Welcome to MSDN Blogs Sign in | Join | Help

IE August 2006 Security Update is now available

The IE cumulative August 2006 security update is now available via Windows Update. Alternatively, you can receive this and all other Microsoft updates via the new Microsoft Update and I encourage you to upgrade to Microsoft Update if you haven’t already.

This update addresses 8 security issues: 5 remote code execution vulnerabilities, 2 information disclosure vulnerabilities and 1 elevation of privilege vulnerability. For more information on the contents of this update, please see:

Microsoft Knowledge Base article: MS06-042 – Cumulative Security Update for Internet Explorer (KB# 918899)
Details on the vulnerabilities and workarounds can be found at http://www.microsoft.com/technet/security/Bulletin/MS06-042.mspx.

This is a “Critical” update and affects all supported IE configurations from IE5.01 to IE6 for XPSP2 and IE6 for Server 2003 Service Pack 1. IE security updates are cumulative and contain all previously released patches for each version of IE.

I encourage everybody to download this security update and other non-IE security updates via Windows Update or Microsoft Update. Windows users are also strongly encouraged to configure their systems for automatic updates to keep their systems current with the latest patches from Microsoft.

- Charles Watanabe
Release Coordinator

Edit: Corrected the number of vulnerabilities addressed in the bulletin

Published Tuesday, August 08, 2006 1:03 PM by ieblog

Comments

# re: IE August 2006 Security Update is now available

Tuesday, August 08, 2006 7:48 PM by Jeff
Is IE7 Beta 3 affected by these issues?

# re: IE August 2006 Security Update is now available

Wednesday, August 09, 2006 12:38 AM by SA
Can I install these updates (via windows update) with IE7 Beta 3 in place? Or should I first unistall IE 7 Beta 3, perform the windows udpate and then reinstall IE7 Beta 3 (on Windows XP SP2).

I ask this because the release notes of IE 7 Beta 3 recommend to install any OS updates without unistalling IE 7 Beta 3. Please advise.

# re: IE August 2006 Security Update is now available

Wednesday, August 09, 2006 4:12 AM by luke
@SA

- the IE7 releases notes mean you can't install an OS over your current OS.
- you can apply all Windows XP updates with IE7.

# re: IE August 2006 Security Update is now available

Wednesday, August 09, 2006 7:26 AM by Mr. Peter Gold
Maybe this will keep my WindowsXp Pro more
stable.

# re: IE August 2006 Security Update is now available

Wednesday, August 09, 2006 9:10 AM by Steve
ONCE AGAIN!!!!!!!!!!!!

THERE WAS AN UPDATE TO OUTLOOK OR OUTLOOK EXPRESS, AND MICROSOFT CHANGED MY DEFAULT EMAIL CLIENT TO OUTLOOK!!!!!!

This is not funny anymore.  This is the 3rd time in a row that this has happened with updates.

I use Thunderbird. You couldn't pay me to use Outlook.  Do not force me to reset my email client every time I apply updates for an Outlook security hole.

Play fair, or quit the "We're listening" mantra until you do.

Steve

# re: IE August 2006 Security Update is now available

Wednesday, August 09, 2006 11:31 AM by Christopher Vaughan [MSFT]
Steve - I agree that sounds like a bug. I encourage you to contact the Outlook and Outlook Express teams and let them know. I will pass your concern along as well but it's always more powerful when it comes from a customer. As a reminder, here on the IE team we have nothing to do with Outlook or Outlook Express updates.

-Christopher [MSFT]

# re: IE August 2006 Security Update is now available

Wednesday, August 09, 2006 11:51 AM by Aedrin
"I use Thunderbird. You couldn't pay me to use Outlook."

Then why are you complaining about Outlook if you don't use it?

I suppose sometimes people just complain about Microsoft to look cool with the Unix/Apple people.

# re: IE August 2006 Security Update is now available

Wednesday, August 09, 2006 12:24 PM by Afsag
http://www.webdevout.net/browser_support_summary.php?uas=IE6-IE7-FX1_5-OP8-OP9

I don't use Internet Explorer, and I won't use it in the future; but a lot of people use it (too many) and the standards are very important to see the same webpage in the same way in all the browsers. Please, listen to the developers: more support for xhtml and css and less unnecessary icons!!

# re: IE August 2006 Security Update is now available

Wednesday, August 09, 2006 3:26 PM by mry007
This update cannot be installed if you're running Internet Explorer 7 Beta 3. The error you will get:

"KB918899
The version of Internet Explorer you have installed does not match the update you are trying to install."

So now I don't know if I'm vulnerable or not. But hey, it's still a beta so I guess I should not complain about that...

# re: IE August 2006 Security Update is now available

Thursday, August 10, 2006 1:12 AM by Phil
After installing the new Aug '06 security updates on 2 Win 2000 machines (one Pro SP4; the other Adv Server SP4), I've had IE (6.0.2800.1106IC) crash several times -- on both machines.

i.e., IE has experienced a problem & must close, ...

Anyone else seeing this?  

# re: IE August 2006 Security Update is now available

Thursday, August 10, 2006 2:08 AM by JR
Phil: YES.

IE has crashed on my Windows 2000 system 15 times since applying yesterday's updates. Before that it never crashed.

Tested on another freshly updated Windows 2000 system (with just IE, no Flash or any other add-ons), and got it to crash in under a minute.

The crashes seem to occur most often while loading pages with advertising banners. The exceptions are access violations (0xc0000005) and the faulting DLL/address is different each time. Some examples (copied from the Event Log):

iexplore.exe, 6.0.2800.1106, ntdll.dll, 5.0.2195.7006, 0004d79a.
iexplore.exe, 6.0.2800.1106, rpcrt4.dll, 5.0.2195.7085, 0002236e.
iexplore.exe, 6.0.2800.1106, ws2help.dll, 5.0.2134.1, 000014fc.
iexplore.exe, 6.0.2800.1106, ntdll.dll, 5.0.2195.7006, 0004c04c.

Known issue...?

# re: IE August 2006 Security Update is now available

Thursday, August 10, 2006 9:52 AM by Gail
Having the same problem here.  I can't seem to find anything to fix it.  

# re: IE August 2006 Security Update is now available

Thursday, August 10, 2006 12:07 PM by Phil
This is a serious problem, at least with W2K.  Like JR, I *never* had IE crashes before.  A few things...

(1) i have Flash Player 8.0 (not sure if it's related to the problem)

(2) the crash is not consistent; i.e., IE will crash from one site, but the next time, the same URL may be fine.

# re: IE August 2006 Security Update is now available

Thursday, August 10, 2006 3:06 PM by JR
Twice I've seen call stacks like the following when it crashes. Notice that the last IE API called is SHDOCVW!WinList_NotifyNewLocation. Makes me wonder if it's related to the "Window Location Information Disclosure Vulnerability" fix that was included in this update...

