PA
Tue Jun 03 13:13:03 PDT 2008
Running WinXP SP2 here with Flash Player v9.0.124 installed. Flash.ocx
v6.0.79 is present on the machine but only in C:\I386. Flash9f.ocx is the
only ActiveX Control listed or enabled in IE Tools | Manage add-ons.
When MS06-069 was released, I was running a higher version of Flash Player
than v8.0.24.0
(cf.
http://www.adobe.com/support/security/bulletins/apsb06-11.html) and
MS06-069 was never offered.
Conclusion: If you're running a version of Flash Player higher than
v8.0.24.0,
install WinXP SP3, and Flash.ocx v6.0.79 is not enabled, the machine will
not
be vulnerable to the exploit patched by MS06-069 and MS06-069 should not be
offered.
That being said, it won't hurt to cover your bases and install MS06-069
manually.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin
http://aumha.net
DTS-L
http://dts-l.net/
Gary S. Terhune wrote:
> BFD. Most Windows users are running much older versions of Flash, anyway.
> After all, there's no Automatic Update for Flash. If you are any kind of
> knowledgeable user, you'd check your version of Flash every month, anyway,
> (or more often) because it is so prone to vulnerabilities. Or uninstall it
> completely. Likewise, whenever you make major changes to the Windows
> system,
> the responsible user checks WU to make sure nothing is broken, likewise
> Flash and Java and a few other intimately integrated components of IE I
> don't recall right now, probably because I don't let them in..
>
> Quote
> "That version of Flash Player, however, was superseded by Version
> 9.0.124.0
> on April 8, nearly two weeks before Microsoft decided SP3 was done by
> giving
> it a release to manufacturing (RTM) label and sending it out for
> distribution. "
>
> Two weeks! Such the HEIGHT of irresponsibility.
>
> Hey, this is a Windows 98 group. Why all this BS about Windows XP?
>
>
> "smith" <smith@nospam.com> wrote in message
> news:O%23R%23HDVxIHA.4564@TK2MSFTNGP06.phx.gbl...
>> smith <smith@nospam.com> wrote in
>> news:eAiOzDhwIHA.5124@TK2MSFTNGP04.phx.gbl:
>>
>>> Brian Livingston at Windows Secrets wrote:
>>>
>>> We usually skip publication on any 5th Thursdays that come
>>> around (such as May 29), but serious problems involving
>>> Service Pack 3 for Windows XP have made us work overtime to
>>> bring you today's special report.
>>>
>>>
http://windowssecrets.com/comp/080529
>>>
>>>
>>> Win 98 users thinking of finally converting with SP3 should
>>> monitor developments.
>>
>>
>> New screw up discovered.
>>
>> Windows XP SP3 includes vulnerable Flash Player
>> Microsoft's newest update bundles older version that's currently
>> being exploited
>>
>>
>>
http://www.computerworld.com/action/article.do?command=viewArticl
>> eBasic&articleId=9092218&intsrc=news_ts_head