New Critical Patch Issued - KB870669

[Marc Liron MVP]

Microsoft is releasing a configuration change for Windows
XP, Windows 2000, and Windows Server 2003, to address
recent malicious attacks against Internet Explorer, also
know as Download.Ject.

More information on KB870669 and links at:

http://www.ramblingsofanxpjunkie.com/ramblings/2004/07/kb8
70669_new_cr.html


Kind Regards

Marc Liron
Microsoft MVP
http://www.updatexp.com

 

[Will Denny]

I'll wait:

http://search.microsoft.com/search/results.aspx?st=b&na=88&View=en-us&qu=KB870669

--

Will Denny
MS-MVP Windows - Shell/User
Please reply to the News Groups


| Microsoft is releasing a configuration change for Windows
| XP, Windows 2000, and Windows Server 2003, to address
| recent malicious attacks against Internet Explorer, also
| know as Download.Ject.
|
| More information on KB870669 and links at:
|
| http://www.ramblingsofanxpjunkie.com/ramblings/2004/07/kb8
| 70669_new_cr.html
|
|
| Kind Regards
|
| Marc Liron
| Microsoft MVP
| http://www.updatexp.com

 

[Tom Pepper Willett]

Jerry Bryant released the information in many newsgroups Friday morning.
The link to the patch is:

http://www.microsoft.com/downloads/...48-c538-46f6-b7c8-2fbfd0d237e3&displaylang=en

Tom Pepper Willett
Microsoft MVP - FrontPage

| I'll wait:
|
|
http://search.microsoft.com/search/results.aspx?st=b&na=88&View=en-us&qu=KB870669
|
| --
|
| Will Denny
| MS-MVP Windows - Shell/User
| Please reply to the News Groups
|
|
| | | Microsoft is releasing a configuration change for Windows
| | XP, Windows 2000, and Windows Server 2003, to address
| | recent malicious attacks against Internet Explorer, also
| | know as Download.Ject.
| |
| | More information on KB870669 and links at:
| |
| | http://www.ramblingsofanxpjunkie.com/ramblings/2004/07/kb8
| | 70669_new_cr.html
| |
| |
| | Kind Regards
| |
| | Marc Liron
| | Microsoft MVP
| | http://www.updatexp.com
|

 

[Wesley Vogel]

Last Reviewed: 7/2/2004 (1.2)
How to disable the ADODB.Stream object from Internet Explorer
http://support.microsoft.com/default.aspx?scid=kb;[LN];870669

Search for a KB Article by ID Number
http://support.microsoft.com/default.aspx?scid=fh;[LN];kbjump

 

[Will Denny]

Hi Wes

I've heard nothing officially from MS. I'll wait until then!!

--

Will Denny
MS-MVP Windows - Shell/User
Please reply to the News Groups


| Last Reviewed: 7/2/2004 (1.2)
| How to disable the ADODB.Stream object from Internet Explorer
| http://support.microsoft.com/default.aspx?scid=kb;[LN];870669
|
| Search for a KB Article by ID Number
| http://support.microsoft.com/default.aspx?scid=fh;[LN];kbjump
|
| --
| Hope this helps. Let us know.
| Wes
|
| In | Will Denny <[email protected]> hunted and pecked:
| > I'll wait:
| >
| >
|
http://search.microsoft.com/search/results.aspx?st=b&na=88&View=en-us&qu=KB870669
| >
| > --
| >
| > Will Denny
| > MS-MVP Windows - Shell/User
| > Please reply to the News Groups
| >
| >
| > message | >> Microsoft is releasing a configuration change for Windows
| >> XP, Windows 2000, and Windows Server 2003, to address
| >> recent malicious attacks against Internet Explorer, also
| >> know as Download.Ject.
| >>
| >> More information on KB870669 and links at:
| >>
| >> http://www.ramblingsofanxpjunkie.com/ramblings/2004/07/kb8
| >> 70669_new_cr.html
| >>
| >>
| >> Kind Regards
| >>
| >> Marc Liron
| >> Microsoft MVP
| >> http://www.updatexp.com
|

 

[Tom Pepper Willett]

Will:

Jerry Bryant has posted all the info in the security newsgroups, both public
and private.

