Updated: July 14, 2020 (January 17, 2005)

Jan. 2005 Update Summary

Michael analyzed and wrote about Microsoft's operating systems, including the Windows client OS, as well as compliance and governance. Michael... more

Three updates, two critical and one important, were issued in Jan. 2005. All of the vulnerabilities could allow an attacker to take control of an unpatched computer. The security update for MS05-001 prevents the creation of an instance of the HTML Help ActiveX control in HTML content that is served from outside the Local Machine zone, which could prevent some Web-based applications from functioning correctly.

Bulletin	Severity	Vulnerability Impact	Affected Versions
MS05-001 Vulnerability in HTML Help Could Allow Code Execution (890175)	Critical	Remote code execution	Windows 2000 SP3 and SP4 Windows XP SP1 and SP2 Windows XP 64-Bit Edition SP1 Windows XP 64-Bit Edition Version 2003 Windows Server 2003 Windows Server 2003 64-Bit Edition Windows 98, 98 SE, and Windows Me
MS05-002 Vulnerability in Cursor and Icon Format Handling Could Allow Remote Code Execution (891711)	Critical	Remote code execution	Windows NT Server 4.0 SP6a Windows

Atlas Members have full access

Get access to this and thousands of other unbiased analyses, roadmaps, decision kits, infographics, reference guides, and more, all included with membership. Comprehensive access to the most in-depth and unbiased expertise for Microsoft enterprise decision-making is waiting.

Membership Options

Already have an account? Login Now