Update Rollup 1 for Windows XP Is Available

SUMMARY

Microsoft has released Update Rollup 1 for Microsoft Windows XP. An update rollup is a cumulative set of hotfixes, security patches, critical updates, and updates that are packaged together for easy deployment. Update Rollup 1 for Windows XP is a single package that includes many previously released critical updates for Windows XP. For additional information about the critical updates that are included in this update rollup, click the following article numbers to view the articles in the Microsoft Knowledge Base:

810565 Hyperlinks Open in Internet Explorer Instead of in Default Browser or Help and Support Center

821557 MS03-027: An Unchecked Buffer in the Windows Shell Could Permit Your System to Be Compromised

811493 MS03-013: Buffer Overrun in Windows Kernel Message Handling Could Lead to Elevated Privileges

328310 MS02-071: Flaw in Windows WM_TIMER Message Handling Can Enable Privilege Elevation

823980 MS03-026: Buffer Overrun in RPC May Allow Code Execution

331953 MS03-010: Flaw in RPC Endpoint Mapper Could Allow Denial of Service Attacks

323255 MS02-055: Unchecked Buffer in Windows Help Facility May Allow Attacker to Run Code

810577 MS03-005: Unchecked Buffer in Windows Redirector May Permit Privilege Elevation

815021 MS03-007: Unchecked Buffer in Windows Component May Cause Web Server Compromise

329115 MS02-050: Certificate Validation Flaw Might Permit Identity Spoofing

329170 MS02-070: Flaw in SMB Signing May Permit Group Policy to Be Modified

817606 MS03-024: Buffer Overrun in Windows Could Lead to Data Corruption

814033 Cannot Install Driver Updates from the Windows Update Web Site

810833 MS03-001: Unchecked Buffer in the Locator Service Might Permit Code to Run

823559 MS03-023: Buffer Overrun in the HTML Converter Could Allow Code Execution

329048 MS02-054: Unchecked Buffer in File Decompression Functions May Allow Attacker to Run Code

329441 You Cannot Create a Network Connection After You Restore Windows XP

817287 Windows Update 643 Error and the Catalog Database

329390 MS02-072: Unchecked Buffer in Windows Shell Might Permit System Compromise

329834 MS02-063: Unchecked Buffer in PPTP Implementation May Permit Denial-of-Service Attacks

811630 HTML Help Update to Limit Functionality When It Is Invoked with the window.showHelp Method

824146 MS03-039: A Buffer Overrun in RPCSS May Allow Code Execution

Note Update Rollup 1 for Windows XP is not available for 64-bit versions of Windows XP.

MORE INFORMATION

Download Information

To download and to install the express-installation version of this update rollup (2.7megabytes), visit the following Microsoft Windows Update Web site, and then install critical update 826939:

http://windowsupdate.microsoft.com

Notes

The express installation is not available for Windows XP-based computers that do not have Windows XP Service Pack 1 (SP1) installed. For additional information about how to obtain SP1, click the following article number to view the article in the Microsoft Knowledge Base:
322389 How to Obtain the Latest Windows XP Service Pack
The express installation is not available through Automatic Updates, the Windows Update Catalog, Software Update Services (SUS), or the Microsoft Download Center.
The express installation is available for Windows XP SP1-based computers that do not have one or more of the critical updates that are included in this update rollup.

Administrators can download the standard version of this update rollup (8.96 megabytes) to deploy to multiple Windows XP-based or Windows XP SP1-based computers. The standard package is available from the Microsoft Download Center, from the Microsoft Windows Update Catalog, or by using SUS. To download the standard package from the Windows Update Catalog, search for this article ID number by using the Advanced Search Options feature in the Windows Update Catalog. For additional information about how to download updates from the Windows Update Catalog, click the following article number to view the article in the Microsoft Knowledge Base:

323166 HOW TO: Download Windows Updates and Drivers from the Windows Update Catalog

The following file is available for download from the Microsoft Download Center:

Download the 826939 package now.

Release Date: October 15, 2003

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.

