web Components に安全でない機能が含まれる (Q328130)

Posted: 2002/08/21

328130

Affected Products:

• Project 2002
  • Project 2002 Gold

Patch: prj1001.exe

• http://download.microsoft.com/download/msftproject2002/prj1001/10/WIN98MeXP/EN-US/prj1001.exe

328130

Affected Products:

• Project Server 2002
  • Project Server 2002 Gold

Patch: ps1001en.exe

• http://download.microsoft.com/download/microsoftproject2002/ps1001en/10/WIN98MeXP/EN-US/ps1001en.exe

328130

Affected Products:

• Office 2000
  • Office 2000 Service Pack 2
  • Office 2000 Gold
• Office XP
  • Office XP SP1
  • Office XP Gold
• Small Business Server 2000
  • Small Business Server 2000 Gold
• ISA Server 2000
  • ISA Server 2000 SP1
  • ISA Server 2000 Gold
• Commerce Server 2000
  • Commerce Server 2000 SP2
  • Commerce Server 2000 Gold
• Commerce Server 2002
  • Commerce Server 2002 Gold
• BizTalk Server 2002
  • BizTalk Server 2002 Gold
• BizTalk Server 2000
  • BizTalk Server 2000 Gold
• BackOffice Server 2000
  • BackOffice Server 2000 Gold
• Office Web Components 2000
  • Office Web Components 2000 Gold
• Office Web Components 2002
  • Office Web Components 2002 Gold

Patch: owcupd.exe

• http://download.microsoft.com/download/office2000/Patch/owcupd/WIN98MeXP/EN-US/owcupd.exe

---

MS02-045 - ネットワーク共有プロバイダの未チェックのバッファにより、サービス拒否が起こる (Q326830)

Posted: 2002/08/21

326830

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 3
  • Windows 2000 Service Pack 2
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 3
  • Windows 2000 Service Pack 2
• Windows 2000 Professional
  • Windows 2000 Service Pack 3
  • Windows 2000 Service Pack 2
• Windows 2000 Server
  • Windows 2000 Service Pack 3
  • Windows 2000 Service Pack 2

Patch: Q326830_W2K_SP4_X86_EN.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q326830/NT5/EN-US/Q326830_W2K_SP4_X86_EN.exe

326830

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold

Patch: Q326830_WXP_SP1_x86_ENU.exe

• http://download.microsoft.com/download/whistler/Patch/Q326830/WXP/EN-US/Q326830_WXP_SP1_x86_ENU.exe

326830

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a

Patch: Q326830i.exe

• http://www.microsoft.com/ntserver/nts/downloads/critical/q326830/download.asp

326830

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q326830i.Exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=41519

---

MS02-046 - TSAC ActiveX コントロールのバッファ オーバーランにより、コードが実行される (Q327521)

Posted: 2002/08/21

327521

Affected Products:

• Microsoft Terminal Services Advanced Client (TSAC) ActiveX control
  • Microsoft Terminal Services Advanced Client (TSAC) ActiveX control Gold

Patch: tswebsetup.exe

• http://www.microsoft.com/windowsxp/pro/downloads/rdwebconn.asp

---

MS02-047 - Internet Explorer 用の累積的な修正プログラム (Q323759)

Posted: 2002/08/21

323759

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP2

Patch: q323759.exe

• http://download.microsoft.com/download/ie501sp2/p28_IE/5.01_sp2/NT5/EN-US/q323759.exe

323759

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP1

Patch: Q323759.exe

• http://download.microsoft.com/download/ie55sp1/p28_IE/5.5_sp1/W98NT42KMe/EN-US/q323759.exe

323759

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP2

Patch: q323759.Exe

• http://download.microsoft.com/download/ie55sp2/p28_IE/5.5_sp2/W98NT42KMe/EN-US/q323759.exe

323759

Affected Products:

• Internet Explorer 6
  • Internet Explorer 6 Gold

Patch: Q323759.Exe

• http://download.microsoft.com/download/IE60/p28_IE/6/W98NT42KMeXP/EN-US/q323759.exe

323759

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP3

Patch: q323759.EXe

• http://www.microsoft.com/windows/ie/downloads/critical/q323759ie/default.asp

---

MS02-048 - Certificate Enrollment Control の問題により、デジタル証明書が削除される (Q323172)