ChildEBP RetAddr  
0012e40c 77d524f2 RPCRT4!BCACHE::FreeBuffers+0x25
0012e428 77d52493 RPCRT4!BCACHE::FreeHelper+0x50
0012e44c 77d4ff63 RPCRT4!BCACHE::Free+0x5e
0012e458 77d4fb7c RPCRT4!LRPC_CCALL::ActuallyFreeBuffer+0x28
0012e464 77d4222b RPCRT4!LRPC_CCALL::FreeBuffer+0xf
0012e46c 7cef3c59 RPCRT4!I_RpcFreeBuffer+0xc
0012e480 7ce88257 ole32!CRpcChannelBuffer::FreeBuffer+0x3c
0012e49c 77d9139a ole32!CCtxComChnl::FreeBuffer+0x3d
0012e4ac 77d93e22 RPCRT4!NdrProxyFreeBuffer+0x28
0012e6f8 77d96f9c RPCRT4!NdrClientCall2+0x7d0
0012e714 77d792ab RPCRT4!ObjectStublessClient+0x76
0012e724 717972e3 RPCRT4!ObjectStubless+0xf
0012e74c 7151a0a5 SHDOCVW!WinList_NotifyNewLocation+0x34
0012e75c 71722ac3 BROWSEUI!CShellBrowser2::UpdateWindowList+0x24
0012e76c 717250ba SHDOCVW!CBaseBrowser2::_UpdateBrowserState+0x26
0012e788 71726386 SHDOCVW!CBaseBrowser2::_ActivateView+0x7a
0012e7c0 636a1816 SHDOCVW!CBaseBrowser2::FireNavigateComplete2+0x73
WARNING: Stack unwind information not available. Following frames may be wrong.
0012e7f8 635fb8ae mshtml!com_ms_osp_ospmrshl_releaseByValExternal+0x10a74
0012e81c 635f7dc5 mshtml!CreateHTMLPropertyPage+0x6a58
0012e858 63782ada mshtml!CreateHTMLPropertyPage+0x2f6f

MSFT, is this problem being investigated? Or shall I keep gathering more information?
I'm still trying to find a URL that consistently reproduces the crash.

P.S. A user here claims that disabling HTTP 1.1 is a workaround:
http://groups.google.com/group/microsoft.public.windowsupdate/browse_thread/thread/9a76e6da62577f6f/07fa3aae1d517a59

# re: IE August 2006 Security Update is now available

Thursday, August 10, 2006 3:38 PM by Fduch
How can programm that can easily invoke DOS attack on user's system BY DESIGN be called browser?

# re: IE August 2006 Security Update is now available

Friday, August 11, 2006 4:15 AM by Boler Guo
After install this Security Update, the returnValue in Modal Browser cannot return the element in this Modal Browser.

# re: IE August 2006 Security Update is now available

Friday, August 11, 2006 6:00 AM by Abel
Oh well, IE is improving well, despite so many loopholes it had last time...we should be glad that Microsoft is still supporting updates to Win2K and even more for XP...

# re: IE August 2006 Security Update is now available

Friday, August 11, 2006 9:57 AM by J
This August security update has caused tremendous errors and crashs. Our web application is now crashing very oftenly and constantly. It never happened before.

Could Microsoft help us to determine what could be the possible cause?

# re: IE August 2006 Security Update is now available

Friday, August 11, 2006 10:53 AM by Paul Lynch
I'm relieved to see that people are reporting issues with this latest update - because I am experiencing crashes and I thought it must have been something I had done to my machine. Apparently not...

Quick recap - I installed all of the relevant August updates for my XP Home SP1 machine (MS06-040,MS06-041,MS06-041,MS06-045,MS06-046,MS06-050,MS06-051) in one go and I immediately noticed problems with IE - it just seemed to close (and take any other open instances down with it) for no apparent reason.

I was able to repro the problem by doing this :

1. Perform this specific search on Google :
http://www.google.com/search?sourceid=navclient&ie=UTF-8&rls=GGLD,GGLD:2004-34,GGLD:en&q=%22connectionManagement%22+maxconnection+value+specify+config

2. Right-click on the 5th link in the list (Steve Hebert's Development Blog) and then try to open that link in a new window.

3. Wait a few seconds and then.... boom IE closes and takes the parent instance (the Google search) down with it.

4. I uninstalled the MS06-042 hotfix and re-ran the above steps and it works OK.

5. Can I obtain any logging information generated when this happens ? (I always send the error reports to MS)

6. Is anyone reading these comments and doing anything about this ?

Regards,

Paul Lynch

# re: IE August 2006 Security Update is now available

Friday, August 11, 2006 11:04 PM by Larry
Happens to me to.  When looking for the hotfix described all I have is KB#  Is there a KB number coresponding to the hotfix?

# re: IE August 2006 Security Update is now available

Saturday, August 12, 2006 1:08 AM by Henry
I like Microsoft products a lot, but i'm tired of those security updates... looks like you pay for a product full of bugs...


http://www.cruisetopics.com

# re: IE August 2006 Security Update is now available

Saturday, August 12, 2006 1:49 AM by Lonewalker
JR wrote:
==============================
IE has crashed on my Windows 2000 system 15 times since applying yesterday's updates. Before that it never crashed.

Tested on another freshly updated Windows 2000 system (with just IE, no Flash or any other add-ons), and got it to crash in under a minute.

The crashes seem to occur most often while loading pages with advertising banners. The exceptions are access violations (0xc0000005) and the faulting DLL/address is different each time. Some examples (copied from the Event Log):

iexplore.exe, 6.0.2800.1106, ntdll.dll, 5.0.2195.7006, 0004d79a.
iexplore.exe, 6.0.2800.1106, rpcrt4.dll, 5.0.2195.7085, 0002236e.
iexplore.exe, 6.0.2800.1106, ws2help.dll, 5.0.2134.1, 000014fc.
iexplore.exe, 6.0.2800.1106, ntdll.dll, 5.0.2195.7006, 0004c04c.
======================================

I have been having the same problem on Win200.
Always on pages with ad banners.

Privacy in IE is set to medium.

Would love to see a hotfix for this one.

# 923762

Saturday, August 12, 2006 2:19 AM by ST
923762 Internet Explorer 6 Service Pack 1 unexpectedly exits after you install the 918899 update
http://support.microsoft.com/kb/923762/

Urlmon.dll 6.00.2800.1567
IE6SP1 with XPSP1 or 2000SP4

Please release public patch 923762 or 918899v2.
I need HTTP1.1 on IE.

# re: IE August 2006 Security Update is now available

Saturday, August 12, 2006 12:05 PM by EW
I can't seem to find a link on that page for the hotfix download. It just tells me to e-mail or call Microsoft.


Am I just blind?

