[CharlesF]

the xt guy, on 01 April 2010 - 05:46 AM, said:

This must be a critical fix for them to release it outside the normal cycle and not wait until patch Tuesday of April 2010.

More details on their blog:

Today we released MS10-018 out-of-band due to increases in attacks against Internet Explorer 6 and Internet Explorer 7 using the vulnerability discussed in Security Advisory 981374.
...was originally going to be released during the normal update cycle on the 13th of April. The Internet Explorer team accelerated testing of this update due to the growing attacks against the publicly disclosed vulnerability (CVE-2010-0806)
...and provides users of all versions of Internet Explorer protection against nine other vulnerabilities.

[wsxedcrfv]

Regarding MS10-018...

Apparently, some people make use of the key-combination "Control - Enter" in IE6. This seems to perform a URL auto-complete function - eg: enter "google" into your IE6 address bar and press the control-enter key combination. A "www." and ".com" will be added to "google" so that your address bar will now have "www.google.com". I can confirm that this indeed does happen on a non-patched win-98 system, both in IE6 and FireFox 2.0.0.20. I have seen one report where this control-enter function no longer works when this IE rollup is performed on win-98. No idea if it's this particular IE6 update that breaks this functionality, or some previous one.

[CharlesF]

wsxedcrfv, on 02 April 2010 - 12:38 PM, said:

I have seen one report where this control-enter function no longer works when this IE rollup is performed on win-98.

Just tried it in Win 98 SE, with either IE6 SP1 fully patched including MS10-018, Maxthon and last Opera.

Ctrl+Enter is working like a charm with the 3 browsers.

[Dave-H]

Slightly off-topic, but I thought that anyone subscribed to this thread might be interested to know that the files from the just issued KB978542 security patch for Outlook Express SP3 on Windows 2000 seem to work fine on Windows 98SE.

Get it here -
http://www.microsoft...&displaylang=en

[Prozactive]

Dave-H, on 12 May 2010 - 05:08 PM, said:

Slightly off-topic, but I thought that anyone subscribed to this thread might be interested to know that the files from the just issued KB978542 security patch for Outlook Express SP3 on Windows 2000 seem to work fine on Windows 98SE.

Get it here -
http://www.microsoft...&displaylang=en

Thanks Dave-H. I was wondering about that. I updated the 17 files from KB978542 (excluding iecustom.dll) and Outlook Express 6.0 seems to work fine.

This post has been edited by Prozactive: 14 May 2010 - 08:30 AM

[lightning slinger]

OE Cumulative Security Update KB978542 included in MDIE6CU3.3 released today. 

See his thread for further details.

[Dave-H]

lightning slinger, on 14 May 2010 - 01:05 PM, said:

OE Cumulative Security Update KB978542 included in MDIE6CU3.3 released today. 

See his thread for further details.

Thanks, that's good to know.
It must be OK in that case!

It's here BTW.

This post has been edited by Dave-H: 14 May 2010 - 03:11 PM

[halohalo]

Dave-H, on 12 May 2010 - 05:08 PM, said:

Slightly off-topic, but I thought that anyone subscribed to this thread might be interested to know that the files from the just issued KB978542 security patch for Outlook Express SP3 on Windows 2000 seem to work fine on Windows 98SE.

The patch of OE6 SP1 on 2000 works on 98se.

Besides, blackwingcat released OE6 SP3 for 2000, and it works on 98se.
http://www.msfn.org/...post__p__923602

This post has been edited by halohalo: 15 May 2010 - 11:27 AM

[Dave-H]

Prozactive, on 14 May 2010 - 08:17 AM, said:

I updated the 17 files from KB978542 (excluding iecustom.dll) and Outlook Express 6.0 seems to work fine.

I did replace iecustom.dll on my Windows 98 system with the new version and it seemed to have no ill effects.
I assume that MD's patch does that too.

[lightning slinger]

Dave-H, on 15 May 2010 - 06:02 AM, said:

Prozactive, on 14 May 2010 - 08:17 AM, said:

I updated the 17 files from KB978542 (excluding iecustom.dll) and Outlook Express 6.0 seems to work fine.