Posted: 2002/08/28

323172

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold

Patch: Q323172_WXP_SP1_x86_ENU.exe

• http://www.microsoft.com/technet/security/bulletin

323172

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a

Patch: Q323172i.exe

• http://www.microsoft.com/ntserver/nts/downloads/critical/q323172/default.asp

323172

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q323172i.Exe

• http://www.microsoft.com/ntserver/nts/downloads/critical/q323172/default.asp

323172

Affected Products:

• Windows Me
  • Windows Me Gold

Patch: 323172USAM.EXE

• http://www.microsoft.com/windows98/downloads/contents/WUCritical/q323172/default.asp

323172

Affected Products:

• Windows 98 SE
  • Windows 98se Gold
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1

Patch: 323172USA8.EXE

• http://www.microsoft.com/windows98/downloads/contents/WUCritical/q323172/default.asp

323172

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3

Patch: q323172_W2K_SP4_X86_EN.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q323172/NT5/EN-US/q323172_W2K_SP4_X86_EN.exe

---

MS02-049 - 警告なしで Web ページが Visual FoxPro 6.0 アプリケーションを起動する (Q326568)

Posted: 2002/09/04

326568

Affected Products:

• Visual FoxPro 6.0
  • Visual FoxPro 6.0 Gold

Patch: vfp_q326568_en.exe

• http://www.microsoft.com/Release.asp?ReleaseID=42297

---

MS02-050 - 証明書確認の問題により、ID が偽装される (Q329115)

Posted: 2002/09/04

329115

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a

Patch: Q329115i.Exe

• http://www.microsoft.com/ntserver/nts/downloads/critical/q329115/default.asp

329115

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: q329115i.EXE

• http://www.microsoft.com/ntserver/terminalserver/downloads/critical/q329115/default.asp

329115

Affected Products:

• Windows XP Professional
  • Windows XP Gold
  • Windows XP Service Pack 1
• Windows XP Home Edition
  • Windows XP Gold
  • Windows XP Service Pack 1

Patch: Q329115_WXP_SP2_x86_ENU.exe

• http://www.microsoft.com/windowsxp/pro/downloads/q329115.asp

329115

Affected Products:

• Windows 98 SE
  • Windows 98se Gold
• Windows 98
  • Windows 98 Gold

Patch: Q329115-Win98

• http://www.microsoft.com/windows98/downloads/contents/WUCritical/q329115/default.asp

329115

Affected Products:

• Windows Me
  • Windows Me Gold

Patch: Q329115-WinME

• http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms02-050.asp

329115

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Professional
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3

Patch: Q329115_W2K_SP4_X86_EN.exe

• http://download.microsoft.com/download/win2000platform/patch/Q329115/nt5/en-us/Q329115_W2K_SP4_X86_EN.exe

---

MS02-051 - RDP プロトコルの暗号の問題により、情報が漏えいされる (Q324380)

Posted: 2002/09/18

324380

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
  • Windows 2000 Service Pack 1
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
  • Windows 2000 Service Pack 1
• Windows 2000 Professional
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
  • Windows 2000 Service Pack 1
• Windows 2000 Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
  • Windows 2000 Service Pack 1

Patch: Q324380_W2K_SP4_X86_EN.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q324380/NT5/EN-US/Q324380_W2K_SP4_X86_EN.exe

324380

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold

Patch: Q324380_WXP_SP1_x86_ENU.exe

• http://download.microsoft.com/download/whistler/Patch/Q324380/WXP/EN-US/Q324380_WXP_SP1_x86_ENU.exe

---

MS02-052 - Microsoft VM JDBC クラスの問題により、コードが実行される (Q329077)

Posted: 2002/09/18

329077

Affected Products:

• Microsoft Virtual Machine (VM)
  • Microsoft Virtual Machine (VM) Gold

Patch: vm-sfix3.exe

• (Windows Update Only) http://support.microsoft.com/default.aspx?scid=kb;en-us;329077

---

MS02-053 - Smart HTML インタープリタでバッファオーバーランによりコードが実行される (Q324096)

Posted: 2002/09/24

324096

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold
• Front Page 2000 Server Extensions
  • Front Page 2000 Server Extensions Gold