# re: IE August 2006 Security Update is now available

Saturday, August 12, 2006 12:21 PM by VS
WORKAROUND
To work around this problem, follow these steps:

1. Start Internet Explorer 6.

2. On the Tools menu, click Internet Options, and then click the Advanced tab.

3. In the Settings box, click to clear the Use HTTP 1.1 check box under HTTP 1.1 settings, and then click OK.

# re: IE August 2006 Security Update is now available

Saturday, August 12, 2006 12:28 PM by EW
DOH! And here I thought it said check it!

Is my face red. =P

Thanks!

# re: IE August 2006 Security Update is now available

Saturday, August 12, 2006 12:54 PM by Tony
Anyone have a link on where to download the hotfix for this. Why cant microsoft just post the exe? Thanks!

# re: IE August 2006 Security Update is now available

Saturday, August 12, 2006 1:01 PM by Adam
I have exactly the same crashes of my IE on W2K when browsing some well known big websites like for example: http://www.cyberpresse.ca/article/20060812/CPACTUALITES/608121072/5024/CPDMINUTE
(this is not a spam; I have nothing to do with cyberpresse.ca ;)

This occurs exactly since half an hour after I have updated my system with August patches on August 9th;

I have exactly the same IE bug output each time:

iexplore.exe; 6.0.2800.1106; ntdll.dll; 5.0.2195.7006; 0004aff8.
Data:
0000: 41 70 70 6c 69 63 61 74   Applicat
0008: 69 6f 6e 20 46 61 69 6c   ion Fail
0010: 75 72 65 20 20 69 65 78   ure  iex
0018: 70 6c 6f 72 65 2e 65 78   plore.ex
0020: 65 20 36 2e 30 2e 32 38   e 6.0.28
0028: 30 30 2e 31 31 30 36 20   00.1106
0030: 69 6e 20 6e 74 64 6c 6c   in ntdll
0038: 2e 64 6c 6c 20 35 2e 30   .dll 5.0
0040: 2e 32 31 39 35 2e 37 30   .2195.70
0048: 30 36 20 61 74 20 6f 66   06 at of
0050: 66 73 65 74 20 30 30 30   fset 000
0058: 34 61 66 66 38 0d 0a      4aff8..


I hope your team is already aware about this and will release some fix shortly ?

Thanks

Adam


# re: IE August 2006 Security Update is now available

Saturday, August 12, 2006 1:18 PM by EW
The fix posted by VS and ST works fine for me.


The reason it's crashing is because the page has flash on it.

# re: IE August 2006 Security Update is now available

Saturday, August 12, 2006 1:24 PM by Adam
Just to confirm following my last post above that after unchecking "Use HTTP 1.1" check box under HTTP 1.1 settings and rebooting my W2K everything runs smoothly even browsing to the websites which crashed IE on each visit before.

IE hotfix will be released certainly in couple of days ?

Thanks in advance

# re: IE August 2006 Security Update is now available

Saturday, August 12, 2006 1:40 PM by Tony
The http 1.1 fix works great, but does this come at the expense of reduced functionality on certain webpages, especially ones that utilize 1.1?

# re: IE August 2006 Security Update is now available

Saturday, August 12, 2006 5:51 PM by Nemurytorul
HELP ME !!!!!!!!!!
i can't view the microsoft update page, i have IE7 beta 3 and i load this page in browser but it is a whole empty white page without any text !!!!!!!!!....and yahoo messenger doesn't work correctly because i send text or anything else but i can't see what i write and what i received .....i've uninnstall IE beta 3 and ...surprize ....IE6 and yahoo messenger is working....the next day .....surprize ....again this work incorrectly ...again  buullshit !!!!!!!....o man ....what can i do?????
PLEASE HELP ME !!!!!!!!!!!!

# re: IE August 2006 Security Update is now available

Saturday, August 12, 2006 9:35 PM by Lisa
work around  to uncheck the "Use HTTP 1.1" worked for me but I cannot view a few sites tha use this...like all of my kid's school sites, please announce the hotfix soon.

# re: IE August 2006 Security Update is now available

Sunday, August 13, 2006 4:48 AM by Nemurytorul
i uncheck "use http 1.1 , i activate scripting, uninstall and again install IE6,IE7 and still nothing change....same bullshit....

# re: IE August 2006 Security Update is now available

Sunday, August 13, 2006 4:50 AM by Nemurytorul
i uninstall some update hot fix from microsoft but nothing cahnge....

# re: IE August 2006 Security Update is now available

Sunday, August 13, 2006 1:29 PM by paul
The uncheck workaround resolved the problem for me.  Note, you do not have to restart your machine for this to take effect.  

Although MSFT details the workaround at the bottom of the page here:

<a href="http://support.microsoft.com/kb/923762/en-us">http://support.microsoft.com/kb/923762/en-us</a>

it would be nice if they:

1) released the hotfix
2) bothered to reference the problem off the main MS06-42 page.  They do not.

<a href="http://www.microsoft.com/technet/security/Bulletin/MS06-042.mspx">http://www.microsoft.com/technet/security/Bulletin/MS06-042.mspx</a>

Thankfully there are sites like this one!

# re: IE August 2006 Security Update is now available

Sunday, August 13, 2006 1:50 PM by GA
It appears MS wants you to call them for the Hotfix.  At least that is the way I understand it?  I have two machines in the house running Windows 2000, and they are experiencing the problem.  I am hoping the workaround will cure things for me.

# re: IE August 2006 Security Update is now available

Sunday, August 13, 2006 3:32 PM by Andreas
got the same problem with IE crashing on win 2000 with all the latest updates. have tried http 1.1 workaround but it dont help. this problem really need a hotfix at once.

# re: IE August 2006 Security Update is now available

Sunday, August 13, 2006 8:19 PM by John
got the exact same problem, IE 6 with XP SP2.

# re: IE August 2006 Security Update is now available

Sunday, August 13, 2006 11:28 PM by Barry Graham
I can't even get Microsoft Update to work after I installed Office 2007 Beta.  It just sticks at the screen where it determines which updates need to be applied.

# re: IE August 2006 Security Update is now available

Monday, August 14, 2006 5:38 AM by Jon Hibbins
<html>
<head>
<title>
Right Click Issue
</title>
<script language="javascript">



function openMenu(objNode){
var objSrc = window.event.srcElement;

var windowwidth = document.body.clientWidth;
var windowbodyheight = document.body.clientHeight;

var intStartLeft = windowwidth/2;
var intStartTop = windowbodyheight/2;

var intWidth = 100;

var intHeight = 46;

var intLeft = event.screenY;
var intTop = event.screenX;
objPopup = window.createPopup();
objPopupBody = objPopup.document.body;

objPopupBody.innerHTML +=' <div onMouseOver="this.style.background=\'#eeeeee\'" onMouseOut="this.style.background=\'#DEDBD6\'" oncontextmenu="return false;" onclick="alert(\'you clicked edit\');" >&nbsp;&nbsp;Edit</div>' +
' </div> ' ;
objPopupBody.innerHTML +=' <div onMouseOver="this.style.background=\'#eeeeee\'" onMouseOut="this.style.background=\'#DEDBD6\'" oncontextmenu="return false;" onclick="window.parent.objPopup.hide();" >&nbsp;&nbsp;Cancel</div>' ;
objPopupBody.innerHTML +=' </body></html> ';


objPopup.show(intTop, intLeft, 100, intHeight);

}

</script>
</head>
<body>
<div oncontextmenu="openMenu(this); return false;" style="display:block;border:solid black 1px;font-weight:bolder;width:200px;" >Right Click Here</div>

This example crashes with the new ie patch just right click the section a few times !!
</body>
</html>

# re: IE August 2006 Security Update is now available

Monday, August 14, 2006 8:21 AM by Jamie
I've seen these crashes happening on several computers at work and my home computer since last Friday.

