Microsoft Home
   All Products   |   Support   |   Search   |   Microsoft.com Guide  
Microsoft.com Home Page
  Home     Search     FAQs     Downloads     Newsgroups     Customer Service     Contact Us  
  Send   
  Print   
  Help   


MS02-023: May 15, 2002, Cumulative Patch for Internet Explorer (Q321232)


The information in this article applies to:

  • Microsoft Internet Explorer version 6 for Windows 98
  • Microsoft Internet Explorer version 6 for Windows 98 Second Edition
  • Microsoft Internet Explorer version 6 for Windows Millennium Edition
  • Microsoft Internet Explorer version 6 for Windows NT 4.0
  • Microsoft Internet Explorer version 6 for Windows 2000
  • Microsoft Internet Explorer version 6 for Windows XP
  • Microsoft Internet Explorer versions 5.5 Service Pack 1 , 5.5 Service Pack 2 , for Windows 95
  • Microsoft Internet Explorer versions 5.5 Service Pack 1 , 5.5 Service Pack 2 , for Windows 98
  • Microsoft Internet Explorer versions 5.5 Service Pack 1 , 5.5 Service Pack 2 , for Windows 98 Second Edition
  • Microsoft Internet Explorer versions 5.5 Service Pack 1 , 5.5 Service Pack 2 , for Windows Millennium Edition
  • Microsoft Internet Explorer versions 5.01 Service Pack 2 , 5.5 Service Pack 1 , 5.5 Service Pack 2 , for Windows 2000
  • Microsoft Internet Explorer versions 5.01 Service Pack 2 , 5.5 Service Pack 1 , 5.5 Service Pack 2 , for Windows NT 4.0



SUMMARY

Microsoft has released a cumulative patch for Internet Explorer that includes updates for the issues that are described in the following Microsoft Knowledge Base articles:

Q316059 MS02-005: February 11, 2002, Cumulative Patch for Internet Explorer
Q319182 MS02-015: March 28, 2002, Cumulative Patch for Internet Explorer
Q322921 MS02-023: Patch Available for Cross-Site Scripting in Local HTML Resource Vulnerability
Q322923 MS02-023: Patch Available for Zone Spoofing Through Malformed Web Page Vulnerability
Q322924 MS02-023: Patch Available for Local Information Disclosure Through HTML Element Vulnerability
Q322926 MS02-023: Patch Available for Script in Cookies Reading Cookies Vulnerability
Q322927 MS02-023: Patch Available for Variants of the Content Disposition Vulnerability
Q322928 MS02-023: Patch Available to Disable Frames in the Restricted Sites Zone
Notes:
  • After you apply this update, the Open button in the Open dialog box is unavailable if the Content-Type that is specified in the header does not match the file name that is specified in the Content-Disposition header. This behavior is by design for all cases, unless you try to open an .rtf file. To open an .rtf file, save the file, and then open it by using Windows Explorer.


  • After you apply this update, Active Server Pages (ASP) cookies are blocked if the server name contains non-DNS supported characters. For example, you cannot use any underscore characters ("_") in the server name.



MORE INFORMATION

For more information about this patch, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/bulletin/MS02-023.asp
NOTE : You must restart your computer after you apply this update. For additional information about the switches that you can use to apply this update, click the article number below to view the article in the Microsoft Knowledge Base:
Q197147 Common Command-Line Switches for Self-Installing Update Files

Internet Explorer 6

The following file is available for download from the Microsoft Download Center:
[GRAPHIC: 
Download
] Download the Q321232 package now
Release Date: May 15, 2002

For additional information about how to download Microsoft Support files, click the article number below to view the article in the Microsoft Knowledge Base:
Q119591 How to Obtain Microsoft Support Files from Online Services
Microsoft used the most current virus detection software available on the date of posting to scan this file for viruses. After it is posted, the file is housed on secure servers that prevent any unauthorized changes to the file.

The English version of this fix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.
   Date         Time   Version        Size       File name
   ----------------------------------------------------------
   18-Aug-2001  02:43  6.0.2600.0        91,136  Advpack.dll      
   26-Apr-2002  01:07  6.0.2716.2200  2,757,632  Mshtml.dll       
   05-Mar-2002  00:09  6.0.2715.400     548,864  Shdoclc.dll      
   15-Apr-2002  19:42  6.0.2716.1500  1,336,320  Shdocvw.dll      
   26-Apr-2002  01:11  6.0.2715.400     109,568  Url.dll          
   17-Apr-2002  18:56  6.0.2716.1500    480,768  Urlmon.dll       
   06-Jun-2000  20:43  4.71.704.0         2,272  W95inf16.dll     
   06-Jun-2000  20:43  4.71.16.0          4,608  W95inf32.dll     
   05-Mar-2002  13:56  6.0.2715.400     582,656  Wininet.dll
back to the top

Internet Explorer 5.5 Service Pack 2

The following file is available for download from the Microsoft Download Center:
[GRAPHIC: 
Download
] Download the Q321232 package now
Release Date: May 15, 2002

For additional information about how to download Microsoft Support files, click the article number below to view the article in the Microsoft Knowledge Base:
Q119591 How to Obtain Microsoft Support Files from Online Services
Microsoft used the most current virus detection software available on the date of posting to scan this file for viruses. After it is posted, the file is housed on secure servers that prevent any unauthorized changes to the file.

