PDA

View Full Version : KB911565


webster72n
February 18th 06, 06:55 PM
KB911565:
Just released, or did I miss it?

Harry.

Noel Paton
February 18th 06, 07:13 PM
This vulnerability appears to affect only WindowsNT-based OS's.


--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
"webster72n" > wrote in message
...
> KB911565:
> Just released, or did I miss it?
>
> Harry.
>
>

Noel Paton
February 18th 06, 07:16 PM
Oooops! - I lied!
The vuulnerability IS CRITICAL for Win9x systems - but MS have not yet
released a patch, AFAIK
http://www.microsoft.com/technet/security/bulletin/ms06-005.mspx

--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
"Noel Paton" > wrote in message
...
> This vulnerability appears to affect only WindowsNT-based OS's.
>
>
> --
> Noel Paton (MS-MVP 2002-2006, Windows)
>
> Nil Carborundum Illegitemi
> http://www.crashfixpc.com/millsrpch.htm
>
> http://tinyurl.com/6oztj
>
> Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
> "webster72n" > wrote in message
> ...
>> KB911565:
>> Just released, or did I miss it?
>>
>> Harry.
>>
>>
>
>

Mike M
February 18th 06, 07:32 PM
KB911565 can be downloaded from the Windows Update site as is mentioned in
the MS06-005 FAQ
(http://www.microsoft.com/technet/security/bulletin/MS06-005.mspx)
--
Mike Maltby



Noel Paton > wrote:

> Oooops! - I lied!
> The vuulnerability IS CRITICAL for Win9x systems - but MS have not yet
> released a patch, AFAIK
> http://www.microsoft.com/technet/security/bulletin/ms06-005.mspx

Noel Paton
February 18th 06, 07:40 PM
The article says it's not available yet, Mike

--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
"Mike M" > wrote in message
...
> KB911565 can be downloaded from the Windows Update site as is mentioned in
> the MS06-005 FAQ
> (http://www.microsoft.com/technet/security/bulletin/MS06-005.mspx)
> --
> Mike Maltby
>
>
>
> Noel Paton > wrote:
>
>> Oooops! - I lied!
>> The vuulnerability IS CRITICAL for Win9x systems - but MS have not yet
>> released a patch, AFAIK
>> http://www.microsoft.com/technet/security/bulletin/ms06-005.mspx
>

Noel Paton
February 18th 06, 07:46 PM
....and sure enough, WU doesn't have it for my VPC (with WMP9 installed)-
although it is available from the Windows Update Catalog!! (dated 13th Feb)


--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
"Noel Paton" > wrote in message
...
> The article says it's not available yet, Mike
>
> --
> Noel Paton (MS-MVP 2002-2006, Windows)
>
> Nil Carborundum Illegitemi
> http://www.crashfixpc.com/millsrpch.htm
>
> http://tinyurl.com/6oztj
>
> Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
> "Mike M" > wrote in message
> ...
>> KB911565 can be downloaded from the Windows Update site as is mentioned
>> in the MS06-005 FAQ
>> (http://www.microsoft.com/technet/security/bulletin/MS06-005.mspx)
>> --
>> Mike Maltby
>>
>>
>>
>> Noel Paton > wrote:
>>
>>> Oooops! - I lied!
>>> The vuulnerability IS CRITICAL for Win9x systems - but MS have not yet
>>> released a patch, AFAIK
>>> http://www.microsoft.com/technet/security/bulletin/ms06-005.mspx
>>
>
>

Mike M
February 18th 06, 08:02 PM
Noel Paton > wrote:

> ...and sure enough, WU doesn't have it for my VPC (with WMP9
> installed)- although it is available from the Windows Update
> Catalog!! (dated 13th Feb)

Noel,

I'm sorry but that is totally incorrect. :-)

WU does indeed have 911565 for Win Me since I have installed it. I've cut
and pasted the details below.

Security Update for Windows Media Player 9 for Windows 98 and Windows ME
(KB911565) ..
Download size: 1.9 MB, < 1 minute
A security issue has been identified that could allow an attacker to
remotely compromise your Windows-based system using Windows Media Player
and gain control over it. You can help protect your computer by installing
this update from Microsoft. After you install this item, you may have to
restart your computer. Read more...