Notes

SUS administrators can deploy the standard version of this update rollup by using Automatic Updates.
You can install this update rollup on Windows XP-based computers without SP1, but Microsoft recommends that you also install SP1 and any other critical updates and security patches that are not included in this update rollup. Installing SP1 and any other critical updates and security patches that are not included in this update rollup installs the latest security and reliability updates for Windows XP. For additional information about how to obtain SP1, click the following article number to view the article in the Microsoft Knowledge Base:
322389 How to Obtain the Latest Windows XP Service Pack

For additional information about how to keep your Windows XP-based computer current, click the following article number to view the article in the Microsoft Knowledge Base:

311047 HOW TO: Keep Your Windows Computer Up-to-Date

Prerequisites

The express-installation version of this update rollup requires Windows XP SP1. The standard version of this update rollup requires the released version of Windows XP or Windows XP SP1. For additional information about how to obtain SP1, click the following article number to view the article in the Microsoft Knowledge Base:

322389 How to Obtain the Latest Windows XP Service Pack

Installation Information

The standard version of this update rollup supports the following Setup switches:

/?: Show the list of installation switches.
/u: Use Unattended mode.
/f: Force other programs to quit when the computer shuts down.
/n: Do not back up files for removal.
/o: Overwrite OEM files without prompting.
/z: Do not restart when the installation is complete.
/q: Use Quiet mode (no user interaction).
/l: List the installed hotfixes.
/x: Extract the files without running Setup.

To verify that the update rollup is installed, use the Qfecheck.exe tool or use the Microsoft Baseline Security Analyzer (MBSA) tool. For additional information about the Qfecheck.exe tool, click the following article number to view the article in the Microsoft Knowledge Base:

282784 Qfecheck.exe Verifies the Installation of Windows 2000 and Windows XP Hotfixes

For additional information about the MBSA tool, click the following article number to view the article in the Microsoft Knowledge Base:

320454 Microsoft Baseline Security Analyzer Version 1.1.1 Is Available

You may also be able to verify that this update rollup is installed by confirming that one of the following registry keys exists.

Windows XP SP1:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP2\826939

Windows XP:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP1\826939

Note When you install this update rollup, any existing entries in the Add or Remove Programs tool are removed for the critical updates that are included in this update rollup. Therefore, some tools may report that some of the included critical updates are not installed. For example, Marimba Software Change-Management solutions use the registry entries for the Add or Remove Programs tool that are associated with each critical update to confirm that the update is installed. Therefore, Marimba Software Change-Management solutions will incorrectly report that you are missing the individual critical updates that are included in this update rollup.

Deployment Information

To install the update rollup without any user intervention, use the following command:

windowsxp-kb826939-x86-enu.exe -u -q

To install the update rollup without forcing the computer to restart, use the following command:

windowsxp-kb826939-x86-enu.exe -z

Note You can combine these switches in one command line.

For information about how to deploy this update rollup by using Software Update Services (SUS), visit the following Microsoft Web site:

http://www.microsoft.com/windows2000/windowsupdate/sus/susoverview.asp

Restart Requirement

You must restart your computer after you apply this update rollup.

Removal Information

To remove this update rollup, use the Add or Remove Programs tool in Control Panel to remove 826939. Note When you install this update rollup, any existing entries for the Add or Remove Programs tool are removed for the critical updates that are included in this update rollup. When you remove this update rollup, the previous entries for the Add or Remove Programs tool for the individual critical updates that are included in this update rollup are restored.

System administrators can use the Spuninst.exe utility to remove this update rollup. Spuninst.exe is located in the %Windir%\$NTUninstallKB826939$\Spuninst folder. The utility supports the following Setup switches:

/?: Show the list of installation switches.
/u: Use Unattended mode.
/f: Force other programs to quit when the computer shuts down.
/z: Do not restart when the installation is complete.
/q: Use Quiet mode (no user interaction).

Security Patch Replacement Information

This update rollup does not replace any other security patches.

