MS02-023: May 15, 2002, Cumulative Patch for Internet Explorer (321232)

SUMMARY

Microsoft has released a cumulative patch for Internet Explorer that includes updates for the issues that are described in the following Microsoft Knowledge Base articles:

316059 MS02-005: February 11, 2002, Cumulative Patch for Internet Explorer

319182 MS02-015: March 28, 2002, Cumulative Patch for Internet Explorer

322921 MS02-023: Patch Available for Cross-Site Scripting in Local HTML Resource Vulnerability

322923 MS02-023: Patch Available for Zone Spoofing Through Malformed Web Page Vulnerability

322924 MS02-023: Patch Available for Local Information Disclosure Through HTML Element Vulnerability

322926 MS02-023: Patch Available for Script in Cookies Reading Cookies Vulnerability

322927 MS02-023: Patch Available for Variants of the Content Disposition Vulnerability

322928 MS02-023: Patch Available to Disable Frames in the Restricted Sites Zone

For additional information about known issues after you install this patch, click the article number below to view the article in the Microsoft Knowledge Base:

325192 Issues After You Install Updates to Internet Explorer or Windows

For additional information about the latest service pack for Internet Explorer 6, click the article number below to view the article in the Microsoft Knowledge Base:

328548 How to Obtain the Latest Internet Explorer 6 Service Pack

To resolve this problem, obtain the latest service pack for Microsoft Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

260910 How to Obtain the Latest Windows 2000 Service Pack

MORE INFORMATION

For more information about this patch, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/bulletin/MS02-023.mspx

NOTE: You must restart your computer after you apply this update. For additional information about the switches that you can use to apply this update, click the article number below to view the article in the Microsoft Knowledge Base:

197147 Common Command-Line Switches for Self-Installing Update Files

For example, the following command line installs the update without any user intervention and then does not force the computer to restart:

filename /q:a /r:n

WARNING: Your computer is vulnerable until you restart it.

Internet Explorer 6

The following file is available for download from the Microsoft Download Center:

Download the Q321232 package now

Release Date: May 15, 2002

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file. The English version of this fix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

   Date         Time   Version        Size       File name
   ----------------------------------------------------------
   26-Apr-2002  01:07  6.0.2716.2200  2,757,632  Mshtml.dll       
   05-Mar-2002  00:09  6.0.2715.400     548,864  Shdoclc.dll      
   15-Apr-2002  19:42  6.0.2716.1500  1,336,320  Shdocvw.dll      
   26-Apr-2002  01:11  6.0.2715.400     109,568  Url.dll          
   17-Apr-2002  18:56  6.0.2716.1500    480,768  Urlmon.dll       
   05-Mar-2002  13:56  6.0.2715.400     582,656  Wininet.dll

IMPORTANT: If you use multi-language menus and dialogs for Internet Explorer, then some menu or dialog box items in Internet Explorer may revert to English after you apply this fix. For additional information about this issue and how to resove it, click the article number below to view the article in the Microsoft Knowledge Base:

323916 Internet Explorer Pluggable UI Does Not Work with Cumulative Patch MS02-023 (or MS02-015)

back to the top

Internet Explorer 5.5 Service Pack 2

The following file is available for download from the Microsoft Download Center:

Download the Q321232 package now

Release Date: May 15, 2002

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on secure servers that prevent any unauthorized changes to the file.

The English version of this fix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

   Date         Time   Version         Size       File name
   -----------------------------------------------------------
   24-Apr-2002  01:43  5.50.4916.2300  2,751,760  Mshtml.dll       
   18-Apr-2002  11:38  5.50.4916.1800  1,149,200  Shdocvw.dll      
   05-Mar-2002  01:53  5.50.4915.500      84,240  Url.dll          
   18-Apr-2002  11:39  5.50.4916.1800    451,344  Urlmon.dll       
   05-Mar-2002  15:18  5.50.4915.500     480,528  Wininet.dll

Internet Explorer 5.5 Service Pack 1

The following file is available for download from the Microsoft Download Center:

Download the Q321232 package now

Release Date: May 15, 2002

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on secure servers that prevent any unauthorized changes to the file.

The English version of this fix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

   Date         Time   Version         Size       File name
   -----------------------------------------------------------
   18-Dec-2001  15:48  5.50.4724.1700     79,120  Actxprxy.dll     
   18-Dec-2001  01:45  5.50.4724.1700     46,864  Digest.dll       
   24-Apr-2002  14:41  5.50.4728.2300  2,749,712  Mshtml.dll       
   18-Dec-2001  01:42  5.50.4724.1700    408,336  Mshtmled.dll     
   18-Dec-2001  01:43  5.50.4724.1700     71,952  Plugin.ocx
   18-Dec-2001  15:48  5.50.4724.1700    494,352  Shdoc401.dll     
   18-Apr-2002  12:46  5.50.4728.1800  1,148,688  Shdocvw.dll      
   18-Dec-2001  14:52  5.50.4724.1700     23,312  Shfolder.dll     
   05-Mar-2002  01:53  5.50.4915.500      84,240  Url.dll          
   18-Apr-2002  12:47  5.50.4728.1800    450,832  Urlmon.dll       
   06-Mar-2002  16:41  5.50.4727.700     480,528  Wininet.dll

Internet Explorer 5.01 Service Pack 2 (on Windows 2000 and Windows NT 4.0 only)

This update is only for customers who are running Internet Explorer 5.01 Service Pack 2 on Windows 2000 Service Pack 2 or Windows NT 4.0 Service Pack 6a. If you are running Internet Explorer 5.01 on any other version of Windows, upgrade to Internet Explorer 5.5 Service Pack 2 or later, and then apply this update.

The following file is available for download from the Microsoft Download Center:

Download the Q321232 package now

Release Date: May 15, 2002

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on secure servers that prevent any unauthorized changes to the file.

The English version of this fix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.


   Date         Time   Version        Size       File name
   ----------------------------------------------------------
   26-Apr-2002  11:56  5.0.3504.2500  2,350,864  Mshtml.dll       
   29-Apr-2002  20:20  5.0.3504.2500  1,106,192  Shdocvw.dll      
   05-Mar-2002  01:53  5.50.4915.500     84,240  Url.dll          
   26-Apr-2002  11:57  5.0.3504.2500    451,344  Urlmon.dll       
   06-Mar-2002  14:43  5.0.3502.4856    461,072  Wininet.dll