Likewise I see nowhere in
http://www.microsoft.com/technet/security/bulletin/MS06-005.mspx anything
about the patch not yet being available instead I see it stated in the FAQ
"How does the extended support for Windows 98, Windows 98 Second Edition,
and Windows Millennium Edition affect the release of security updates for
these operating systems?

<snip>
Critical security updates for this platform are available and are provided
as part of this security bulletin and can be downloaded only from the
Windows Update Web site. For more information about severity ratings,
visit the following Web site."
--
Mike Maltby

webster72n
February 18th 06, 08:09 PM
I got it, when I ran my Windows Update, by pure incidence, I might add, Noel
and it downloaded and installed fine.
Just wasn't sure whether I had missed it before, or if it was recent, which
it was, obviously.

Harry.


"Noel Paton" > wrote in message
...
> ...and sure enough, WU doesn't have it for my VPC (with WMP9 installed)-
> although it is available from the Windows Update Catalog!! (dated 13th
Feb)
>
>
> --
> Noel Paton (MS-MVP 2002-2006, Windows)
>
> Nil Carborundum Illegitemi
> http://www.crashfixpc.com/millsrpch.htm
>
> http://tinyurl.com/6oztj
>
> Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
> "Noel Paton" > wrote in message
> ...
> > The article says it's not available yet, Mike
> >
> > --
> > Noel Paton (MS-MVP 2002-2006, Windows)
> >
> > Nil Carborundum Illegitemi
> > http://www.crashfixpc.com/millsrpch.htm
> >
> > http://tinyurl.com/6oztj
> >
> > Please read http://dts-l.org/goodpost.htm on how to post messages to
NG's
> > "Mike M" > wrote in message
> > ...
> >> KB911565 can be downloaded from the Windows Update site as is mentioned
> >> in the MS06-005 FAQ
> >> (http://www.microsoft.com/technet/security/bulletin/MS06-005.mspx)
> >> --
> >> Mike Maltby
> >>
> >>
> >>
> >> Noel Paton > wrote:
> >>
> >>> Oooops! - I lied!
> >>> The vuulnerability IS CRITICAL for Win9x systems - but MS have not yet
> >>> released a patch, AFAIK
> >>> http://www.microsoft.com/technet/security/bulletin/ms06-005.mspx
> >>
> >
> >
>
>

Noel Paton
February 18th 06, 08:11 PM
<quote>
Critical security updates for these platforms may not be available
concurrently with the other security updates provided as part of this
security bulletin. They will be made available as soon as possible following
the release. When these security updates are available, you will be able to
download them only from the Windows Update Web site. For more information
about severity ratings, visit the following Web site.
</quote>
I repeat, Mike - the update was NOT available vie the updater at WU for me -
only via the catalog

--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
"Mike M" > wrote in message
...
> Noel Paton > wrote:
>
>> ...and sure enough, WU doesn't have it for my VPC (with WMP9
>> installed)- although it is available from the Windows Update
>> Catalog!! (dated 13th Feb)
>
> Noel,
>
> I'm sorry but that is totally incorrect. :-)
>
> WU does indeed have 911565 for Win Me since I have installed it. I've cut
> and pasted the details below.
>
> Security Update for Windows Media Player 9 for Windows 98 and Windows ME
> (KB911565) ..
> Download size: 1.9 MB, < 1 minute
> A security issue has been identified that could allow an attacker to
> remotely compromise your Windows-based system using Windows Media Player
> and gain control over it. You can help protect your computer by installing
> this update from Microsoft. After you install this item, you may have to
> restart your computer. Read more...
>
> Likewise I see nowhere in
> http://www.microsoft.com/technet/security/bulletin/MS06-005.mspx anything
> about the patch not yet being available instead I see it stated in the FAQ
> "How does the extended support for Windows 98, Windows 98 Second Edition,
> and Windows Millennium Edition affect the release of security updates for
> these operating systems?
>
> <snip>
> Critical security updates for this platform are available and are provided
> as part of this security bulletin and can be downloaded only from the
> Windows Update Web site. For more information about severity ratings,
> visit the following Web site."
> --
> Mike Maltby
>
>
>
>
>

Noel Paton
February 18th 06, 08:17 PM
LOL!
While I was composing that note, the VPC downloaded the update via
AutoUpdates!
Prior to installation, I went back to WU, and scanned again.....and the file
is now there!