Patch: FPSE0901.exe

• http://download.microsoft.com/download/fp2000fd2000/Patch/1/W9XNT4Me/EN-US/fpse0901.exe

324096

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Professional
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Front Page 2000 Server Extensions
  • Front Page 2000 Server Extensions Gold

Patch: Q324096_W2K_SP4_X86_EN.exe

• http://download.microsoft.com/download/win2000pro/Patch/Q324096/NT5/EN-US/Q324096_W2K_SP4_X86_EN.exe

324096

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold
• Front Page 2000 Server Extensions
  • Front Page 2000 Server Extensions Gold

Patch: Q324096_WXP_SP1_x86_ENU.exe

• http://download.microsoft.com/download/whistler/Patch/Q324096/WXP/EN-US/Q324096_WXP_SP1_x86_ENU.exe

324096

Affected Products:

• Front Page Server Extensions 2002
  • Front Page Server Extensions 2002 Gold

Patch: MS02-053FPSE2002

• http://www.microsoft.com/technet/security/bulletin

---

MS02-054 - ファイル展開機能に含まれる未チェックのバッファにより、コードが実行される (Q329048)

Posted: 2002/10/02

329048

Affected Products:

• Windows Me
  • Windows Me Gold

Patch: 329048USAM.EXE

• http://windowsupdate.microsoft.com

329048

Affected Products:

• Windows XP Home Edition
  • Windows XP Service Pack 1
• Windows XP Professional
  • Windows XP Service Pack 1

Patch: Q329048_WXP_SP2_x86_ENU.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=43419

329048

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold

Patch: q329048_WXP_SP2_x86_ENU.exe

• http://www.microsoft.com/Downloads/Release.asp?ReleaseID=43419

329048

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 329048USA8.EXE

• http://support.microsoft.com/default.aspx?scid=kb;en-us;329048

---

MS02-055 - Windows ヘルプ機能の未チェックのバッファにより、コードが実行される (Q323255)

Posted: 2002/10/02

323255

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
  • Windows XP Service Pack 1
• Windows XP Professional
  • Windows XP Gold
  • Windows XP Service Pack 1

Patch: Q323255_WXP_SP2_x86_ENU.exe

• http://download.microsoft.com/download/whistler/Patch/Q323255/WXP/EN-US/Q323255_WXP_SP2_x86_ENU.exe

323255

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Professional
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3

Patch: Q323255_W2K_SP4_X86_EN.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q323255/NT5/EN-US/Q323255_W2K_SP4_X86_EN.exe

323255

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a

Patch: Hhupd.exe

• http://download.microsoft.com/download/winntsrv40/Install/Q323255/NT4/EN-US/hhupd.exe

323255

Affected Products:

• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold

Patch: 323255USA8.EXE

• http://www.microsoft.com/windows98/downloads/contents/WUCritical/q323255/default.asp

323255

Affected Products:

• Windows Me
  • Windows Me Gold

Patch: 323255USAM.EXE

• http://support.microsoft.com/default.aspx?scid=kb;en-us;323255#Win9x

---

MS02-056 - SQL Server 用の累積的な修正プログラム (Q316333)

Posted: 2002/10/02

316333

Affected Products:

• SQL Server 2000
  • SQL Server 2000 SP2
• SQL Server Desktop Engine (MSDE) 2000
  • SQL Server Desktop Engine (MSDE) 2000 SP2

Patch: 8.00.0679_enu.exe

• http://download.microsoft.com/download/SQLSVR2000/Update/8.00.0679/W98NT42KMeXP/EN-US/8.00.0679_enu.exe

316333

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP4
• SQL Server Desktop Engine (MSDE) 1.0
  • SQL Server 7.0 SP4

Patch: 7.00.1077_enu.exe

• http://support.microsoft.com/default.aspx?scid=kb;en-us;327068

---

MS02-057 - Services for Unix 3.0 に含まれる Interix SDK の問題によりコードが実行される (Q329209)

Posted: 2002/10/02

329209

Affected Products:

• Services For Unix 3.0 Interix SDK
  • Services For Unix 3.0 Interix SDK Gold

Patch: q329209_sfu_3_x86_en.exe

• http://download.microsoft.com/download/winntunx/Patch/3.0/NT45XP/EN-US/q329209_sfu_3_x86_en.exe

