SUMMARY
Microsoft has released Update Rollup 1 for Microsoft Windows XP. An update rollup is a cumulative set of hotfixes, security patches, critical updates, and updates that are packaged together for easy deployment. Update Rollup 1 for Windows XP is a single package that includes many previously released critical updates for Windows XP. For additional information about the critical updates that are included in this update rollup, click the following article numbers to view the articles in the Microsoft Knowledge Base:
810565 Hyperlinks Open in Internet Explorer Instead of in Default Browser or Help and Support Center
821557 MS03-027: An Unchecked Buffer in the Windows Shell Could Permit Your System to Be Compromised
811493 MS03-013: Buffer Overrun in Windows Kernel Message Handling Could Lead to Elevated Privileges
328310 MS02-071: Flaw in Windows WM_TIMER Message Handling Can Enable Privilege Elevation
823980 MS03-026: Buffer Overrun in RPC May Allow Code Execution
331953 MS03-010: Flaw in RPC Endpoint Mapper Could Allow Denial of Service Attacks
323255 MS02-055: Unchecked Buffer in Windows Help Facility May Allow Attacker to Run Code
810577 MS03-005: Unchecked Buffer in Windows Redirector May Permit Privilege Elevation
815021 MS03-007: Unchecked Buffer in Windows Component May Cause Web Server Compromise
329115 MS02-050: Certificate Validation Flaw Might Permit Identity Spoofing
329170 MS02-070: Flaw in SMB Signing May Permit Group Policy to Be Modified
817606 MS03-024: Buffer Overrun in Windows Could Lead to Data Corruption
814033 Cannot Install Driver Updates from the Windows Update Web Site
810833 MS03-001: Unchecked Buffer in the Locator Service Might Permit Code to Run
823559 MS03-023: Buffer Overrun in the HTML Converter Could Allow Code Execution
329048 MS02-054: Unchecked Buffer in File Decompression Functions May Allow Attacker to Run Code
329441 You Cannot Create a Network Connection After You Restore Windows XP
817287 Windows Update 643 Error and the Catalog Database
329390 MS02-072: Unchecked Buffer in Windows Shell Might Permit System Compromise
329834 MS02-063: Unchecked Buffer in PPTP Implementation May Permit Denial-of-Service Attacks
811630 HTML Help Update to Limit Functionality When It Is Invoked with the window.showHelp Method
824146 MS03-039: A Buffer Overrun in RPCSS May Allow Code Execution
Note Update Rollup 1 for Windows XP is not available for 64-bit versions of Windows XP.
MORE INFORMATION
Download Information
To download and to install the express-installation version of this update rollup (2.7megabytes), visit the following Microsoft Windows Update Web site, and then install critical update 826939:
http://windowsupdate.microsoft.com
Notes
Administrators can download the standard version of this update rollup (8.96 megabytes) to deploy to multiple Windows XP-based or Windows XP SP1-based computers. The standard package is available from the Microsoft Download Center, from the Microsoft Windows Update Catalog, or by using SUS. To download the standard package from the Windows Update Catalog, search for this article ID number by using the Advanced Search Options feature in the Windows Update Catalog. For additional information about how to download updates from the Windows Update Catalog, click the following article number to view the article in the Microsoft Knowledge Base:
323166 HOW TO: Download Windows Updates and Drivers from the Windows Update Catalog
The following file is available for download from the Microsoft Download Center:
Download the 826939 package now.
Release Date: October 15, 2003
For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to Obtain Microsoft Support Files from Online Services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.
Notes
- SUS administrators can deploy the standard version of this update rollup by using Automatic Updates.
- You can install this update rollup on Windows XP-based computers without SP1, but Microsoft recommends that you also install SP1 and any other critical updates and security patches that are not included in this update rollup. Installing SP1 and any other critical updates and security patches that are not included in this update rollup installs the latest security and reliability updates for Windows XP. For additional information about how to obtain SP1, click the following article number to view the article in the Microsoft Knowledge Base:
322389 How to Obtain the Latest Windows XP Service Pack
For additional information about how to keep your Windows XP-based computer current, click the following article number to view the article in the Microsoft Knowledge Base:
311047 HOW TO: Keep Your Windows Computer Up-to-Date
Prerequisites
The express-installation version of this update rollup requires Windows XP SP1. The standard version of this update rollup requires the released version of Windows XP or Windows XP SP1. For additional information about how to obtain SP1, click the following article number to view the article in the Microsoft Knowledge Base:
322389 How to Obtain the Latest Windows XP Service Pack
Installation Information
The standard version of this update rollup supports the following Setup switches:
- /?: Show the list of installation switches.
- /u: Use Unattended mode.
- /f: Force other programs to quit when the computer shuts down.
- /n: Do not back up files for removal.
- /o: Overwrite OEM files without prompting.
- /z: Do not restart when the installation is complete.
- /q: Use Quiet mode (no user interaction).
- /l: List the installed hotfixes.
- /x: Extract the files without running Setup.