Why isn't everyone screaming in outrage? Or is it only a minority who are affected?

# re: IE August 2006 Security Update is now available

Monday, August 14, 2006 10:50 AM by Chris A
Have experienced IE crashes constantly since Friday's MS hotfix downloads.  Also slow to load pages - as if prioritized: Ads, Pop-ups? (Have Google tool-bar pop-up blocker enabled.)  Faster page loading now and no crashes since un-checking HTTP 1.1.  Overall loading performance, however, slower since hotfixes.

Thanks for the tip and regards.

# re: IE August 2006 Security Update is now available

Monday, August 14, 2006 11:40 AM by Brian
The unchecking 1.1 and stripping Adobe flash off and re-installing v. 9 seemed to resolve the issue for one of my users who was experiencing the same problem.

# re: IE August 2006 Security Update is now available

Monday, August 14, 2006 11:42 AM by Luke
IE7 is not vulnerable

# IE 6.0 crashes on all platforms with August 2006 Security Update installed

Monday, August 14, 2006 3:15 PM by AH
IE 6.0 crashes on all platforms with August 2006 Security Update installed

Visit http://www.comcept.net/crash.htm and follow the instructions. This will demonstrate Internet Explorer 6.0 crashing on any platform (Windows 2000/XP/2003 with any Service Pack) if you have installed the August 2006 Security Update (918899) even if you cleared the checkbox next to HTTP 1.1 protocol or installed the hotfix 923762.
The exact error message varies, but is something like this:
Title: "IEXPLORE.EXE - Application Error". Text: The instruction at "0x4a5b19d6" referenced memory at "0x00000020". The memory could not be "read".

This particular issue is related to the use of the "popup" window API after installing the August 2006 Security Update. This is the cause for frequent IE crashes when using web-based applications such as Comcept and ProSight Portfolios.

# re: IE August 2006 Security Update is now available

Monday, August 14, 2006 4:42 PM by Chris Walters
August 06 UDATES & PATCHES CRASH IE6 ON W2K.
After installing the new Aug '06 security updates on 2 Win 2000 machines (one Pro SP4; the other Adv Server SP4), I've had IE (6.0.2800.1106IC) crash several times -- on both machines.

i.e., IE has experienced a problem & must close, ...

My advice Dont Install till they've fixed it

Chris, Sydney Australia

# re: IE August 2006 Security Update is now available

Monday, August 14, 2006 5:13 PM by Chris A
Chris in Aus - MS has redated 918899 to today's date and added 921883 today.  Wonder if this will fix the problem?

My trouble started with 922616 (8/8), 920670, 920683 and 920958 all on 8/9, 921398 on 8/11 and 918899 originally on 8/12.

# re: IE August 2006 Security Update is now available

Monday, August 14, 2006 5:37 PM by Chris A
What a difference a 6 hour day makes, machine definitely faster with today's fixes, re-checked HTTP 1.1 and all OK!

# re: IE August 2006 Security Update is now available

Monday, August 14, 2006 11:13 PM by urlmon.dll needed!!!!
Please release public patch 923762 or 918899v2.
I need HTTP1.1 on IE.

PLEASE!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
A.S.A.P.!!!!!!!!!!!!!!!!!!!!!!!!!!!

# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 2:27 AM by J!
We are a CMS vendor also having the same problem as demonstrated on:
http://www.comcept.net/crash.htm

Has anyone come up with a fix for this, or has MS got a patch for this yet?

# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 2:51 AM by Thomas L
I am also looking for a fix of the http://www.comcept.net/crash.htm bug. It seems as if neither unchecking the HTTP 1.1 nor doing the registry hack (as described on http://msmvps.com/blogs/spywaresucks/archive/2006/08/12/107385.aspx). Error message is: "Faulting application iexplore.exe, version 6.0.2900.2180, faulting module mshtml.dll, version 6.0.2900.2963, fault address 0x0006d031."

I'm getting quite tired of this now.

# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 3:35 AM by Paul Lynch
I phoned MS yesterday and after speaking to 2 different people I wax eventually offered the MS06-042 update :-/

I eventually persuaded the guy to send me the hotfix referenced in kb923762 and they sent it to my Hotmail account.

The file was password protected but they did send me the password for it.

I'll let you know how I get on with the hotfix....

Paul

# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 6:38 AM by noah
We run a fairly large news site here in Sweden and our visitors started to experience problems with IE crashing upon startup or on exit after MS06-042 was released.


What we've found so far is:
* The offical workaround from Microsoft (http://support.microsoft.com/kb/923762/
) works
* Disabling HTTP compression in Apache (the webserver) works
* Upgrading Adobe Acrobat Reader to the latest version works *for us* aswell


My colleague noted that after reinstalling Adobe Acrobat Reader and browsing our site Adobe's License Agreement page appeared.
It didn't appear while visiting other sites.

After sniffing the traffic between our webserver and the client we noted that a couple of JPG images contained, possibly IPTC-infomation, a piece of XML which mentioned PDF in it. Probably because these weren't "saved for web" in Photoshop (which strips out all unnecessary information from the images). It shouldn't be there anyway.


I assume this is what makes IE call Acrobat Reader, perhaps via some hook provided by urlmon.dll?


Could it be a combination of:
* urlmon.dll bug with HTTP compression+HTTP/1.1
* old/buggy/whatever third party program (such as AcroRead)

..that trigger this bug on certain sites?


I'd love to see Microsoft release a patch to fix this bug ASAP as it affects sites such as ours which take advantage of compression to save time and bandwidth for visitors.

Losing visitors means we're losing valueable advertising money, not to mention how this bug hurts our reputation since IE works fine on other sites which doesn't use compression, but is crashing on our site.

Thank you.

# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 6:58 AM by Thomas L
Noah, after reinstalling Acrobat Reader, does http://www.comcept.net/crash.htm work without crashing IE for you?

# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 9:36 AM by adf
this sux

# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 9:42 AM by JT Tan
Same problem here.. running Win2000 pro sp4, and the latest version of IE6.  Recently popped up with problems involving frequent crashes.  It is getting progressively worse (pages that didn't crash before are now crashing), and with the recent complaints, I'm glad to hear that it's not something I did to my computer.


# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 10:32 AM by Chris A
Back to HTTP 1.1 un-checked this morning after a couple of IE crashes on Reuters news service links that stalled while loading. MS updated 918899, and 921883 of yesterday not the complete answer?

# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 10:40 AM by Ben
Just called MS and got the fix in KB923762, seems to have fixed the issue. URLMON.DLL version 6.0.2800.1567.

I don't get why the patch is secret... if someone has the balls to host it somewhere, I'll email it ;-)

# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 10:46 AM by Chris A
Paul, thanks - the bulletin describes my situation exactly, am running Win 2000, SP4: http://support.microsoft.com/kb/923762/en-us And work around is: un-check HTTP 1.1?

Looks like MS wants to charge for the hotfix?  Could this be the beginning of the end for 'support' of Win 2000?

# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 12:25 PM by Chris A
Hi there - have URLMON.DLL version 6.0.2800.1567 on my machine, created 7/25/06 - now what? Re-checked HTTP 1.1 and machine running Reuter's videos now? Confused and a bit confounded.

# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 12:51 PM by Rob
Having the same problems with IE crashing in win2k as well.  Found it's most commonly caused when there is java in the web page, which seems to set the error off.

# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 2:39 PM by Sean L
PAUL,  ARE YOU THERE?
Can you share us the file??????


====
I eventually persuaded the guy to send me the hotfix referenced in kb923762 and they sent it to my Hotmail account.

The file was password protected but they did send me the password for it.

I'll let you know how I get on with the hotfix....

Paul

# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 2:49 PM by Anomy
Chris A
or Ben
or Paul,


Can you send the fix from MS to  
kb923762@yahoo.com

I will find a way to share the fix.

# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 3:56 PM by Greg E
This problem appears both on my WIN2K machine and a Windows XP Media Center machine.  It's the update for IE6.  It's not OS specific.  Microsoft needs to apply a new update to fix their latest self created bug.

# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 4:07 PM by John m
Same problem here. The workaround for w2k machines is working. Now all the XP machines are having issues as the update altered fonts and font sizing in IE and outlook express. Wish I hadn't installed it

# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 6:17 PM by The Steve
I am also having a problem with IE crashing in Windows 2000 now.  I'm uninstalling these updates to see if it resolves the issue for now.

# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 7:28 PM by Anomy
Ben, or anyone who has the kb923762 fix

Please email the URLMON.DLL to kb923762@yahoo.com

I will host somewhere and let here know the site.

# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 7:33 PM by Stephen Harrison
I have the same problem with IE crashing on win 2000. It appears to "go away" after you reboot but starts again after clicking on about 20 - 30  links

# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 8:23 PM by Dave
http://support.microsoft.com/kb/923762/en-us

Info for kb923762 updated...

Article ID : 923762
Last Review : August 15, 2006
Revision : 2.0

"A new version of security update 918899 is currently in development and will be released to all Microsoft Internet Explorer 6 Service Pack 1 customers by August 22, 2006."

# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 8:50 PM by Chris A
Anomy - while the URLMON.DLL version 6.0.2800.1567 file is in the System 32, cannot get it to copy? Sorry. Hope the reissue of 918899 is the answer as I have had to leave HTTP 1.1 un-checked for most of today.

# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 9:54 PM by Jhoie
Hi Paul/Ben,

Could you send me the hotfix as well?

angel_mondejar24@yahoo.com

Thanks!

# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 10:39 PM by Ben
Note: Calling MS for this issue doesn't cost anything but a few minutes of time... because it's a known issue and they don't have to do anything but email you the file, they don't enter fee-based support.

# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 10:48 PM by Ben
Note: Also, we've had "good luck" getting things to crash by visiting http://wwlp.com/ ...might be a good test for verifying that 1) you have this problem and 2) you've managed to fix it somehow.

# re: IE August 2006 Security Update is now available

Tuesday, August 15, 2006 11:20 PM by Chris A
Cliked on the HTTP 1.1 and surfed around http://wwlp.com/ - slow to load but no repeat of the crash problem? Did not try 'the 20 links to fail' as so slow.

# re: IE August 2006 Security Update is now available

Wednesday, August 16, 2006 4:38 AM by NanaMac
Like everyone else, I thought I'd done something stupid to my computer. I suspected the recent updates and was relieved to find this blog. I've tested http://wwlp.com/ with and without HTTP 1.1 ticked, and so far, unticking seems to work, but I don't know what pages I won't be able to see/use. I'm running XPsp1 and the local council that owns this computer doesn't want me to upgrade to XPsp2. Since technically it isn't my machine, I'm a bit loathe to download the patch without some more assurance. Have some of you tried it now?...with success? Thanks, Pat (in Oz)

# re: IE August 2006 Security Update is now available

Wednesday, August 16, 2006 4:40 AM by San
Same here, IE crashes...I looked for a fix, could not find one....

# re: IE August 2006 Security Update is now available

Wednesday, August 16, 2006 4:52 AM by NanaMac
What happens if you go to Add or Remove Programs and remove Hotfix KB918899? Is it connected to other fixes or updates?  Will it help or stuff up the system any worse? - Pat

# re: IE August 2006 Security Update is now available

Wednesday, August 16, 2006 5:40 AM by noah
Thomas L: Regarding the crash.htm page; yes it still crashes.

# re: IE August 2006 Security Update is now available

Wednesday, August 16, 2006 6:51 AM by Kennedy
RE: After install this Security Update, the returnValue in Modal Browser cannot return the element in this Modal Browser

Does anyone know if the new release on august 22nd will fix the problem in IE6 where the return value from a modal dialog window has now become inaccessible?

# re: IE August 2006 Security Update is now available

Wednesday, August 16, 2006 6:56 AM by jelt
I wander if all you are trolls or what? We're on IE7 blog and you says IE6 crashes due the latest MS patches???? The patches are for IE6 and not for IE7.
NO crahes with IE7.

# re: IE August 2006 Security Update is now available

Wednesday, August 16, 2006 8:46 AM by Chris A
Trolls? Give us a break! The header refers to August updates: http://support.microsoft.com/?id=918899  The impact of which has been mayhem on IE 6!  Several here have noted that IE 7 is not affected!  Virtually all the dialog and suggestions are IE 6 related - where have you been?

# re: IE August 2006 Security Update is now available

Wednesday, August 16, 2006 9:02 AM by Chris A
Steve - even though un-installing 918899 is possible have been hesitant.  Your experience?  Have URLMON.DLL version 6.0.2800.1567 (installed in a July update, all IE 6 should have this? Go to Start, Search type in the file and see if its there?) and IE crash problems are still occurring intermittently with HTTP 1.1 clicked.

# re: IE August 2006 Security Update is now available

Wednesday, August 16, 2006 10:49 AM by The Steve
I tried uninstalling but I'm guessing I hadn't truly uninstalled it because I still had the problem.  

