Jump to content

Welcome to MSFN Forum
Register now to gain access to all of our features. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more. This message will be removed once you have signed in.
Login to Account Create an Account



Photo

Hotfixes For Windows XP Professional SP1

- - - - -

  • This topic is locked This topic is locked
834 replies to this topic

#1
Aaron

Aaron

    The MSFN Banana

  • Patrons
  • 5,767 posts
  • Joined 17-August 01
  • OS:Windows 7 x64
  • Country: Country Flag
This is a list of all the critical hotfixes you need for Windows XP Professional SP1 32-bit. Recommended Updates are excluded from this list as they are not always needed for every system, whereas the Critical Updates should be installed for every system. This list will be updated regularly and old ones removed when a newer hotfix supersedes it.

Looking for the Office 2003 Updates list? Click here

--------------------------------------------------
Type 1 Hotfixes (Switches to use: Click here)

Q819696 (23rd July 2003)
Unchecked Buffer in DirectX Could Enable System Compromise
Download - 800KB
Note: This is for DirectX 8.1 on Windows XP, you do not have to download/install this if you plan to install DirectX 9.0c.

Q823182 (14th October 2003)
Vulnerability in Authenticode Verification Could Allow Remote Code Execution
Download - 424 KB

Q824105 (3rd September 2003)
Flaw in NetBIOS Could Lead to Information Disclosure
Download - 339 KB

Q824141 (29th September 2003)
Buffer Overrun in the ListBox and in the ComboBox Control Could Allow Code Execution
Download - 2.12 MB

Q825119 (14th September 2003)
Buffer Overrun in Windows Help and Support Center Could Lead to System Compromise
Download - 299 KB

Q826939 (14th September 2003)
Update Rollup 1 for Windows XP
Download - 9 MB

Q828026 (10th February 2004)
Update for Windows Media Player URL Script Command Behavior
Download - 2.77 MB

Q828035 (29th October 2003)
Buffer Overrun in Messenger Service Could Allow Code Execution
Download - 358 KB

Q828741 (12th April 2004)
Cumulative Update for Microsoft RPC/DCOM
Download - 3.2 MB

Q833987 (14th September 2004)
Buffer overrun in JPEG processing (GDI+) could allow code execution
Download - 1389KB

Q835732 (12th April 2004)
Security Update for Microsoft Windows
Download - 2.6 MB

Q837001 (12th April 2004)
Vulnerability in the Microsoft Jet Database Engine Could Allow Code Execution
Download - 2.9 MB

Q839645 (13th July 2004)
Vulnerability in Windows Shell Could Allow Remote Code Execution
Download - 3.81 MB

Q840315 (13th July 2004)
Vulnerability in HTML Help Could Allow Code Execution
Download - 375 KB

Q840374 (11th May 2004)
Vulnerability in Help and Support Center Could Allow Remote Code Execution
Download - 854 KB

Q841873 (13th July 2004)
Vulnerability in Task Scheduler Could Allow Code Execution
Download - 882 KB

Q842773 (13th July 2004)
Update for Background Intelligent Transfer Service (BITS) 2.0 and WinHTTP 5.1
Download - 635 KB

Q883357 (13th August 2004)
Your backup program may fail or incorrectly exclude some files from your backup in Windows XP
Download - 320KB

--------------------------------------------------
Type 2 Hotfixes (Switches to use: /Q:A /R:N)

Q814078 Also known as JS56NEN.exe (19th March 2003)
Flaw in Windows Script Engine May Allow Code to Run
Download - 361 KB

Q816093
Flaw in the Microsoft VM Could Enable System Compromise
WindowsUpdate Corporate (Search for 816093)
Note: This is the MSJava 3810 Update, only download if you use SP1 and not SP1a. - 5.07 MB

Q823353 (13th July 2004)
Cumulative Security Update for Outlook Express (July 2004)
Download 1.90 MB

