Latest IE Patch - ms03-040

[Brian]

We are going to deploy the latest IE patch. The question I
have is the tech net article on this patch, 828750,
mentions that the windows.showhelp method will not work
unless we have applied an HTML update first.

It also recommends installing the windows media player
update.

We would like to deploy the patch as quickly as possible,
but would like to confirm if we lose any critical
functionality by not doing the HTML update and if there is
a significant risk by not installing the windows media
player update.

Weren't quite sure what functionality the windows.showhelp
method provided.

Brian

Brian

 

[Dmitry Kulshitsky]

Microsoft just want to warm you that the windows.showhelp
will cease to function. There was a previously discovered
vulnerability which allowed the code execution, so they
just removed this functionality from windows help to fix
this and all possible future security holes in this
ShowHelp method.

About Media player - it is good to have all security
patches installed. But if you want to fix IE
vulnerabilities as soon as possible and you don't have
additional time to test/roll out media player patch as
well too, then go for it - it wouldn't break anything in
your system.

 

[brian]

Thanks for the reply. What does that mean from a general
user perspective? That help for applications will cease to
work?