Anyway, I tried the workaround (disabling HTTP 1.1) and that did the trick.  Sounds like that's the thing to do until Microsoft releases the fix.

# re: IE August 2006 Security Update is now available

Wednesday, August 16, 2006 11:06 AM by Chris A
The Steve - thanks, thought that would be the case as updates are tentacled all over the OS.  Also, there were 7 updates in the period to 8/8 to 8/12, auto loaded on my W2000, IE 6, SP4 machine (list in a post above). MS have identified only one of these: 918899 of 8/12 (re-issued on 8/14) with a problem, the IE crash.  Guess you have the MS hotfix of yesterday: URLMON.DLL version 6.0.2800.1567?  Has been on this machine since a July '06 update, so no help?

Guess we will have to wait for MS.

# re: IE August 2006 Security Update is now available

Wednesday, August 16, 2006 12:18 PM by Martin
I used the Urlmon.dll fix, unticked the Use http1.1 and reticked the Enable 3rd party extensions and now every thing seems back to usual, so far (fingers crossed). Can't say how pleased I am to have found this blog - and special thanks to Anomy.

# re: IE August 2006 Security Update is now available

Wednesday, August 16, 2006 1:38 PM by grego
Win2k/IE6 randomly crashing after August updates.

I re-installed IE and it was stable until I re-applied August Critical update...I got tired of sending error reports so I guess I'll switch to mozilla permanently..

# re: IE August 2006 Security Update is now available

Wednesday, August 16, 2006 3:15 PM by Kevin MAD KEVDOG Onesko
This is by far the worst update!
MSIE 6 is crashing left and right!
And I hate the LEFT!
It is also ticking off my clients who keep calling me about my software crashing!

!!!

Kevin

I miss my Mac's...

# re: IE August 2006 Security Update is now available

Wednesday, August 16, 2006 3:23 PM by Chris A
Checked my August update file and remember that my IE crashes started on Friday (8/11)after permitting auto-install of 890830 (Malicious Software Removal Kit) and 921883 (Security Update)?

Perhaps 918899, auto loaded along with 8 other updates on Saturday 8/12 is a red-herring?

Sorry to confuse, but we may just need to un-install or get hotfixes for 890830 and or 921883?  

# re: IE August 2006 Security Update is now available

Wednesday, August 16, 2006 6:05 PM by Chris A
Think I found out why I continue to get IE crashes even though I have had URLMON.DLL version 6.0.2800.1565 since 7/25 and URLMON.DLL version 6.0.2800.1566 since 8/12!  Mine are not suffix 1567!

# popup object causes crash!!

Wednesday, August 16, 2006 7:50 PM by Aditya M
I have the same issue as Jon Hibbins (posted Monday, August 14, 2006 5:38 AM).

The proposed IE hotfix seems to fix only the HTTP 1.1 issue, not the window.createPopup() issue.

Does anyone have a workaround for this? It is essential that I use the popup object.

# re: IE August 2006 Security Update is now available

Wednesday, August 16, 2006 8:22 PM by Chris A
Anomy - was on the site: http://www.megaupload.com/?d=9R9T4HLF  but could not access/download the file?  Do I need a site login/password?

Regards, Chris A

# re: IE August 2006 Security Update is now available

Wednesday, August 16, 2006 8:43 PM by Anomy
No you dont need to login.
Just type 3 charaters on the top right box besides download button.
MS deleted all the link. But u reminded it. :)

# re: IE August 2006 Security Update is now available

Wednesday, August 16, 2006 9:29 PM by Chris A
Anomy - brilliant, the 3 letters were staring me in the face - could not see for looking!

Thanks and regards.

# re: IE August 2006 Security Update is now available

Wednesday, August 16, 2006 10:29 PM by pahts
Anomy..Patch worked like a charm..Problem gone!

THX!!

# re: IE August 2006 Security Update is now available

Wednesday, August 16, 2006 10:57 PM by betabite
hyperlinked text usealy turn purple after clicked on. in the new ie, when in new tab, those visited hyperlinks do NOT turn purple and this disturbs me. please fix!!

thanks

e

# re: IE August 2006 Security Update is now available

Thursday, August 17, 2006 1:59 AM by Aschwin

I run a large Citrix farm, still on Windows 2000 SP4. And have had the crashing problem with IE since the MS06-042 update.
This morning I have applied the 923762 hotfix and the farm is now running lika a charm. The crashing problem is solved.

Regards,
Aschwin Geisler

# re: IE August 2006 Security Update is now available

Thursday, August 17, 2006 2:21 AM by etruscan
Hi from italy,i have same crash since last update(running windows2000 professional)
i was getting crazy doing virus scan on line , checking the settings,java,etc,etc  and now browsing thiss site(grazie)i find out is a microsoft bug,!!!
aiaiaiaiaaa ,hope the get out a fix prestoooooooooooooooooo..

# re: IE August 2006 Security Update is now available

Thursday, August 17, 2006 2:24 AM by Jhoie
I still got the same error even after applying 923762... any other workaround

# re: IE August 2006 Security Update is now available

Thursday, August 17, 2006 3:43 AM by Thomas L
Aditya M:
I have heard that MS are working on a hotfix for that one as well. I don't know when it is going to be fixed, though. Call Product Support in your country and report the bug.

# re: IE August 2006 Security Update is now available

Thursday, August 17, 2006 3:56 AM by Paul Lynch
MS are working on releasing a public version of the hotfix. Details here :

"A new version of security update 918899 is currently in development and will be released to all Microsoft Internet Explorer 6 Service Pack 1 customers by August 22, 2006. The new update will be available on the Microsoft Download Center and by using Windows Update. Customers who are using any version of Internet Explorer other than Internet Explorer 6 Service Pack 1 together with any Windows version are not affected by this release and do not have to take any action. We recommend that customers who are not experiencing this issue continue to deploy security update 918899 in their environments to receive protection from the vulnerabilities that are documented in security bulletin MS06-042. Customers who experience this issue should apply the new security update when it is available. Customers who want to avoid the issue before the new security update is available may apply hotfix 923762."

To those people who asked me to mail them the hotfix - sorry, I was asked not to distribute it. Not sure why they asked but I respect their wishes in this. But all you've got to do is phone MS Product Support and you can get the fix for free - no need to risk downloading files from some dodgy filesharing web site.

Regards,

Paul Lynch

# re: IE August 2006 Security Update is now available

Thursday, August 17, 2006 4:10 AM by Thomas L
Just to clarify: The hotfix Paul Lynch talks about is a different one from the one I and Aditya M are talking about. My problem appears in a fully patched IE 6 on XPSP2 and is repro:ed on http://www.comcept.net/crash.htm .

# re: IE August 2006 Security Update is now available

Thursday, August 17, 2006 4:30 AM by SteveG
We have the same problem where IE 6.1 crashes, it only affects us when we visit our Incident Logging System which our Outsource Uses.
I crashes on the the test http://www.comcept.net/crash.htm

We use IE6.1 on XP-sp2(MS says is not affected) & the hotfix only installs on XP-SP1.