---

MS02-058 - Outlook Express の S/MIME 解析の未チェックのバッファによりシステムが侵害される(Q328676)

Posted: 2002/10/09

328676

Affected Products:

• Outlook Express 5.5
  • Internet Explorer 5.5 SP2
• Outlook Express 6.0
  • Internet Explorer 6 SP1

Patch: OE-Q328676

• http://download.microsoft.com/download/ie55sp2/oepac_29/5.5_sp2/W98NT42KMe/EN-US/q328389.exe

---

MS02-059 - Word フィールドおよび Excel の外部データ更新の問題により、情報が漏えいされる (Q330008)

Posted: 2002/10/16

330008

Affected Products:

• Word 2002
  • Word 2002 Gold
• Office XP
  • Office XP SP1
  • Office XP SP2

Patch: Word2002MS02-059

• http://support.microsoft.com/default.aspx?scid=kb;en-us;330008#Word9x

330008

Affected Products:

• Word 2000
  • Word 2000 Gold
• Office 2000
  • Office 2000 Service Pack 1
  • Office 2000 Service Pack 2

Patch: Word2000MS02-059

• http://support.microsoft.com/default.aspx?scid=kb;en-us;330008#Word9x

330008

Affected Products:

• Word 97
  • Word 97 Gold
• Word 98
  • Word 98 Gold

Patch: Word98JMS02-059

• http://support.microsoft.com/default.aspx?scid=kb;en-us;330008#Word9x

330008

Affected Products:

• Word X for Macintosh
  • Word X for Macintosh Gold
• Office v.X for Macintosh
  • Office v.X for Macintosh SR 1

Patch: Wordx.VMacMS02-059

• http://www.microsoft.com/mac/download/officex/officex_1011.asp

330008

Affected Products:

• Word 2001 for Macintosh
  • Word 2001 for Macintosh Gold
• Office 2001 for Macintosh
  • Office 2001 for Macintosh SR1

Patch: Word2001MacMS02-059

• http://support.microsoft.com/default.aspx?scid=kb;en-us;330008#Word9x

330008

Affected Products:

• Word 98 for Macintosh
  • Word 98 for Macintosh Gold
• Office 98 for Macintosh
  • Office 98 for Macintosh Gold

Patch: Word98MacMS02-059

• http://support.microsoft.com/default.aspx?scid=kb;en-us;330008#Word9x

330008

Affected Products:

• Excel 2002
  • Excel 2002 Gold
• Office XP
  • Office XP SP1
  • Office XP SP2

Patch: Excel2002MS02-059

• http://download.microsoft.com/download/Excel2002/patch/exc1003/w98nt42kmexp/en-us/exc1003.exe

---

MS02-060 - Windows XP 「ヘルプとサポート センター」 の問題によりファイルが削除される (Q328940)

Posted: 2002/10/16

328940

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold

Patch: Q328940_WXP_SP1_x86_ENU.exe

• http://download.microsoft.com/download/whistler/Patch/Q328940/WXP/EN-US/Q328940_WXP_SP1_x86_ENU.exe

---

MS02-061 - SQL Server Web タスクで権限が昇格する (Q316333)

Posted: 2002/10/16

316333

Affected Products:

• SQL Server 7.0
  • SQL Server 7.0 SP4
• SQL Server Desktop Engine (MSDE) 1.0
  • SQL Server 7.0 SP4

Patch: 7.00.1078_enu.exe

• http://download.microsoft.com/download/sql70/Patch/7.00.1078/WIN98MeXP/EN-US/7.00.1078_enu.exe

316333

Affected Products:

• SQL Server 2000
  • SQL Server 2000 SP2
• SQL Server Desktop Engine (MSDE) 2000
  • SQL Server Desktop Engine (MSDE) 2000 SP2

Patch: 8.00.0686_enu.exe

• http://download.microsoft.com/download/SQLSVR2000/Patch/8.00.0686/W98NT42KMeXP/EN-US/8.00.0686_enu.exe

---

MS02-062 - Internet Information Service 用の累積的な修正プログラム (Q327696)

Posted: 2002/10/30

327696

Affected Products:

• Internet Information Server 4.0
  • Windows NT4 Service Pack 6a

Patch: Q327696I.EXE

• http://www.microsoft.com/ntserver/nts/downloads/security/q327696/download.asp

327696

Affected Products:

• Internet Information Services 5.0
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3

Patch: Q327696_W2K_SP4_X86_EN.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q327696/NT5/EN-US/Q327696_W2K_SP4_X86_EN.exe

327696

Affected Products:

• Internet Information Services 5.1
  • Windows XP Service Pack 1
  • Windows XP Gold

Patch: Q327696_WXP_SP2_x86_ENU.exe

• http://download.microsoft.com/download/whistler/Patch/Q327696/WXP/EN-US/Q327696_WXP_SP2_x86_ENU.exe

---

MS02-063 - PPTP サービスの未チェックのバッファにより、サービス拒否の攻撃を受ける (Q329834)

Posted: 2002/10/30

329834

Affected Products:

• Windows 2000 Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Professional
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3

Patch: Q329834_W2K_SP4_X86_EN.exe

• http://download.microsoft.com/download/win2000platform/Patch/Q329834/NT5/EN-US/Q329834_W2K_SP4_X86_EN.exe

329834

Affected Products:

• Windows XP Professional
  • Windows XP Gold
• Windows XP Home Edition
  • Windows XP Gold

Patch: q329834_WXP_SP2_x86_ENU.exe

• http://download.microsoft.com/download/whistler/Patch/Q329834/WXP/EN-US/Q329834_WXP_SP2_x86_ENU.exe

329834

Affected Products:

• Windows XP Home Edition
  • Windows XP Service Pack 1
• Windows XP Professional
  • Windows XP Service Pack 1

Patch: Q329834_WXP_SP2_x86_ENU.exe

• http://download.microsoft.com/download/whistler/Patch/Q329834/WXP/EN-US/Q329834_WXP_SP2_x86_ENU.exe

---

MS02-064 - Windows 2000 の既定のアクセス権により、トロイの木馬プログラムが実行される (Q327522)

Posted: 2002/10/30

327522

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Professional
  • Windows 2000 Gold
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3

Patch: W2K_MS02-064

• http://support.microsoft.com/default.aspx?scid=kb;en-us;327522

---

MS02-065 - Microsoft Data Access Components のバッファ オーバーランにより、コードが実行される (Q329414)

Posted: 2002/11/19

329414

Affected Products:

• MDAC 2.1
  • MDAC 2.1 Gold
  • MDAC 2.1 SP1
  • MDAC 2.1 SP1A
  • MDAC 2.1 SP2
• MDAC 2.5
  • MDAC 2.5 Gold
  • MDAC 2.5 SP1
  • MDAC 2.5 SP2
  • MDAC 2.5 SP3
• MDAC 2.6
  • MDAC 2.6 Gold
  • MDAC 2.6 SP1
  • MDAC 2.6 SP2
• Windows 98
  • Windows 98 Gold
  • Windows 98 SP1
• Windows 98 SE
  • Windows 98se Gold
• Windows Me
  • Windows Me Gold
• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a
• Windows 2000 Advanced Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Professional
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Gold
  • Windows 2000 Service Pack 1
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3

Patch: q329414_mdacall_x86.exe

• http://download.microsoft.com/download/dasdk/Patch/Q329414/W98NT42KMe/EN-US/q329414_mdacall_x86.exe

---

MS02-066 - Internet Explorer 用の累積的な修正プログラム (Q328970)

Posted: 2002/11/20

328970

Affected Products:

• Internet Explorer 5.01
  • Internet Explorer 5.01 SP3

Patch: q328970.exe

• http://www.microsoft.com/windows/ie/downloads/critical/q328970/download.asp

328970

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP2

Patch: q328970.Exe

• http://www.microsoft.com/windows/ie/downloads/critical/q328970/default.asp

328970

Affected Products:

• Internet Explorer 6
  • Internet Explorer 6 Gold

Patch: Q328970.Exe

• http://www.microsoft.com/windows/ie/downloads/critical/q328970/default.asp

328970

Affected Products:

• Internet Explorer 6
  • Internet Explorer 6 SP1

Patch: Q328970.EXe

• http://www.microsoft.com/windows/ie/downloads/critical/q328970/default.asp

---

MS02-067 - 電子メール ヘッダー処理の問題により、Outlook 2002 が異常終了する (331866)

