Security Patch Needed for IE 6 without SP1?

[probabilities]

I've looked through the bulletin for the IE6 Critical Security Patch
released on January 11, 2005 (Update 890175). But everything I see
refers IE6 Service Pack 1. I still have the original IE 6 release --
never installed SP 1.

Does this mean that the vulnerability doesn't apply in my case and/or
that I don't need to (or can't) apply the patch? I have Windows 98SE
(which means I wouldn't have the option to apply the patch yet, anyway
-- the 98 and ME versions haven't been released yet, as far as I can
tell.)

Thanks.

 

[PA Bear]

What does Windows Update have to say? Best to rely on Windows Update for
patches you need instead of picking & choosing ones you think you might
need.

MS05-001/890175 is not an Critical Security Patch for IE, it is a Windows
patch, and yes, it applies to Win98/Win98SE. MS05-001 is only available to
you via Windows Update:

<quote>
Are Windows 98, Windows 98 Second Edition, or Windows Millennium Edition
critically affected by the vulnerability that is addressed in this security
bulletin?

Yes. Windows 98, Windows 98 Second Edition, and Windows Millennium Edition
are critically affected by this vulnerability. A Critical security update
for these platforms is available and is provided as part of this security
bulletin and can be downloaded only from the Windows Update Web site.
</quote>
Source: http://www.microsoft.com/technet/security/bulletin/ms05-001.mspx
(FAQ)

While you're at Windows Update, install IE6 SP1 first (it's considered a
Critical Update for Win9x) and reboot, then return to Windows Update for
additional patches and updates you will then need.

 

[Frank Saunders, MS-MVP IE/OE]

I've looked through the bulletin for the IE6 Critical Security Patch
released on January 11, 2005 (Update 890175). But everything I see
refers IE6 Service Pack 1. I still have the original IE 6 release --
never installed SP 1.

Does this mean that the vulnerability doesn't apply in my case and/or
that I don't need to (or can't) apply the patch? I have Windows 98SE
(which means I wouldn't have the option to apply the patch yet, anyway
-- the 98 and ME versions haven't been released yet, as far as I can
tell.)

Thanks.

Go to Windows Update and update IE to SP1.
Or else go here:
http://www.microsoft.com/windows/ie
IE6 SP1 CD:
http://www.microsoft.com/windows/ie/ordercd/default.asp

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com./athome/security/protect/default.aspx