To verify that the update rollup is installed, use the Qfecheck.exe tool or use the Microsoft Baseline Security Analyzer (MBSA) tool. For additional information about the Qfecheck.exe tool, click the following article number to view the article in the Microsoft Knowledge Base:
282784 Qfecheck.exe Verifies the Installation of Windows 2000 and Windows XP Hotfixes
For additional information about the MBSA tool, click the following article number to view the article in the Microsoft Knowledge Base:
320454 Microsoft Baseline Security Analyzer Version 1.1.1 Is Available
You may also be able to verify that this update rollup is installed by confirming that one of the following registry keys exists.
Windows XP SP1:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP2\826939
Windows XP:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP1\826939
Note When you install this update rollup, any existing entries in the Add or Remove Programs tool are removed for the critical updates that are included in this update rollup. Therefore, some tools may report that some of the included critical updates are not installed. For example, Marimba Software Change-Management solutions use the registry entries for the Add or Remove Programs tool that are associated with each critical update to confirm that the update is installed. Therefore, Marimba Software Change-Management solutions will incorrectly report that you are missing the individual critical updates that are included in this update rollup.
Deployment Information
To install the update rollup without any user intervention, use the following command:
windowsxp-kb826939-x86-enu.exe -u -q
To install the update rollup without forcing the computer to restart, use the following command:
windowsxp-kb826939-x86-enu.exe -z
Note You can combine these switches in one command line.
For information about how to deploy this update rollup by using Software Update Services (SUS), visit the following Microsoft Web site:
http://www.microsoft.com/windows2000/windowsupdate/sus/susoverview.asp
Restart Requirement
You must restart your computer after you apply this update rollup.
Removal Information
To remove this update rollup, use the Add or Remove Programs tool in Control Panel to remove 826939. Note When you install this update rollup, any existing entries for the Add or Remove Programs tool are removed for the critical updates that are included in this update rollup. When you remove this update rollup, the previous entries for the Add or Remove Programs tool for the individual critical updates that are included in this update rollup are restored.
System administrators can use the Spuninst.exe utility to remove this update rollup. Spuninst.exe is located in the %Windir%\$NTUninstallKB826939$\Spuninst folder. The utility supports the following Setup switches:
- /?: Show the list of installation switches.
- /u: Use Unattended mode.
- /f: Force other programs to quit when the computer shuts down.
- /z: Do not restart when the installation is complete.
- /q: Use Quiet mode (no user interaction).
Security Patch Replacement Information
This update rollup does not replace any other security patches.
File Information
The English version of this update rollup has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.
Date Time Version Size File name
-------------------------------------------------------------------------
23-Sep-2002 22:10 5.131.2600.1123 544,256 Crypt32.dll (pre-SP1)
09-Nov-2002 12:47 5.2.3644.0 10,752 Hh.exe (pre-SP1)
20-Dec-2002 01:35 5.2.3735.0 516,192 Hhctrl.ocx (pre-SP1)
13-Jan-2003 17:27 5.2.3644.0 37,888 Hhsetup.dll (pre-SP1)
27-Jun-2003 19:38 2003.1100.5426.0 311,864 Html32.cnv (pre-SP1)
13-Jan-2003 17:27 5.2.3644.0 143,872 Itircl.dll (pre-SP1)
13-Jan-2003 17:27 5.2.3644.0 122,368 Itss.dll (pre-SP1)
04-Dec-2002 01:55 5.1.2600.108 68,608 Locator.exe (pre-SP1)
