Parch for VM vuln. (MS03-011) on XPSP2???

O

Oliver Carr

I just built a Windows XP SP2 box from scratch:

- WinXP SP1a setup
- Applied SP2
- Installed Office 2003
- Updated XP via Windowsupdate
- Updated Office via Officeupdate
- Installed Sun JRE 1.4.2_05
- Ran windowsupdate again, and showed nothing left to
download.

I now run a scan using MBSA 1.2.1 and it tells me that
the msjava.dll present on the system (5.0.3805.0) is
vulnerable to a system compromise as discussed in MS03-
011.

Of course MS is no longer distributing its own Java VM
version via Windows Update and Microsoft Download, for
various legal reasons (which we don't need to get into).
But this still leaves me with a vulnerable component on
my XP machine (not to mention a massive red cross in
MBSA, which I can't get rid of).

Anyone got any bright ideas on this?

tia,

Oliver
 
G

Guest

Oliver Carr said:
I just built a Windows XP SP2 box from scratch:

- WinXP SP1a setup
- Applied SP2
- Installed Office 2003
- Updated XP via Windowsupdate
- Updated Office via Officeupdate
- Installed Sun JRE 1.4.2_05
- Ran windowsupdate again, and showed nothing left to
download.

I now run a scan using MBSA 1.2.1 and it tells me that
the msjava.dll present on the system (5.0.3805.0) is
vulnerable to a system compromise as discussed in MS03-
011.

Of course MS is no longer distributing its own Java VM
version via Windows Update and Microsoft Download, for
various legal reasons (which we don't need to get into).
But this still leaves me with a vulnerable component on
my XP machine (not to mention a massive red cross in
MBSA, which I can't get rid of).

Anyone got any bright ideas on this?

tia,

Oliver
Click to expand...
you can download build 3810 which was the last one from M/S here
http://home.wanadoo.nl/jheroen/VM/index.htm
 
G

Guest

Bruce,

MS03-011 says the following:

• The patch is available to update existing Microsoft VMs via the Windows
Update web site.

But MS is no longer distributing this package via WU... See the problem?
Isn't there an "official" resolution to this issue?

Oliver
 
G

Guest

MAP,

thanks for that. That'll help me for the moment.

I however can't believe that MS isn't able to provide a resolution to this
issue themselves at the moment.

Oliver
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

MS03-011 Bulletin 3

Top