Posted: 2002/12/04

331866

Affected Products:

• Outlook 2002
  • Outlook 2002 SP2
• Office XP
  • Office XP SP2

Patch: MS02-067

• http://download.microsoft.com/download/outlook2002/patch/olk1005/w98nt42kmexp/en-us/olk1005n.exe

---

MS02-068 - Internet Explorer 用の累積的な修正プログラム (324929)

Posted: 2002/12/04

324929

Affected Products:

• Internet Explorer 5.5
  • Internet Explorer 5.5 SP2

Patch: q324929.Exe

• http://download.microsoft.com/download/ie55sp2/32secpac/5.5_sp2/W98NT42KMe/EN-US/q324929.exe

324929

Affected Products:

• Internet Explorer 6
  • Internet Explorer 6 Gold

Patch: Q324929.Exe

• http://download.microsoft.com/download/IE60/32secpac/6/W98NT42KMeXP/EN-US/q324929.exe

324929

Affected Products:

• Internet Explorer 6
  • Internet Explorer 6 SP1

Patch: Q324929.EXe

• http://download.microsoft.com/download/ie6sp1/32secpac/6_sp1/W98NT42KMeXP/EN-US/q324929.exe

---

MS02-069 - Microsoft VM の問題により、システムが侵害される (810030)

Posted: 2002/12/11

810030

Affected Products:

• Microsoft Virtual Machine (VM)
  • Microsoft Virtual Machine (VM) Gold
• Windows XP Professional
  • Windows XP Gold
  • Windows XP Service Pack 1
• Windows XP Home Edition
  • Windows XP Gold
  • Windows XP Service Pack 1
• Windows NT Server 4.0
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 1
  • Windows NT4 Service Pack 2
  • Windows NT4 Service Pack 4
  • Windows NT4 Terminal Server Service Pack 5
  • Windows NT4 Service Pack 6
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 1
  • Windows NT4 Service Pack 2
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 6
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 1
  • Windows NT4 Service Pack 2
  • Windows NT4 Service Pack 3
  • Windows NT4 Service Pack 4
  • Windows NT4 Service Pack 5
  • Windows NT4 Service Pack 6
  • Windows NT4 Service Pack 6a

Patch: msjavwu.exe

• http://windowsupdate.microsoft.com

810030

Affected Products:

• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Professional
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3

Patch: Q810030_W2K_SP4_X86_EN.exe

• http://www.microsoft.com/technet/security/bulletin

---

MS02-070 - SMB 署名の問題により、グループ ポリシーが変更される (329170)

Posted: 2002/12/11

329170

Affected Products:

• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Professional
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3

Patch: Q329170_W2K_SP4_X86_EN.exe

• http://microsoft.com/downloads/details.aspx?FamilyId=52EAC216-A360-4E2D-9C6B-AD4D31C40BA2&displaylang=en

329170

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold

Patch: Q329170_WXP_SP2_x86_ENU.exe

• http://microsoft.com/downloads/details.aspx?FamilyId=77B49431-742B-4426-AD45-F09D3AED16CB&displaylang=en

329170

Affected Products:

• Windows XP Home Edition
  • Windows XP Service Pack 1
• Windows XP Professional
  • Windows XP Service Pack 1

Patch: Q329170_WXP_SP2_x86_ENU.Exe

• http://microsoft.com/downloads/details.aspx?FamilyId=77B49431-742B-4426-AD45-F09D3AED16CB&displaylang=en

---

MS02-071 - Windows WM_TIMER メッセージ処理の問題により、権限が昇格する (328310)

Posted: 2002/12/11

328310

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q328310i.EXE

• http://microsoft.com/downloads/details.aspx?FamilyId=5A203864-F6DF-41EB-A8DB-13EFFCD84081&displaylang=en

328310

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a

Patch: Q328310i.exe

• http://microsoft.com/downloads/details.aspx?FamilyId=E5606A46-364E-4585-9EDB-63654007E685&displaylang=en

328310

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Professional
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3

Patch: Q328310_W2K_SP4_X86_EN.exe

• http://microsoft.com/downloads/details.aspx?FamilyId=C663A0EA-F6CB-4EE1-8AFA-0C068F84A1D5&displaylang=en