File Information

The English version of this update rollup has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

   Date         Time   Version           Size       File name
   -------------------------------------------------------------------------
   23-Sep-2002  22:10  5.131.2600.1123     544,256  Crypt32.dll   (pre-SP1)
   09-Nov-2002  12:47  5.2.3644.0           10,752  Hh.exe        (pre-SP1)
   20-Dec-2002  01:35  5.2.3735.0          516,192  Hhctrl.ocx    (pre-SP1)
   13-Jan-2003  17:27  5.2.3644.0           37,888  Hhsetup.dll   (pre-SP1)
   27-Jun-2003  19:38  2003.1100.5426.0    311,864  Html32.cnv    (pre-SP1)
   13-Jan-2003  17:27  5.2.3644.0          143,872  Itircl.dll    (pre-SP1)
   13-Jan-2003  17:27  5.2.3644.0          122,368  Itss.dll      (pre-SP1)
   04-Dec-2002  01:55  5.1.2600.108         68,608  Locator.exe   (pre-SP1)
   18-Nov-2002  18:17  5.1.2600.106        391,936  Mrxsmb.sys    (pre-SP1)
   27-Jun-2003  19:38  2003.1100.5426.0    116,288  Msconv97.dll  (pre-SP1)
   31-Jan-2003  19:20  5.1.2600.109        238,080  Newdev.dll    (pre-SP1)
   02-May-2003  18:03  5.1.2600.114        651,264  Ntdll.dll     (pre-SP1)
   13-Dec-2002  01:08  5.1.2600.108      1,848,320  Ntkrnlmp.exe  (pre-SP1)
   13-Dec-2002  01:09  5.1.2600.108      1,902,080  Ntkrnlpa.exe  (pre-SP1)
   13-Dec-2002  01:09  5.1.2600.108      1,874,944  Ntkrpamp.exe  (pre-SP1)
   13-Dec-2002  01:08  5.1.2600.108      1,879,936  Ntoskrnl.exe  (pre-SP1)
   25-Aug-2003  22:29  5.1.2600.118      1,093,632  Ole32.dll     (pre-SP1)
   02-Oct-2002  01:43  5.1.2600.101         46,208  Raspptp.sys   (pre-SP1)
   25-Aug-2003  22:29  5.1.2600.109        439,296  Rpcrt4.dll    (pre-SP1)
   25-Aug-2003  22:29  5.1.2600.118        204,288  Rpcss.dll     (pre-SP1)
   11-Jun-2003  20:53  6.0.2600.115      8,223,744  Shell32.dll   (pre-SP1)
   19-Sep-2002  18:27  6.0.2600.101        126,464  Shmedia.dll   (pre-SP1)
   14-Nov-2002  19:42  5.1.2600.101        218,624  Srrstr.dll    (pre-SP1)
   28-Mar-2003  22:02  5.1.2600.112        322,304  Srv.sys       (pre-SP1)
   08-Oct-2002  22:19                    1,053,822  Sysmain.sdb   (pre-SP1)
   22-Nov-2002  19:16  5.1.2600.104        528,896  User32.dll    (pre-SP1)
   22-Oct-2002  00:45  5.1.2600.104      1,671,168  Win32k.sys    (pre-SP1)
   22-Nov-2002  19:16  5.1.2600.104        272,384  Winsrv.dll    (pre-SP1)
   25-Sep-2002  19:21  6.0.2600.101        316,928  Zipfldr.dll   (pre-SP1)
   20-Nov-2002  18:50  5.1.2600.1143       179,200  Accwiz.exe    (with SP1)
   23-Sep-2002  22:10  5.131.2600.1123     544,256  Crypt32.dll   (with SP1)
   26-Mar-2003  00:40  5.1.2600.1190        53,760  Cryptsvc.dll  (with SP1)
   09-Nov-2002  12:47  5.2.3644.0           10,752  Hh.exe        (with SP1)
   20-Dec-2002  01:35  5.2.3735.0          516,192  Hhctrl.ocx    (with SP1)
   10-Jan-2003  21:43  5.2.3644.0           37,888  Hhsetup.dll   (with SP1)
   27-Jun-2003  19:38  2003.1100.5426.0    311,864  Html32.cnv    (with SP1)