The website which makes ours crash is run on our Outsourcers Appache Server and they will not turn off HTTP1.1 and Compression.


Any Help Please


Steve

# Crash di Internet Explorer 6 su Windows 2000 at pseudotecnico:blog

# re: IE August 2006 Security Update is now available

Thursday, August 17, 2006 5:47 AM by David Rose
Microsoft...Microsoft..Microsoft..!!!!!!!!!!

# re: IE August 2006 Security Update is now available

Thursday, August 17, 2006 6:22 AM by DR
AppName: iexplore.exe AppVer: 6.0.2800.1106 ModName: ntdll.dll ModVer: 5.0.2195.7006 Offset: 0004aff8


==>> http://andreaguida.wordpress.com/2006/08/16/internet-explorer-6-sp1-la-nuova-patch-causa-crash-del-programma/
<<==

# re: IE August 2006 Security Update is now available

Thursday, August 17, 2006 9:06 AM by Tom Verschoore de la Houssaije
A possible workaround for the popup problem caused by the update 918899 (MS06-042).

var oMenu = null;

function onclickSomething() {
// Creating the popup window on each click.

oMenu = window.createPopup();
/*
oMenu.document.body.innerHTML = x;
With x also containing:
<input type='hidden' value='' id='selectedItem'/>
And some kind of menu items that onclick:
1) Assigns selectedItem.value with information needed.
2) Closes the popup window.

*/
// Keeping the information transfer as lose as possible
oMenu.document.body.onunload = Function("menuCollapse(this)");
oMenu.show(0,0, 100,100);
}


function menuCollapse(Sender) {
var item = Sender.document.getElementById("selectedItem");
if ((item != null) && (item.value != "")) {  
//Act on information of item.value
}
item = null; // Releasing the reference
oMenu = null; // Releasing the reference
)

/*

I’m trying to NOT allowing the popup to persist through navigations and access the location of the parent window…

By
· Creating the popup window on each click.
· Keeping the information transfer as lose as possible.
· Releasing the reference

It seems to work.

*/

# re: IE August 2006 Security Update is now available

Thursday, August 17, 2006 12:16 PM by tom
We applied the 923762 hotfix yesterday on all our staff computers (gotta love the manual process of installing it on EVERY machine).

The good news is that, for the most part, the IE crashes have stopped. But, I'm still getting reports of system performance degradation in general from our users. Who knows if the cause is the original security update or the hotfix at this point. I'm hoping that the 8/22 official release fixes all of these problems for good.

# re: IE August 2006 Security Update is now available

Thursday, August 17, 2006 2:13 PM by Mark
When I uncheck the box, I am asked to download a program called CA947UBL. It looks suspicious to me so I always say no. I am able to proceed but whenever I log into my browser I get the same prompt to download CA947UBL. Has anyone else seen this?

# re: IE August 2006 Security Update is now available

Thursday, August 17, 2006 2:20 PM by disillusioned
@Tom Verschoore

Thanks for you attempt to make my work easier.
Unfortunatly did your solution not help me. I still got the problem when clicking outside the popup.

Running XP prof SP2.

The hotfix mentioned above a couple of times does to only apply to SP1 of XP?

When I read the diffent notes from Microsoft, it seems as you are not aware of the problem with XP SP2?

# re: IE August 2006 Security Update is now available

Thursday, August 17, 2006 3:05 PM by Tom Verschoore de la Houssaije
A hopefully workaround for the popup problem caused by the update 918899 (MS06-042).  

I’m using my “standard” trick to close the popup window.
I did not think it would be essential for the workaround.
Maybe it is…

You need my menu.htc file containing:

<public:component>
<public:method name = "closePopupWindow" />
<script language="JScript">

function closePopupWindow() {
  try {
//Turning to new focus trick
   var P = top.createPopup();
P.show(0,0,0,0);
P.document.body.focus();
P.hide();
   } catch(exception) {
alert("Error menu.closePopupWindow:\n" + exception.description);
   }
}
</script>
</public:component>
//End menu.htc

Extending the function onclickSomething:

function onclickSomething() {
// Creating the popup window on each click.
oMenu = window.createPopup();
//Assuming menu.htc on same location
oMenu.document.body.addBehavior("menu.htc");
/*
oMenu.document.body.innerHTML = x;
With x also containing:
<input type='hidden' value='' id='selectedItem'/> as first element  
an menu example
<span class='menuItem' onclick='this.parentElement.firstChild.value = "Hope"; body.closePopupWindow();'  >Hopefully</span>

*/
// Keeping the information transfer as lose as possible
oMenu.document.body.onunload = Function("menuCollapse(this)");
oMenu.show(0,0, 100,100);
}


# re: IE August 2006 Security Update is now available

Thursday, August 17, 2006 4:44 PM by Christine Lorenz
Hi!!
Hoping everyone is well inspite of the download problems.

I run Windows 2000 Pro......

The automatic updates ~
KB917008, 917422, 920670, 920683, 920958, 921398, 922616, and malicious software tool KB890830 ~

starting causing problems/errors after the AUTOMATIC update yesterday, closing windows and notifying Microsoft.... and I had to use GoBack4 to return my system to the previous day's settings....

After which I set my "automatic downloads" to "Notify me, but don't automatically download or install them" ...

It started reloading again today and when the download was finished, I installed it and all was OK.

THEN the new patch KB918899 came in for IE6 and again, when I clicked onto a link for my e-mails as yesterday, the box comes up with sending an error message to Microsoft and closing the windows that were open.

NOW, I've TURNED OFF the automatic downloads completely and GO TO Microsoft to see what the new patches are and choose for myself.....

Might not be the best choice, BUT I'm tired of reversing my drive and loosing information.

NOTE: To change AUTOMATIC settings, open CONTROL PANEL and double click AUTOMATIC UPDATES..... choose a setting that YOU are comfortable with ~ It's YOUR computer!!

Take care and ~ Have a GREAT day!!
Christine

# re: IE August 2006 Security Update is now available

Thursday, August 17, 2006 4:56 PM by Steve Thornton
I am also getting constant IE crashes identical to JR's on all of our updated PCs. This is a HUGE problem for us.

# re: IE August 2006 Security Update is now available

Thursday, August 17, 2006 5:15 PM by Steve Thornton
By "dodgy filesharing web site" do you mean update.microsoft.com ? Because that's the site that's damaging all of our computers. Be sure to thank everyone for me.

# re: IE August 2006 Security Update is now available

Thursday, August 17, 2006 5:25 PM by Moe
Steve Thornton's 5:15 pm post is the best yet.  MS had best clean up its own filthy mess, BEFORE hurling insults somewhere else!  
Heal thy self, oh great MS machine.  

# re: IE August 2006 Security Update is now available

Thursday, August 17, 2006 7:02 PM by Anomy
I guess most people here agree with Steve Morton.

