MS05-002: Vulnerability in cursor and icon format handling could allow remote code execution

Microsoft has released security bulletin MS05-002. The security bulletin contains all the relevant information about the security update. This includes file manifest information and deployment options. To view the complete security bulletin, visit the following Microsoft Web site:

• Home users:
  
  
  http://www.microsoft.com/protect/computer/updates/bulletins/default.mspx
  
  
• IT professionals:
  
  
  http://www.microsoft.com/technet/security/bulletin/ms05-002.mspx

Known issues

The following known issues only apply to the packages that were re-released on April 12, 2005:

• Uninstalling security update 891711 removes the entries from the registry and deletes the files from the system. However, uninstalling security update 891711 leaves an empty folder on the system.
• On a computer that is running Windows Millennium Edition, Microsoft System Information (MSINFO32) does not list security update 891711. The Windows 98 and Windows 98 Second Edition version of MSINFO32 does list security update 891711 (Kb891711.exe). Most third-party applications that display processes will list Kb891711.exe.
• On a computer that is running Windows Millennium Edition, Windows 98 Second Edition, or Windows 98, System Configuration Utility (MSCONFIG) only shows Kb891711.exe on the Startup tab.
• If you disable the previous release through MSCONFIG, MSCONFIG may have two entries of Kb891711.exe after you install the version of security update 891711 that was re-released on April 12, 2005. One of these entries is selected, and one of these entries is not selected. When you select the entry that is not selected, MSCONFIG prompts you to restart the computer. After you restart the computer, only one entry is listed, and the one entry is selected. This behavior occurs because of the behavior of MSCONFIG and does not affect the ability of security update 891711 to help protect the computer as long as one of the entries is selected.