Q867801 (30th July 2004) *NEW*
Cumulative Security Update for Internet Explorer 6 SP1
Download - 2.77 MB

Q870669 (2nd July 2004)
Critical Update for Microsoft Data Access Components - Disable ADODB.Stream object from Internet Explorer
Download 104 KB

--------------------------------------------------
MDAC - Requires different switch. Do not use this syntax directly in svcpack.inf. You can create a batch file to call out that syntax from svcpack.inf, or do it from GuiRunOnce:

As outlined in the Technet article, install using:
xxx_Q832483_MDAC_X86.EXE /C:"dahotfix.exe /q /n" /q
where xxx is your language version.

Q832483 (13th January 2004)
Buffer overrun in an MDAC function could allow code execution
Download - 1.99 MB

--------------------------------------------------
NOT SVCPACK.INF SUPPORTED - Anything shown below must not be processed by svcpack. Instead, these should be installed on first logon to process silent unattended installations of these updates.

Q817787 (Switch: /Q:A /R:N) (6th May 2003)
Flaw in Windows Media Player Skins Downloading Could Allow Code Execution
Download - 360 KB
Note: This is for Windows Media Player 8 on Windows XP, you do not have to install this if you plan to install Windows Media Player 9.

Q817778 (Switch: Same as "type 1" switches) (23rd July 2003)
Advanced Networking Pack for Windows XP - 1.21 MB

--------------------------------------------------
Extras (Switches to use: varies)

These files can also be installed using svcpack.inf:

DirectX 9.0c redist (Extract, and use /silent on dxsetup.exe) *NEW*

WMP9 and MM2 Bundle (no switch needed)
Tip: Make sure Q828026 is queued up after WMP9 in svcpack.inf.

--------------------------------------------------
Updates

21st September 2004 - 2 new Type 1 updates added (833987 and 883357), both can be installed via svcpack.inf.

30th July 2004 - New Cumulative update for Internet Explorer released (867801), this replaces the last cumulative update (832894) and all the ones before that. We stress that you remove all old IE cumulative updates from svcpack.inf to avoid issues.

27th July 2004 - DirectX 9.0c is released, and is listed under Extras. The switch /silent can be used on dxsetup.exe. The DirectX 9.0b Security Update (Q839643) has been removed from the list, this is superceded by DirectX 9.0c which contains all past fixes, so you can remove this from your svcpack.inf file.

13th July 2004 - Good news, all 5 updates marked *NEW* (4 in Type1, and 1 in Type2) can be installed via svcpack.inf without any difficulty. Remove Q837009.exe from both svcpack.inf and your svcpack folder as this is superseded by the newer OE Update.

2nd July 2004 - New Critical Update workaround for Internet Explorer to protect against the Download.Ject exploit. KB870669 under Type 2 Hotfixes. I haven't had time to test this thoroughly, but install this after any MDAC patches you plan to install.

13th June 2004 - DirectX update added Q839643, make sure you download the correct hotfix by reading the notes in brackets in this list.

11th May 2004 - 1 new Windows XP Update today: Q840374 - Vulnerability in Help and Support Center Could Allow Remote Code Execution. You may also want to re-download Q837001, as it's been re-released.

Edited by Alanoll, 26 September 2004 - 03:00 PM.



How to remove advertisement from MSFN

#2
TheMYsterio

TheMYsterio

    Newbie

  • Member
  • 13 posts
  • Joined 06-August 03
Thanks m8

#3
b0r3d

b0r3d

    Friend of MSFN

  • Member
  • PipPipPipPipPip
  • 821 posts
  • Joined 03-August 03
Thanks AaronXP.
This is a fantastic timesaver.
Just make sure to keep it updated :)
Remember, you can wear your underpants four times without washing.
Forwards. Backwards. Inside out forwards, and inside out backwards.