   10-Jan-2003  21:43  5.2.3644.0          143,872  Itircl.dll    (with SP1)
   10-Jan-2003  21:43  5.2.3644.0          122,368  Itss.dll      (with SP1)
   04-Dec-2002  01:50  5.1.2600.1147        68,608  Locator.exe   (with SP1)
   20-Nov-2002  18:50  5.1.2600.1143        67,584  Magnify.exe   (with SP1)
   20-Nov-2002  19:22  5.1.2600.1143       230,400  Migwiz.exe    (with SP1)
   18-Nov-2002  18:27  5.1.2600.1143       392,576  Mrxsmb.sys    (with SP1)
   27-Jun-2003  19:38  2003.1100.5426.0     116,28  Msconv97.dll  (with SP1)
   20-Nov-2002  18:50  5.1.2600.1143        51,200  Narrator.exe  (with SP1)
   31-Jan-2003  23:46  5.1.2600.1164       238,080  Newdev.dll    (with SP1)
   01-May-2003  23:56  5.1.2600.1217       654,336  Ntdll.dll     (with SP1)
   24-Apr-2003  15:57  5.1.2600.1151     1,892,864  Ntkrnlmp.exe  (with SP1)
   24-Apr-2003  15:57  5.1.2600.1151     1,949,440  Ntkrnlpa.exe  (with SP1)
   24-Apr-2003  15:57  5.1.2600.1151     1,921,536  Ntkrpamp.exe  (with SP1)
   24-Apr-2003  15:57  5.1.2600.1151     1,925,760  Ntoskrnl.exe  (with SP1)
   25-Aug-2003  18:53  5.1.2600.1263     1,172,992  Ole32.dll     (with SP1)
   20-Nov-2002  18:50  5.1.2600.1143       212,480  Osk.exe       (with SP1)
   27-Nov-2002  18:50  5.1.2600.1143        94,208  Pchshell.dll  (with SP1)
   02-Oct-2002  00:52  5.1.2600.1129        46,208  Raspptp.sys   (with SP1)
   25-Aug-2003  18:53  5.1.2600.1254       532,480  Rpcrt4.dll    (with SP1)
   25-Aug-2003  18:53  5.1.2600.1263       260,608  Rpcss.dll     (with SP1)
   27-Nov-2002  18:50  6.0.2800.1145     1,331,200  Shdocvw.dll   (with SP1)
   11-Jun-2003  20:43  6.0.2800.1233     8,240,640  Shell32.dll   (with SP1)
   30-Sep-2002  17:58  6.0.2800.1125       125,440  Shmedia.dll   (with SP1)
   14-Nov-2002  20:50  5.1.2600.1142       226,816  Srrstr.dll    (with SP1)
   28-Mar-2003  18:54  5.1.2600.1193       322,048  Srv.sys       (with SP1)
   01-Nov-2002  21:13                    1,080,070  Sysmain.sdb   (with SP1)
   27-Nov-2002  18:50  6.0.2800.1143       445,440  Urlmon.dll    (with SP1)
   01-Nov-2002  22:26  5.1.2600.1134       528,896  User32.dll    (with SP1)
   23-Oct-2002  15:55  5.1.2600.1134     1,694,336  Win32k.sys    (with SP1)
   01-Nov-2002  22:26  5.1.2600.1134       272,896  Winsrv.dll    (with SP1)
   25-Sep-2002  22:18  6.0.2800.1126       316,928  Zipfldr.dll   (with SP1)

You can also verify the files that this update rollup installed by reviewing the following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP2\826939\Filelist

The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.

The information in this article applies to:

Microsoft Windows XP Tablet PC Edition
Microsoft Windows XP Media Center Edition
Microsoft Windows XP Home Edition
Microsoft Windows XP Professional
Microsoft Windows XP Home Edition SP1
Microsoft Windows XP Professional SP1

Last Reviewed:	10/15/2003 (1.0)
Keywords:	kbQFE kbSecurity kbWinXPpreSP2fix kbBug kbfix KB826939

Article KB 826939