* Anyone having problems with IE crashing after August patches *

[winchester73]

There is a problem with IE6 SP1 on some XP and Win2k machines after applying the August patches.

Info:  http://support.microsoft.com/kb/923762/en-us

The re-release will NOT be on 8/22 as previously indicated ... it needs further testing.

[Corrine]

It has effected two major web-based off-the-shelf programs used where I work.  I submitted a request for the hotfix to be pushed out to my machine at work today.  The way our machines are set up, if you have Admin rights on your PC, for some reason, the "user installed applications" don't work. 

[winchester73]

All 3 of my Win2k boxes are crashing quite often ... it is a bit annoying.  I hope the 'fix' is released shortly.

[winchester73]

Just saw this:  http://www.securityfocus.com/news/11408/1

:(

Microsoft patch opens users to attack
Robert Lemos, SecurityFocus 2006-08-22

UPDATE: Microsoft continued to work on Tuesday to create a fix for an exploitable flaw introduced by the company's latest security update to Internet Explorer.

The flaw, initially thought to only crash Internet Explorer, actually allows an attacker to run code on computers running Windows 2000 and Windows XP Service Pack 1 that have applied the August cumulative update to Internet Explorer 6 Service Pack 1, security firm eEye Digital Security told SecurityFocus on Tuesday. The update, released on August 8, fixed eight security holes but also introduced a bug of its own, according to Marc Maiffret, chief hacking officer for the security firm, which notified Microsoft last week that the issue is exploitable.

By the following day, network administrators and users began complaining that the update, MS06-042, caused Internet Explorer to crash when browsing some sites. Three days later, security researchers at eEye discovered that the issue could be used to not just crash the browser, but to compromise PCs running Windows XP SP1 and Windows 2000. Other security researchers have also reported the issue to Microsoft, Maiffret said.

There are reports that this is also affecting XP SP2, contrary to previous comments.

[mitch]

maybe a new patch to fix the patch

http://news.com.com/Microsoft+fixes+troubled+IE+patch/2100-1002_3-6109347.html?tag=nefd.top

and maybe all will be well again ;-)

[Corrine]

Yup.  Its official now.

V2.0 (August 24, 2006): Bulletin reissued and updated with additional information and vulnerability details affecting Internet Explorer 6 Service Pack 1 customers.

http://www.microsoft.com/technet/security/Bulletin/MS06-042.mspx

[winchester73]

********************************************************************
Title: Microsoft Security Bulletin Re-Releases
Issued: August 24, 2006
********************************************************************

Summary
=======
The following bulletins have undergone a major revision increment.
Please see the appropriate bulletin for more details.

  * MS06-042

Bulletin Information:
=====================

* MS06-042

- http://www.microsoft.com/technet/security/bulletin/ms06-042.mspx
- Reason for Revision: Bulletin reissued and updated with
    additional information and vulnerability details affecting
    Internet Explorer 6 Service Pack 1 customers. 
- Originally posted: August 8, 2006
- Updated: August 24, 2006
- Bulletin Severity Rating: Critical
- Version: 2.0
       
********************************************************************