--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
"Noel Paton" > wrote in message
...
> <quote>
> Critical security updates for these platforms may not be available
> concurrently with the other security updates provided as part of this
> security bulletin. They will be made available as soon as possible
> following the release. When these security updates are available, you will
> be able to download them only from the Windows Update Web site. For more
> information about severity ratings, visit the following Web site.
> </quote>
> I repeat, Mike - the update was NOT available vie the updater at WU for
> me - only via the catalog
>
> --
> Noel Paton (MS-MVP 2002-2006, Windows)
>
> Nil Carborundum Illegitemi
> http://www.crashfixpc.com/millsrpch.htm
>
> http://tinyurl.com/6oztj
>
> Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
> "Mike M" > wrote in message
> ...
>> Noel Paton > wrote:
>>
>>> ...and sure enough, WU doesn't have it for my VPC (with WMP9
>>> installed)- although it is available from the Windows Update
>>> Catalog!! (dated 13th Feb)
>>
>> Noel,
>>
>> I'm sorry but that is totally incorrect. :-)
>>
>> WU does indeed have 911565 for Win Me since I have installed it. I've
>> cut and pasted the details below.
>>
>> Security Update for Windows Media Player 9 for Windows 98 and Windows ME
>> (KB911565) ..
>> Download size: 1.9 MB, < 1 minute
>> A security issue has been identified that could allow an attacker to
>> remotely compromise your Windows-based system using Windows Media Player
>> and gain control over it. You can help protect your computer by
>> installing this update from Microsoft. After you install this item, you
>> may have to restart your computer. Read more...
>>
>> Likewise I see nowhere in
>> http://www.microsoft.com/technet/security/bulletin/MS06-005.mspx anything
>> about the patch not yet being available instead I see it stated in the
>> FAQ
>> "How does the extended support for Windows 98, Windows 98 Second Edition,
>> and Windows Millennium Edition affect the release of security updates for
>> these operating systems?
>>
>> <snip>
>> Critical security updates for this platform are available and are
>> provided as part of this security bulletin and can be downloaded only
>> from the Windows Update Web site. For more information about severity
>> ratings, visit the following Web site."
>> --
>> Mike Maltby
>>
>>
>>
>>
>>
>
>

Noel Paton
February 18th 06, 08:22 PM
.....and after resetting the VPC, the Update is caught first time in WU!

What fun! <g>

--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
"Noel Paton" > wrote in message
...
> LOL!
> While I was composing that note, the VPC downloaded the update via
> AutoUpdates!
> Prior to installation, I went back to WU, and scanned again.....and the
> file is now there!
>
>
> --
> Noel Paton (MS-MVP 2002-2006, Windows)
>
> Nil Carborundum Illegitemi
> http://www.crashfixpc.com/millsrpch.htm
>
> http://tinyurl.com/6oztj
>
> Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
> "Noel Paton" > wrote in message
> ...
>> <quote>
>> Critical security updates for these platforms may not be available
>> concurrently with the other security updates provided as part of this
>> security bulletin. They will be made available as soon as possible
>> following the release. When these security updates are available, you
>> will be able to download them only from the Windows Update Web site. For
>> more information about severity ratings, visit the following Web site.
>> </quote>
>> I repeat, Mike - the update was NOT available vie the updater at WU for
>> me - only via the catalog
>>
>> --
>> Noel Paton (MS-MVP 2002-2006, Windows)
>>
>> Nil Carborundum Illegitemi
>> http://www.crashfixpc.com/millsrpch.htm
>>
>> http://tinyurl.com/6oztj
>>
>> Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
>> "Mike M" > wrote in message
>> ...
>>> Noel Paton > wrote:
>>>
>>>> ...and sure enough, WU doesn't have it for my VPC (with WMP9
>>>> installed)- although it is available from the Windows Update
>>>> Catalog!! (dated 13th Feb)
>>>
>>> Noel,
>>>
>>> I'm sorry but that is totally incorrect. :-)
>>>
>>> WU does indeed have 911565 for Win Me since I have installed it. I've
>>> cut and pasted the details below.
>>>
>>> Security Update for Windows Media Player 9 for Windows 98 and Windows ME
>>> (KB911565) ..
>>> Download size: 1.9 MB, < 1 minute
>>> A security issue has been identified that could allow an attacker to
>>> remotely compromise your Windows-based system using Windows Media Player
>>> and gain control over it. You can help protect your computer by
>>> installing this update from Microsoft. After you install this item, you
>>> may have to restart your computer. Read more...
>>>
>>> Likewise I see nowhere in
>>> http://www.microsoft.com/technet/security/bulletin/MS06-005.mspx
>>> anything about the patch not yet being available instead I see it stated
>>> in the FAQ
>>> "How does the extended support for Windows 98, Windows 98 Second
>>> Edition, and Windows Millennium Edition affect the release of security
>>> updates for these operating systems?
>>>
>>> <snip>
>>> Critical security updates for this platform are available and are
>>> provided as part of this security bulletin and can be downloaded only
>>> from the Windows Update Web site. For more information about severity
>>> ratings, visit the following Web site."
>>> --
>>> Mike Maltby
>>>
>>>
>>>
>>>
>>>
>>
>>
>
>