328310

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold

Patch: Q328310_WXP_SP2_x86_ENU.exe

• http://microsoft.com/downloads/details.aspx?FamilyId=98F02C55-E598-4EB1-AABE-DB3BA0807685&displaylang=en

328310

Affected Products:

• Windows XP Home Edition
  • Windows XP Service Pack 1
• Windows XP Professional
  • Windows XP Service Pack 1

Patch: Q328310_WXP_SP2_x86_ENU.Exe

• http://microsoft.com/downloads/details.aspx?FamilyId=98F02C55-E598-4EB1-AABE-DB3BA0807685&displaylang=en

---

MS02-072 - Windows Shell の未チェックのバッファによりシステムが侵害される (329390)

Posted: 2002/12/17

329390

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold

Patch: Q329390_WXP_SP2_x86_ENU.exe

• http://microsoft.com/downloads/details.aspx?FamilyId=A0BE7AF2-2653-4767-A85D-24BF68D28D20&displaylang=en

329390

Affected Products:

• Windows XP Home Edition
  • Windows XP Service Pack 1
• Windows XP Professional
  • Windows XP Service Pack 1

Patch: Q329390_WXP_SP2_x86_ENU.Exe

• http://microsoft.com/downloads/details.aspx?FamilyId=A0BE7AF2-2653-4767-A85D-24BF68D28D20&displaylang=en

---

MS03-001 - Locator Service の未チェックのバッファにより、コードが実行される (810833)

Posted: 2003/01/20

810833

Affected Products:

• Windows NT Server 4.0
  • Windows NT4 Service Pack 6a
• Windows NT Server 4.0, Enterprise Edition
  • Windows NT4 Service Pack 6a
• Windows NT Workstation 4.0
  • Windows NT4 Service Pack 6a

Patch: Q810833i.exe

• http://microsoft.com/downloads/details.aspx?FamilyId=F92D1E86-590A-4DA5-93F2-FCC6300A1A43&displaylang=en

810833

Affected Products:

• Windows NT Server 4.0, Terminal Server Edition
  • Windows NT4 Terminal Server Service Pack 6

Patch: Q810833i.Exe

• http://microsoft.com/downloads/details.aspx?FamilyId=EB651162-97F2-47F9-8E99-016B35B7646D&displaylang=en

810833

Affected Products:

• Windows 2000 Advanced Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Datacenter Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Professional
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3
• Windows 2000 Server
  • Windows 2000 Service Pack 2
  • Windows 2000 Service Pack 3

Patch: Q810833_W2K_SP4_X86_EN.exe

• http://microsoft.com/downloads/details.aspx?FamilyId=33FF827A-D5DB-4F92-9DEF-4D91A140E0E0&displaylang=en

810833

Affected Products:

• Windows XP Home Edition
  • Windows XP Gold
• Windows XP Professional
  • Windows XP Gold

Patch: Q810833_WXP_SP2_x86_ENU.exe

• http://microsoft.com/downloads/details.aspx?FamilyId=DF24197E-6217-4ABD-A244-0A53320B2813&displaylang=en

810833

Affected Products:

• Windows XP Home Edition
  • Windows XP Service Pack 1
• Windows XP Professional
  • Windows XP Service Pack 1

Patch: Q810833_WXP_SP2_x86_ENU.Exe

• http://microsoft.com/downloads/details.aspx?FamilyId=DF24197E-6217-4ABD-A244-0A53320B2813&displaylang=en

---

MS03-002 - Microsoft Content Management Server 用の累積的な修正プログラム (810487)

Posted: 2003/01/21

810487

Affected Products:

• Content Management Server 2001
  • Content Management Server 2001 SP1

Patch: mcms2001srp2.exe

• http://microsoft.com/downloads/details.aspx?FamilyId=90283227-9431-4088-BBE0-BA606B6CF2C6&displaylang=en

---

MS03-003 - Outlook 2002 が Version 1 の Exchange Server Security 証明書を処理する方法に存在する問題により、情報が漏えいする (812262)

Posted: 2003/01/21

812262

Affected Products:

• Office XP
  • Office XP SP2
• Outlook 2002
  • Outlook 2002 SP2

Patch: Olk1006.exe

• http://microsoft.com/downloads/details.aspx?FamilyId=F20A2E4B-E458-48F0-B0CB-7E73C0BB4884&displaylang=en

---