18-Nov-2002 18:17 5.1.2600.106 391,936 Mrxsmb.sys (pre-SP1)
27-Jun-2003 19:38 2003.1100.5426.0 116,288 Msconv97.dll (pre-SP1)
31-Jan-2003 19:20 5.1.2600.109 238,080 Newdev.dll (pre-SP1)
02-May-2003 18:03 5.1.2600.114 651,264 Ntdll.dll (pre-SP1)
13-Dec-2002 01:08 5.1.2600.108 1,848,320 Ntkrnlmp.exe (pre-SP1)
13-Dec-2002 01:09 5.1.2600.108 1,902,080 Ntkrnlpa.exe (pre-SP1)
13-Dec-2002 01:09 5.1.2600.108 1,874,944 Ntkrpamp.exe (pre-SP1)
13-Dec-2002 01:08 5.1.2600.108 1,879,936 Ntoskrnl.exe (pre-SP1)
25-Aug-2003 22:29 5.1.2600.118 1,093,632 Ole32.dll (pre-SP1)
02-Oct-2002 01:43 5.1.2600.101 46,208 Raspptp.sys (pre-SP1)
25-Aug-2003 22:29 5.1.2600.109 439,296 Rpcrt4.dll (pre-SP1)
25-Aug-2003 22:29 5.1.2600.118 204,288 Rpcss.dll (pre-SP1)
11-Jun-2003 20:53 6.0.2600.115 8,223,744 Shell32.dll (pre-SP1)
19-Sep-2002 18:27 6.0.2600.101 126,464 Shmedia.dll (pre-SP1)
14-Nov-2002 19:42 5.1.2600.101 218,624 Srrstr.dll (pre-SP1)
28-Mar-2003 22:02 5.1.2600.112 322,304 Srv.sys (pre-SP1)
08-Oct-2002 22:19 1,053,822 Sysmain.sdb (pre-SP1)
22-Nov-2002 19:16 5.1.2600.104 528,896 User32.dll (pre-SP1)
22-Oct-2002 00:45 5.1.2600.104 1,671,168 Win32k.sys (pre-SP1)
22-Nov-2002 19:16 5.1.2600.104 272,384 Winsrv.dll (pre-SP1)
25-Sep-2002 19:21 6.0.2600.101 316,928 Zipfldr.dll (pre-SP1)
20-Nov-2002 18:50 5.1.2600.1143 179,200 Accwiz.exe (with SP1)
23-Sep-2002 22:10 5.131.2600.1123 544,256 Crypt32.dll (with SP1)
26-Mar-2003 00:40 5.1.2600.1190 53,760 Cryptsvc.dll (with SP1)
09-Nov-2002 12:47 5.2.3644.0 10,752 Hh.exe (with SP1)
20-Dec-2002 01:35 5.2.3735.0 516,192 Hhctrl.ocx (with SP1)
10-Jan-2003 21:43 5.2.3644.0 37,888 Hhsetup.dll (with SP1)
27-Jun-2003 19:38 2003.1100.5426.0 311,864 Html32.cnv (with SP1)
10-Jan-2003 21:43 5.2.3644.0 143,872 Itircl.dll (with SP1)
10-Jan-2003 21:43 5.2.3644.0 122,368 Itss.dll (with SP1)
04-Dec-2002 01:50 5.1.2600.1147 68,608 Locator.exe (with SP1)
20-Nov-2002 18:50 5.1.2600.1143 67,584 Magnify.exe (with SP1)
20-Nov-2002 19:22 5.1.2600.1143 230,400 Migwiz.exe (with SP1)
18-Nov-2002 18:27 5.1.2600.1143 392,576 Mrxsmb.sys (with SP1)
27-Jun-2003 19:38 2003.1100.5426.0 116,28 Msconv97.dll (with SP1)
20-Nov-2002 18:50 5.1.2600.1143 51,200 Narrator.exe (with SP1)
31-Jan-2003 23:46 5.1.2600.1164 238,080 Newdev.dll (with SP1)
01-May-2003 23:56 5.1.2600.1217 654,336 Ntdll.dll (with SP1)
24-Apr-2003 15:57 5.1.2600.1151 1,892,864 Ntkrnlmp.exe (with SP1)
24-Apr-2003 15:57 5.1.2600.1151 1,949,440 Ntkrnlpa.exe (with SP1)
24-Apr-2003 15:57 5.1.2600.1151 1,921,536 Ntkrpamp.exe (with SP1)
24-Apr-2003 15:57 5.1.2600.1151 1,925,760 Ntoskrnl.exe (with SP1)
25-Aug-2003 18:53 5.1.2600.1263 1,172,992 Ole32.dll (with SP1)
20-Nov-2002 18:50 5.1.2600.1143 212,480 Osk.exe (with SP1)
27-Nov-2002 18:50 5.1.2600.1143 94,208 Pchshell.dll (with SP1)
02-Oct-2002 00:52 5.1.2600.1129 46,208 Raspptp.sys (with SP1)
25-Aug-2003 18:53 5.1.2600.1254 532,480 Rpcrt4.dll (with SP1)
25-Aug-2003 18:53 5.1.2600.1263 260,608 Rpcss.dll (with SP1)
27-Nov-2002 18:50 6.0.2800.1145 1,331,200 Shdocvw.dll (with SP1)
11-Jun-2003 20:43 6.0.2800.1233 8,240,640 Shell32.dll (with SP1)
30-Sep-2002 17:58 6.0.2800.1125 125,440 Shmedia.dll (with SP1)
14-Nov-2002 20:50 5.1.2600.1142 226,816 Srrstr.dll (with SP1)
28-Mar-2003 18:54 5.1.2600.1193 322,048 Srv.sys (with SP1)
01-Nov-2002 21:13 1,080,070 Sysmain.sdb (with SP1)
27-Nov-2002 18:50 6.0.2800.1143 445,440 Urlmon.dll (with SP1)
01-Nov-2002 22:26 5.1.2600.1134 528,896 User32.dll (with SP1)
23-Oct-2002 15:55 5.1.2600.1134 1,694,336 Win32k.sys (with SP1)
01-Nov-2002 22:26 5.1.2600.1134 272,896 Winsrv.dll (with SP1)
25-Sep-2002 22:18 6.0.2800.1126 316,928 Zipfldr.dll (with SP1)
You can also verify the files that this update rollup installed by reviewing the following registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP2\826939\Filelist
The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.