Tom Pepper Willett
Microsoft MVP - FrontPage

| Hi Wes
|
| I've heard nothing officially from MS. I'll wait until then!!
|
| --
|
| Will Denny
| MS-MVP Windows - Shell/User
| Please reply to the News Groups
|
|
| | | Last Reviewed: 7/2/2004 (1.2)
| | How to disable the ADODB.Stream object from Internet Explorer
| | http://support.microsoft.com/default.aspx?scid=kb;[LN];870669
| |
| | Search for a KB Article by ID Number
| | http://support.microsoft.com/default.aspx?scid=fh;[LN];kbjump
| |
| | --
| | Hope this helps. Let us know.
| | Wes
| |
| | In | | Will Denny <[email protected]> hunted and pecked:
| | > I'll wait:
| | >
| | >
| |
|
http://search.microsoft.com/search/results.aspx?st=b&na=88&View=en-us&qu=KB870669
| | >
| | > --
| | >
| | > Will Denny
| | > MS-MVP Windows - Shell/User
| | > Please reply to the News Groups
| | >
| | >
| | > message | | >> Microsoft is releasing a configuration change for Windows
| | >> XP, Windows 2000, and Windows Server 2003, to address
| | >> recent malicious attacks against Internet Explorer, also
| | >> know as Download.Ject.
| | >>
| | >> More information on KB870669 and links at:
| | >>
| | >> http://www.ramblingsofanxpjunkie.com/ramblings/2004/07/kb8
| | >> 70669_new_cr.html
| | >>
| | >>
| | >> Kind Regards
| | >>
| | >> Marc Liron
| | >> Microsoft MVP
| | >> http://www.updatexp.com
| |
|

 

[Bruce Chambers]

Greetings, Will --

Your caution is commendable, but the information Marc provided is
valid. (I do wish, though, that he had provided the direct links to
Microsoft's sites, rather than routing it through his own web site,
thereby causing some natural but unnecessary suspicions.)

Submitted for your perusal:

What You Should Know About Download.Ject
http://www.microsoft.com/security/incident/download_ject.mspx

870669 - How to disable the ADODB.Stream object from Internet Explorer
http://support.microsoft.com/default.aspx?kbid=870669

Critical Update for Microsoft Data Access Components - Disable
ADODB.Stream object from Internet Explorer
http://www.microsoft.com/downloads/...48-C538-46F6-B7C8-2FBFD0D237E3&DisplayLang=en



Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH

 

[Will Denny]

Thanks, Bruce. I probably should know who Jerry Byrant is...

--

Will Denny
MS-MVP Windows - Shell/User
Please reply to the News Groups


| Greetings, Will --
|
| Your caution is commendable, but the information Marc provided is
| valid. (I do wish, though, that he had provided the direct links to
| Microsoft's sites, rather than routing it through his own web site,
| thereby causing some natural but unnecessary suspicions.)
|
| Submitted for your perusal:
|
| What You Should Know About Download.Ject
| http://www.microsoft.com/security/incident/download_ject.mspx
|
| 870669 - How to disable the ADODB.Stream object from Internet Explorer
| http://support.microsoft.com/default.aspx?kbid=870669
|
| Critical Update for Microsoft Data Access Components - Disable
| ADODB.Stream object from Internet Explorer
|
http://www.microsoft.com/downloads/...48-C538-46F6-B7C8-2FBFD0D237E3&DisplayLang=en
|
|
|
| Bruce Chambers
| --
| Help us help you:
|
|
|
| You can have peace. Or you can have freedom. Don't ever count on
| having both at once. - RAH
|
|
| | > Hi Wes
| >
| > I've heard nothing officially from MS. I'll wait until then!!
| >
| > --
| >
| > Will Denny
| > MS-MVP Windows - Shell/User
| > Please reply to the News Groups
| >
| >
| > | > | Last Reviewed: 7/2/2004 (1.2)
| > | How to disable the ADODB.Stream object from Internet Explorer
| > | http://support.microsoft.com/default.aspx?scid=kb;[LN];870669
| > |
| > | Search for a KB Article by ID Number
| > | http://support.microsoft.com/default.aspx?scid=fh;[LN];kbjump
| > |
| > | --
| > | Hope this helps. Let us know.
| > | Wes
| > |
| > | In | > | Will Denny <[email protected]> hunted and pecked:
| > | > I'll wait:
| > | >
| > | >
| > |
| >
|
http://search.microsoft.com/search/results.aspx?st=b&na=88&View=en-us&qu=KB870669
| > | >
| > | > --
| > | >
| > | > Will Denny
| > | > MS-MVP Windows - Shell/User
| > | > Please reply to the News Groups
| > | >
| > | >
| > | > message | > | >> Microsoft is releasing a configuration change for Windows
| > | >> XP, Windows 2000, and Windows Server 2003, to address
| > | >> recent malicious attacks against Internet Explorer, also
| > | >> know as Download.Ject.
| > | >>
| > | >> More information on KB870669 and links at:
| > | >>
| > | >> http://www.ramblingsofanxpjunkie.com/ramblings/2004/07/kb8
| > | >> 70669_new_cr.html
| > | >>
| > | >>
| > | >> Kind Regards
| > | >>
| > | >> Marc Liron
| > | >> Microsoft MVP
| > | >> http://www.updatexp.com
| > |
| >
|
|

 

[Bruce Chambers]

Greetings --

Jerry's the Security MVP Lead.

Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH

 

[Joan Archer]

I had a newsletter from Microsoft this morning all about it, although it
doesn't show up as being a critical update for my system when scanning WU.
I see Bruce has posted links about it which I'll have to go read because I
accidently deleted the article <g>
Joan

 

[Tom Pepper Willett]

It's not going to be in WU.

| I had a newsletter from Microsoft this morning all about it, although it
| doesn't show up as being a critical update for my system when scanning WU.
| I see Bruce has posted links about it which I'll have to go read because I
| accidently deleted the article <g>
| Joan
|
| Will Denny wrote:
| > Hi Wes
| >
| > I've heard nothing officially from MS. I'll wait until then!!
| >
| >
|
|

 

[Will Denny]

Thanks Bruce.

--

Will Denny
MS-MVP Windows - Shell/User
Please reply to the News Groups


| Greetings --
|
| Jerry's the Security MVP Lead.
|
| Bruce Chambers
| --
| Help us help you:
|
|
|
| You can have peace. Or you can have freedom. Don't ever count on
| having both at once. - RAH
|
|
| | > Thanks, Bruce. I probably should know who Jerry Byrant is...
| >
| > --
| >
| > Will Denny
| > MS-MVP Windows - Shell/User
| > Please reply to the News Groups
| >
| >
|
|

 

[Will Denny]

It went into my 'read later' folder - which is why I've only just read it!!

--

Will Denny
MS-MVP Windows - Shell/User
Please reply to the News Groups


| I had a newsletter from Microsoft this morning all about it, although it
| doesn't show up as being a critical update for my system when scanning WU.
| I see Bruce has posted links about it which I'll have to go read because I
| accidently deleted the article <g>
| Joan
|
| Will Denny wrote:
| > Hi Wes
| >
| > I've heard nothing officially from MS. I'll wait until then!!
| >
| >
|
|

 

[bcb]

Hello,

I read article KB870669 applies to:

Microsoft Internet Explorer 5.01 SP3
Microsoft Internet Explorer 5.01 SP4
Microsoft Internet Explorer 6.0
Microsoft Internet Explorer 6.0 SP1

Win9x/ME can run IE5 or IE6 and no patch was released for those,so I suppose
Download.Ject doesn't affect those non NT Windows versions?

Thanks.

 

[Papa]

Thank you.

 

[Papa]

Look again, Will, by clicking on Windows Update. It's there.

 

[Papa]

It's there now.

 

[Tom Pepper Willett]

It's a fault in the Operating System, and Win 98 and ME are not affected.

Tom
| Hello,
|
| I read article KB870669 applies to:
|
| Microsoft Internet Explorer 5.01 SP3
| Microsoft Internet Explorer 5.01 SP4
| Microsoft Internet Explorer 6.0
| Microsoft Internet Explorer 6.0 SP1
|
| Win9x/ME can run IE5 or IE6 and no patch was released for those,so I
suppose
| Download.Ject doesn't affect those non NT Windows versions?
|
| Thanks.
|
| | > Microsoft is releasing a configuration change for Windows
| > XP, Windows 2000, and Windows Server 2003, to address
| > recent malicious attacks against Internet Explorer, also
| > know as Download.Ject.
| >
| > More information on KB870669 and links at:
| >
| > http://www.ramblingsofanxpjunkie.com/ramblings/2004/07/kb8
| > 70669_new_cr.html
| >
| >
| > Kind Regards
| >
| > Marc Liron
| > Microsoft MVP
| > http://www.updatexp.com
|
|

 

[Tom Pepper Willett]

Correct, Papa. Sorry, I meant to say "it's not going to be in WU until
later today".

Tom

| It's there now.
|
| | > It's not going to be in WU.
| >
| > | > | I had a newsletter from Microsoft this morning all about it, although
it
| > | doesn't show up as being a critical update for my system when scanning
| WU.
| > | I see Bruce has posted links about it which I'll have to go read
because
| I
| > | accidently deleted the article <g>
| > | Joan
| > |
| > | Will Denny wrote:
| > | > Hi Wes
| > | >
| > | > I've heard nothing officially from MS. I'll wait until then!!
| > | >
| > | >
| > |
| > |
| >
| >
|
|

 

[XS11E]

It's there now.

It won't show up if you have Service Pack 2, RC2 installed as it's
included in the Service Pack.