#4
Drewdatrip

Drewdatrip

    MSFN Junkie

  • Patrons
  • 2,185 posts
  • Joined 14-October 01
What adding a known and working batch cmd to install these files properly?
My last install dident go so well!
:)

|Drew|
||Please Read the Forum Rules||
||Free File and Image Hosting @ EazyShare||
||Donate to MSFN and Help Keep This Site Running||
||Vote for MSFN @ TweakXP Windows XP Top Sites||

#5
swgreed

swgreed

    Unofficial Service Pack & Codec Pack maintainer

  • Member
  • PipPipPip
  • 454 posts
  • Joined 18-August 03
you don't need Q329170 when you install Q817606 (both update the srv.sys, but Q817606 is newer)

you don't need Q810577 when you install Q816073 (not listed here)



you may also want to add Q818857 (IE 6 Patch) - Slow Performance When You Use Internet Explorer 6 SP1 to View MIME Type File Attachments

see http://support.micro...spx?kbid=818857

download http://download.micr...705/q818857.exe (english only)

#6
DaveXP

DaveXP

    The One

  • Member
  • PipPipPipPipPipPip
  • 1,295 posts
  • Joined 15-July 03
I get some message about "Illgel DLL Relocation in user32.dll cause by shell32.dll" when use some of these hotfixes

#7
Aaron

Aaron

    The MSFN Banana

  • Patrons
  • 5,767 posts
  • Joined 17-August 01
  • OS:Windows 7 x64
  • Country: Country Flag

you don't need Q329170 when you install Q817606 (both update the srv.sys, but Q817606 is newer)

According to the Knowledge Base article Q817606, it says the following:

Patch Replacement Information
This patch does not replace any other patches.

you don't need Q810577 when you install Q816073 (not listed here)

816073 isn't downloadable :/

you may also want to add Q818857 (IE 6 Patch) - Slow Performance When You Use Internet Explorer 6 SP1 to View MIME Type File Attachments

see http://support.micro...spx?kbid=818857


The urlmon.dll file (6.0.2800.1226) in the August 2003 Cumulative IE6SP1 patch supercedes the version of urlmon.dll (6.0.2800.1216) in the IE6SP1 update released yesterday. I don't know what prompted Microsoft to release this, but this cannot be installed if the August Cumulative patch is installed.

This hotfix list was created from a normal install of XP SP1 I ran yesterday, viewed on WindowsUpdate

#8
swgreed

swgreed

    Unofficial Service Pack & Codec Pack maintainer

  • Member
  • PipPipPip
  • 454 posts
  • Joined 18-August 03

816073 isn't downloadable :/

get it at w2s

#9
Aaron

Aaron

    The MSFN Banana

  • Patrons
  • 5,767 posts
  • Joined 17-August 01
  • OS:Windows 7 x64
  • Country: Country Flag

816073 isn't downloadable :/

get it at w2s

I could, but I won't. Other people can if they want, but this patch does need to go though additional internal testing before Microsoft choose to make it available to download officially. Non-official patches won't be added to the main list.

#10
swgreed

swgreed

    Unofficial Service Pack & Codec Pack maintainer

  • Member
  • PipPipPip
  • 454 posts
  • Joined 18-August 03
ok, sorry....

#11
Aaron

Aaron

    The MSFN Banana

  • Patrons
  • 5,767 posts
  • Joined 17-August 01
  • OS:Windows 7 x64
  • Country: Country Flag
But thanks for your help though swgreed! :)

#12
Sunil

Sunil

    Senior Member

  • Member
  • PipPipPipPip
  • 596 posts
  • Joined 24-June 03
Hey Guys, are there any sites available out there that i can download all the patches for windows Xp in one giant file.