The English version of this fix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.
   Date         Time   Version         Size       File name
   -----------------------------------------------------------
   06-Jun-2000  20:43  5.50.4134.600      92,432  Advpack.dll      
   24-Apr-2002  01:43  5.50.4916.2300  2,751,760  Mshtml.dll       
   18-Apr-2002  11:38  5.50.4916.1800  1,149,200  Shdocvw.dll      
   05-Mar-2002  01:53  5.50.4915.500      84,240  Url.dll          
   18-Apr-2002  11:39  5.50.4916.1800    451,344  Urlmon.dll       
   06-Jun-2000  20:43  4.71.704.0          2,272  W95inf16.dll     
   06-Jun-2000  20:43  4.71.16.0           4,608  W95inf32.dll     
   05-Mar-2002  15:18  5.50.4915.500     480,528  Wininet.dll      
back to the top

Internet Explorer 5.5 Service Pack 1

The following file is available for download from the Microsoft Download Center:
[GRAPHIC: 
Download
] Download the Q321232 package now
Release Date: May 15, 2002

For additional information about how to download Microsoft Support files, click the article number below to view the article in the Microsoft Knowledge Base:
Q119591 How to Obtain Microsoft Support Files from Online Services
Microsoft used the most current virus detection software available on the date of posting to scan this file for viruses. After it is posted, the file is housed on secure servers that prevent any unauthorized changes to the file.

The English version of this fix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.
   Date         Time   Version         Size       File name
   -----------------------------------------------------------
   18-Dec-2001  15:48  5.50.4724.1700     79,120  Actxprxy.dll     
   06-Jun-2000  20:43  5.50.4134.600      92,432  Advpack.dll      
   18-Dec-2001  01:45  5.50.4724.1700     46,864  Digest.dll       
   24-Apr-2002  14:41  5.50.4728.2300  2,749,712  Mshtml.dll       
   18-Dec-2001  01:42  5.50.4724.1700    408,336  Mshtmled.dll     
   18-Dec-2001  01:43  5.50.4724.1700     71,952  Plugin.ocx
   18-Dec-2001  15:48  5.50.4724.1700    494,352  Shdoc401.dll     
   18-Apr-2002  12:46  5.50.4728.1800  1,148,688  Shdocvw.dll      
   18-Dec-2001  14:52  5.50.4724.1700     23,312  Shfolder.dll     
   05-Mar-2002  01:53  5.50.4915.500      84,240  Url.dll          
   18-Apr-2002  12:47  5.50.4728.1800    450,832  Urlmon.dll       
   06-Jun-2000  20:43  4.71.704.0          2,272  W95inf16.dll     
   06-Jun-2000  20:43  4.71.16.0           4,608  W95inf32.dll     
   06-Mar-2002  16:41  5.50.4727.700     480,528  Wininet.dll      
back to the top

Internet Explorer 5.01 Service Pack 2 (on Windows 2000 and Windows NT 4.0 only)

This update is only for customers who are running Internet Explorer 5.01 Service Pack 2 on Windows 2000 Service Pack 2 or Windows NT 4.0 Service Pack 6a . If you are running Internet Explorer 5.01 on any other version of Windows, upgrade to Internet Explorer 5.5 Service Pack 2 or later , and then apply this update.

The following file is available for download from the Microsoft Download Center:
[GRAPHIC: 
Download
] Download the Q321232 package now
Release Date: May 15, 2002

For additional information about how to download Microsoft Support files, click the article number below to view the article in the Microsoft Knowledge Base:
Q119591 How to Obtain Microsoft Support Files from Online Services
Microsoft used the most current virus detection software available on the date of posting to scan this file for viruses. After it is posted, the file is housed on secure servers that prevent any unauthorized changes to the file.

The English version of this fix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.
   Date         Time   Version        Size       File name
   ----------------------------------------------------------
   06-Jun-2000  20:43  5.50.4134.600     92,432  Advpack.dll      
   26-Apr-2002  11:56  5.0.3504.2500  2,350,864  Mshtml.dll       
   29-Apr-2002  20:20  5.0.3504.2500  1,106,192  Shdocvw.dll      
   05-Mar-2002  01:53  5.50.4915.500     84,240  Url.dll          
   26-Apr-2002  11:57  5.0.3504.2500    451,344  Urlmon.dll       
   06-Jun-2000  20:43  4.71.704.0         2,272  W95inf16.dll     
   06-Jun-2000  20:43  4.71.16.0          4,608  W95inf32.dll     
   06-Mar-2002  14:43  5.0.3502.4856    461,072  Wininet.dll      
back to the top


Published May 15 2002 7:02AM Issue Type kbbug
Last Modifed May 16 2002 8:10AM Additional Query Words
Keywords kbSecurity kbIE501preSP3Fix kbIE550PreSP3fix kbIE600preSP1fix

COMMENTS?

If you would like to briefly comment on this article, you can enter your remarks in the space below (up to 255 characters).


Submit Comments

Send  | Print  | Help 
 © 2002 Microsoft Corporation. All rights reserved.  Terms of use  Privacy statement  Accessibility