I did replace iecustom.dll on my Windows 98 system with the new version and it seemed to have no ill effects.
I assume that MD's patch does that too.

No it doesn't include iecustom.dll. 


Having said that I don't have that at all, in what directory do you have iecustom.dll?

[Prozactive]

I didn't replace iecustom.dll because it didn't exist on my system. It's apparently associated with IE 7 from what I've been able to find.

[Dave-H]

Ah, my apologies!
I thought I had patched that file, but when I checked it's only on my XP installation. I think I was confusing it with inetcomm.dll!


iecustom.dll seems to be some sort of setup file, related to IE8 in my case, although an IE6 version of it does seem to be included in the MS patch.
It's almost certainly a file used just by the patch installation process as it isn't actually referenced in the inf file for the patch.

Sorry for the confusion!

[CharlesF]

Hi,

* Last update for OE6SP1 (17 files) running just fine here also: MS10-030 (KB978542).

* There were an update for IE6SP1 - Windows 2000 SP4: MS10-035 (KB982381) on June 16, 2010 working fine.
Download here.

* and a Cumulative update for ActiveX Killbits - Windows 2000 SP4: MS10-034 (KB980195)
from where I made a reg file with the 204 killbits.
Download here.

Enjoy.

[lightning slinger]

KB982381 and KB980195 are in the updated MDIE6CU3.4

Quote

What's new:
uninstall Cumulative Security Update fix
add:
*931125 - Last Windows Roots Update
*980195 - Unofficial ActiveX Kill Bits (AKB) Security Vulnerability Fix
*982381 - Unofficial Internet Explorer Cumulative Security Update

See the MD thread for download details.

[Dave-H]

With the release of IE cumulative update KB2183461, which is available for IE6 under Windows XP here, is it likely that its files will work on Windows 98 IE6 SP1?
Is it only for IE6 SP2? It doesn't actually say that.
Now that support for Windows 2000 has ended, I assumed that support for IE6 SP1 had also ended.

[dencorso]

It *is* for IE6SP2 and up only. The reason that that is not spelt up is that MS considers IE6SP2 the only valid IE6, for some time already. When they meant IE6SP1, they've always said it in full. It's over. I'm sorry!

[MDGx]

The MS page says that the update is intended for Windows XP SP3.
That implies that it is meant only for MS IE 6.0 SP3 installed by XP SP3 service pack.

Because all other older SPs have been phased out, MS doesn't make fixes for those XP editions anymore.

And BTW, files included in SP3 fixes are not compatible with MS IE 6.0 SP1 [98/98SE/ME/2000/XP RTM/XP SP1/XP SP1a/2003 RTM] or MS IE 6.0 SP2 [XP SP2].

HTH

[Dave-H]

Thanks Den and MD.
I thought that was probably the case.
I'd better closely guard the copy of KB982381 I saved, just in case it's removed in the future.
I assume this contains the very last files for IE6 SP1, and therefore for Windows 98 (and 2000).

[dencorso]

Is anybody feeling adventurous enough to try WildBill's unofficial KB2360131 files on Win9x/ME?
If they work, and I bet they will, it's the way to keep more up-to-date...
I intend to do so myself, but I won't be able to do so right away.

[Dave-H]

dencorso, on 13 November 2010 - 10:41 PM, said:

Is anybody feeling adventurous enough to try WildBill's unofficial KB2360131 files on Win9x/ME?
If they work, and I bet they will, it's the way to keep more up-to-date...
I intend to do so myself, but I won't be able to do so right away.

Working fine here on 98SE!


There seem to be only four files in this update -

BROWSEUI.DLL
MSHTML.DLL
MSHTMLED.DLL
SHDOCVW.DLL

They are all later versions than those found in KB982381, except for MSHTMLED.DLL.

That file was never included in any of the IE6 SP1 Cumulative Updates that I hacked over to Windows 98 from Windows 2000 before support was ended.

Also, the version I already had is dated 24th March 2005, and is version 6.0.2800.1501.
The "new" version is dated 31st October 2010, but is version 6.0.2800.1107, which appears to be an earlier version of the file!

I am puzzled.......