Microsoft Security Bulletin MS04-038 [Critical]Updated: November 9, 2004

Microsoft Security Bulletin MS04-038[Critical]Updated: November 9, 2004

--------------------------------------------------------------------------------

Cumulative Security Update for Internet Explorer (834707)
Issued: October 12, 2004
Updated: November 9, 2004
Version: 1.1

Summary
Who should read this document: Customers who use Microsoft Windows

Impact of Vulnerability: Remote Code Execution

Maximum Severity Rating: Critical

Recommendation: Customers should install the update immediately.

Security Update Replacement: This update replaces the update that is included with Microsoft Security Bulletin MS04-025. That update is also a cumulative update.


Affected Software:

• Microsoft Windows NT Server 4.0 Service Pack 6a

• Microsoft Windows NT Server 4.0 Terminal Server Edition Service Pack 6

• Microsoft Windows 2000 Service Pack 3 and Microsoft Windows 2000 Service Pack 4

• Microsoft Windows XP, Microsoft Windows XP Service Pack 1, and Microsoft Windows XP Service Pack 2

• Microsoft Windows XP 64-Bit Edition Service Pack 1

• Microsoft Windows XP 64-Bit Edition Version 2003

• Microsoft Windows Server 2003

• Microsoft Windows Server 2003 64-Bit Edition

• Microsoft Windows 98, Microsoft Windows 98 Second Edition (SE), and Microsoft Windows Millennium Edition (Me) – Review the FAQ section of this bulletin for details about these operating systems


Please note this update was first issued on the October 12-10-04 and this update today refers to that update.

Revisions:

• V1.0 (October 12, 2004): Bulletin published

V1.1 (November 9, 2004): Updated the ActiveX control name from “Heartbeat.ocx” to “Hrtbeat.ocx”, added GUID information to the Security Update Information section, and added acknowledgement to Liu Die Yu for working with us responsibly on two vulnerabilities addressed by this update.

http://www.microsoft.com/technet/security/Bulletin/MS04-038.mspx