#13
Aaron

Aaron

    The MSFN Banana

  • Patrons
  • 5,767 posts
  • Joined 17-August 01
  • OS:Windows 7 x64
  • Country: Country Flag
Yes, One of Keyser Soze's package has all the hotfixes which he released about a month ago. And another one at techconnect.

http://www.MSFN.org/...nts.php?id=4314

#14
Sunil

Sunil

    Senior Member

  • Member
  • PipPipPipPip
  • 596 posts
  • Joined 24-June 03
Kool, thanks AaronXP

#15
kenneth11zz

kenneth11zz

    Member

  • Member
  • PipPip
  • 108 posts
  • Joined 08-September 03
Quick question. This is my first time installing hotfixes using the unattended installation for a clean installation. In the past, I have installed hoftixes on an existed Windows XP using Windows Updates that creates so many Uninstalls in the Remove and Install Program list. Will this also do the same that adds Uninstalls into the Remove and Install Program list which I hated it?

-Kenneth

#16
DaveXP

DaveXP

    The One

  • Member
  • PipPipPipPipPipPip
  • 1,295 posts
  • Joined 15-July 03
Yes it will if you use the windows update method or the batch file method but if you slipstream them i am not sure about that.

#17
Aaron

Aaron

    The MSFN Banana

  • Patrons
  • 5,767 posts
  • Joined 17-August 01
  • OS:Windows 7 x64
  • Country: Country Flag
One of the switches used makes a backup and creates uninstall information in Add/Remove. To prevent this, do not use the /n switch

#18
Mike500

Mike500

    Junior

  • Member
  • Pip
  • 87 posts
  • Joined 03-August 03
At least on a german XP installation, "/u /q /z /n" doesn't create uninstall entries.

#19
hevnbnd

hevnbnd

    Member

  • Member
  • PipPip
  • 268 posts
  • Joined 06-September 03
Here is a new one for hotfixes1

Q323255: Security Update (Windows XP) - (Posted Date: September 16, 2003)

#20
swgreed

swgreed

    Unofficial Service Pack & Codec Pack maintainer

  • Member
  • PipPipPip
  • 454 posts
  • Joined 18-August 03
this one's not new since the files the patch contains are from 2002

Q811630 contains the same files, but with a newer revision number...
see http://support.micro...om/?kbid=811630

DL@ http://www.microsoft...&DisplayLang=en

#21
Mike500

Mike500

    Junior

  • Member
  • Pip
  • 87 posts
  • Joined 03-August 03
Q331953 can be removed from this list. Although not stated in the Knowledge Base Article, it's superceded by the listed Q824146, which includes the same files, but in newer versions.

#22
Sunil

Sunil

    Senior Member

  • Member
  • PipPipPipPip
  • 596 posts
  • Joined 24-June 03
Guys, is there any program/how to out there that will explain the procedure on how to integrate the updates into the windows cd, WINCDMAN does this but i would lik eto know how it does it

#23
royalbox

royalbox

    Junior

  • Member
  • Pip
  • 97 posts
  • Joined 12-August 03
@Sunil
I posted a script to intergrate hotfixes some time ago here (page 3 onwards). It works on the hotfixes with the 'plain' white icon. This has now become known as webmedics hotfix script if you want to search for it. Why webmedics script? Well, he edited it by adding support for the other type of hotfixes with the picture icon. He put it in a new topic and made a download of it.

I've improved my original quite a bit since but want to be very sure about the type 2 and 3 hotfixes that need to be done slightly differently before posting it.

Anyway, here's the link to the microsoft guide I used. I hope it helps.

#24
Aaron

Aaron

    The MSFN Banana

  • Patrons
  • 5,767 posts
  • Joined 17-August 01
  • OS:Windows 7 x64
  • Country: Country Flag
22nd September - Q323255 and Q823559 added to main list, don't know how I could have missed those out!

#25
Mike500

Mike500

    Junior

  • Member
  • Pip
  • 87 posts
  • Joined 03-August 03

22nd September - Q323255 and Q823559 added to main list, don't know how I could have missed those out!

Hmm, 323255? Hm, i don't think it displayed in the online WindowsUpdate when i ran it on a virgin install. How did you find it?

Also, a new patch to be added to the list: http://support.micro...om/?kbid=822603

This also appears on Windows Update. :)




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users