# re: IE August 2006 Security Update is now available

Thursday, August 17, 2006 7:05 PM by Anomy
Omg, did I say Morton? My mistake.
Mr. Thornton is right.

# re: IE August 2006 Security Update is now available

Thursday, August 17, 2006 11:43 PM by Chris A
Got this from MS this evening:

KB Article Number(s): 923762

Language: English

Platform: i386

Location: (http://hotfixv4.microsoft.com/Internet%20Explorer%206.0/sp1/Q923762/6.0.2800.1567/free/283500_ENU_i386_zip.exe)  Password protected.

# re: IE August 2006 Security Update is now available

Friday, August 18, 2006 5:08 AM by Tom Verschoore de la Houssaije
A possible workaround for the popup problem caused by the update 918899 (MS06-042).

@disillusioned

Additional testing revealed same problems when clicking outside popup window.
I only gained stability when clicking on the menu items.

Workaround is deadend.

# re: IE August 2006 Security Update is now available

Friday, August 18, 2006 11:48 AM by Chris A
Have been bopping around the net for an hour with no problems - HTTP 1.1 checked.  Suggest get MS to send you the file.

Have Win 2000, IE6, SP4.

# re: IE August 2006 Security Update is now available

Friday, August 18, 2006 11:52 AM by Dagrunn Moberg
It is alright.

# re: IE August 2006 Security Update is now available

Friday, August 18, 2006 4:25 PM by Tom Taylor
I've updated with the patch 923762 and for the most part it appears to fix the issue however I still have a few users that are experiencing a crash in IE.  We are using Peoplesoft and now the crash is caused by urlmon.dll which just happens to be the updated file in patch 923762.  WHY?!?!?!?!

# re: IE August 2006 Security Update is now available

Friday, August 18, 2006 4:46 PM by Chris A
Tom - the problem came on 8/12 when Urlmon,dll was updated from suffix xx65 to xx66 and patch 923762 updates to xx67 - have had one crash since instal, was getting crashes every 2 to 5 minutes with xx66. MS are to release a fix for 918899 by 8/22 - may be the answer?

# re: IE August 2006 Security Update is now available

Friday, August 18, 2006 4:54 PM by Tom Taylor
@Chris A

I really hope that the "update for the update for the update" will fix this issue.  For the most part the patch 923762 has helped on most of my machines but there are a few that still have problems although not as often as pre 923762.  Now they will work for a while before they start crashing and only a reboot will fix them temporarily.

# re: IE August 2006 Security Update is now available

Friday, August 18, 2006 7:02 PM by Kevin
918899 has caused many of my users extreme headaches.  I was reading along this blog, and see that for some of you, the hotfix 923762 works, but Chris A has apparently noticed a few machines that now crash IE in Urlmon.dll.  

@Chris A.
I would love to try that hotfix you posted, but you failed to post the password.  Why would MS password protect a hotfix file?

# re: IE August 2006 Security Update is now available

Friday, August 18, 2006 8:05 PM by Chris A
There is a bit of complexity if the file appears with a sub file as to which to apply, so best to contact MS for the hotfix to ensure compatibility with your OS.  Try: rleung@microsoft.com

# re: IE August 2006 Security Update is now available

Friday, August 18, 2006 9:19 PM by Chris A
Here may be an answer for some of the other vagaries around August MS updates: http://www.informationweek.com/windows/showArticle.jhtml?articleID=192201786&subSection=Securityc

# re: IE August 2006 Security Update is now available

Saturday, August 19, 2006 3:47 AM by angry
Do thiss also slow down  navigation speed,because apart al 20 seconds crashing i noted also a real slow way to open sites..
come om ms,moveeeeeeeeeeeeeeee..

# re: IE August 2006 Security Update is now available

Saturday, August 19, 2006 10:31 AM by George
Just look at the source code and fix ... oh.  Sorry.  Never mind.

# re: IE August 2006 Security Update is now available

Saturday, August 19, 2006 11:31 AM by Mark Kinsler
Thank you, everyone.  I've downloaded the hotfix, presumably with success.  Waiting time was not too bad. They'll assign you a 15-character case number; try to get this early in the conversation in case you get cut off, which happens. I wouldn't be too hard on Microsoft: nobody's ever done this stuff before, and they seem to be doing their best.

# re: IE August 2006 Security Update is now available

Saturday, August 19, 2006 12:59 PM by Chris A
Did the whole thing with MS via e-mail in less than 24 hours - tech's do 8PM to 6AM shifts.  Courteous, supportive and follow-up within 6 hours of the download.  Also ran a full diagnostic that they looked at and commented on within 1 hour.  First class!

# Windows Observer &raquo; Blog Archive &raquo; August Security Updates

# re: IE August 2006 Security Update is now available

Sunday, August 20, 2006 12:17 AM by Warlord Raven
Piece of cake. Running Win2K. Went into my WINNT folder and scrolled through the hotfix folders until I got to the one with the latest IE upgrade in it (not sure of the name... didn't write it down first but it has the following in the folder name IE6SP1 - 20060725 <-- make sure it is the one with the latest date.) Open the folder and look for the uninstall file. Uninstalled the update, restarted and am back in business.

# re: IE August 2006 Security Update is now available

Sunday, August 20, 2006 3:27 PM by Paul Lynch
@ Steve Thornton

maybe you should consider testing any security fixes before you blindly deploy them into your production environment.

I'm glad you don't work on any servers I am responsible for.

And as for your childish comments about Microsoft Update.... well, just grow up... I was suggesting that people avoid filesharing web sites with good reason... you never know what nasties you may inadvertently pick up...

Have a nice day....

Paul

# re: IE August 2006 Security Update is now available

Monday, August 21, 2006 3:39 PM by Chris A
All fine since Friday evening - my Win 2000, IE6, SP4 started crashing again every 5 minutes or so starting around 1PM this afternoon - have re-booted twice.

# re: IE August 2006 Security Update is now available

Tuesday, August 22, 2006 10:02 AM by Jim S
Is the update to the update out yet? I can't find the dang thing.

# re: IE August 2006 Security Update is now available

Tuesday, August 22, 2006 12:01 PM by John M
At noon it looks like the update page has adopted the same scheduling as Vista - I wouldn't hold my breath waiting

# re: IE August 2006 Security Update is now available

Tuesday, August 22, 2006 2:14 PM by AHH
I was having the same problem.  In addition to the same browswer crashes, I could not log on to my CBS Sportsline account for Fantasy Football.  
I removed the 3 Security updates for windows media player and have not had any problems since.  I found your site very interesting and thanks for the info.

# IEBlog IE August 2006 Security Update is now available | Paid Surveys

# IEBlog IE August 2006 Security Update is now available | Green Tea Fat Burner

# IEBlog IE August 2006 Security Update is now available | Toe Nail Fungus

# IEBlog IE August 2006 Security Update is now available | debt solutions

New Comments to this post are disabled
 
Page view tracker