Mike M
February 18th 06, 08:31 PM
Noel,

I picked up the patch about 1½ hours ago, just around the time Harry
started this thread.

I'm still not clear though as to what is confusing about the statement
"Critical security updates for this platform are available and are
provided
as part of this security bulletin and can be downloaded only from the
Windows Update Web site. For more information about severity ratings,
visit the following Web site" contained in the MS06-005 FAQ.

Since to my simple mind this means that a critical security update for
this platform (Win 9x) is available from the |WU site as indeed it is.
:-)

> What fun! <g>

Indeed!"
--
Mike Maltby



Noel Paton > wrote:

> ....and after resetting the VPC, the Update is caught first time in
> WU!
> What fun! <g>

Noel Paton
February 18th 06, 08:38 PM
read my quote , Mike - it says" updates for these platforms may not be
available
concurrently with the other security updates provided as part of this
security bulletin. They will be made available as soon as possible following
the release."

AFAICT, they had not got as far as WU when I responded - so I didn't think
to look in the WUC, as the implication was that they would not be available
there prior to release at WU.

--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
"Mike M" > wrote in message
...
> Noel,
>
> I picked up the patch about 1½ hours ago, just around the time Harry
> started this thread.
>
> I'm still not clear though as to what is confusing about the statement
> "Critical security updates for this platform are available and are
> provided
> as part of this security bulletin and can be downloaded only from the
> Windows Update Web site. For more information about severity ratings,
> visit the following Web site" contained in the MS06-005 FAQ.
>
> Since to my simple mind this means that a critical security update for
> this platform (Win 9x) is available from the |WU site as indeed it is. :-)
>
>> What fun! <g>
>
> Indeed!"
> --
> Mike Maltby
>
>
>
> Noel Paton > wrote:
>
>> ....and after resetting the VPC, the Update is caught first time in
>> WU!
>> What fun! <g>
>

Mike M
February 18th 06, 09:04 PM
Yes. I agree. The article is worded in such a way that it covers both
cases, that is whether a patch is available or not. Since I knew that one
was available for Win 9x that is how I read it, for yourself, not seeing
the patch, the converse was true. :-)

Cheers,
--
Mike Maltby



Noel Paton > wrote:

> read my quote , Mike - it says" updates for these platforms may not be
> available
> concurrently with the other security updates provided as part of this
> security bulletin. They will be made available as soon as possible
> following the release."
>
> AFAICT, they had not got as far as WU when I responded - so I didn't
> think to look in the WUC, as the implication was that they would not
> be available there prior to release at WU.

Shane
February 18th 06, 11:46 PM
I installed that one on the 15th via
http://download.windowsupdate.com/msdownload/update/v3-19990518/cabpool/WindowsMedia9-KB911565-Win9x-x86-ENU_8d1eeee2307201b8c45b3092eaa33f2.exe -
so I must have begun the update in WU then cancelled it in order to get the
url in Windows Update.log - in order to download for offline installation.

Shane



"Mike M" > wrote in message
...
> Yes. I agree. The article is worded in such a way that it covers both
> cases, that is whether a patch is available or not. Since I knew that one
> was available for Win 9x that is how I read it, for yourself, not seeing
> the patch, the converse was true. :-)
>
> Cheers,
> --
> Mike Maltby
>
>
>
> Noel Paton > wrote:
>
> > read my quote , Mike - it says" updates for these platforms may not be
> > available
> > concurrently with the other security updates provided as part of this
> > security bulletin. They will be made available as soon as possible
> > following the release."
> >
> > AFAICT, they had not got as far as WU when I responded - so I didn't
> > think to look in the WUC, as the implication was that they would not
> > be available there prior to release at WU.
>