Select the product you need help with
MS02-060: Flaw in Windows XP Help and Support Center Could Enable File DeletionArticle ID: 328940 - View products that this article applies to. This article was previously published under Q328940 On This PageSYMPTOMS
The Windows XP Help and Support center includes a feature that runs when the Found New Hardware Wizard completes. This feature prompts you to send hardware profile information to Microsoft so that you can receive information about how to obtain the appropriate driver, or obtain support for the hardware that you installed. If you agree to send this data to Microsoft, Help and Support uses the Uplddrvinfo.htm file to send your hardware profile information to the Microsoft Driver Feedback server by using the Upload Manager service. There is a security vulnerability in the JScript code in the Uplddrvinfo.htm file that might permit an attacker to delete files on your computer by using the hcp:// pluggable protocol to load the Uplddrvinfo.htm file. RESOLUTIONDownload InformationAlthough this patch is included with Windows XP Service Pack 1 (SP1), Microsoft has made it available for individual download for your convenience. For additional information about Windows XP SP1, click the article number below to view the article in the Microsoft Knowledge Base:322389 The following files are available for download from the Microsoft
Download Center:
(http://support.microsoft.com/kb/322389/EN-US/
)
How to Obtain the Latest Windows XP Service Pack
Windows XP Home Edition and Windows XP Professional
English (US): Collapse this image 
(http://www.microsoft.com/downloads/details.aspx?FamilyID=731cbb23-d5f5-4f69-a8d0-1072d949320a&DisplayLang=en)
Arabic: Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=731cbb23-d5f5-4f69-a8d0-1072d949320a&DisplayLang=ar)
Chinese (Simplified): Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=731cbb23-d5f5-4f69-a8d0-1072d949320a&DisplayLang=zh-cn)
Chinese (Traditional): Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=731cbb23-d5f5-4f69-a8d0-1072d949320a&DisplayLang=zh-tw)
Czech: Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=731cbb23-d5f5-4f69-a8d0-1072d949320a&DisplayLang=cs)
Danish: Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=731cbb23-d5f5-4f69-a8d0-1072d949320a&DisplayLang=da)
Dutch: Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=731cbb23-d5f5-4f69-a8d0-1072d949320a&DisplayLang=nl)
Finnish: Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=731cbb23-d5f5-4f69-a8d0-1072d949320a&DisplayLang=fi)
French: Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=731cbb23-d5f5-4f69-a8d0-1072d949320a&DisplayLang=fr)
German: Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=731cbb23-d5f5-4f69-a8d0-1072d949320a&DisplayLang=de)
Greek: Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=731cbb23-d5f5-4f69-a8d0-1072d949320a&DisplayLang=el)
Hebrew: Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=731cbb23-d5f5-4f69-a8d0-1072d949320a&DisplayLang=he)
Hungarian: Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=731cbb23-d5f5-4f69-a8d0-1072d949320a&DisplayLang=hu)
Italian: Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=731cbb23-d5f5-4f69-a8d0-1072d949320a&DisplayLang=it)
Japanese: Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=731cbb23-d5f5-4f69-a8d0-1072d949320a&DisplayLang=ja)
Korean: Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=731cbb23-d5f5-4f69-a8d0-1072d949320a&DisplayLang=ko)
Norwegian: Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=731cbb23-d5f5-4f69-a8d0-1072d949320a&DisplayLang=no)
Portuguese: Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=731cbb23-d5f5-4f69-a8d0-1072d949320a&DisplayLang=pt)
Portuguese (Brazil): Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=731cbb23-d5f5-4f69-a8d0-1072d949320a&DisplayLang=pt-br)
Russian: Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=731cbb23-d5f5-4f69-a8d0-1072d949320a&DisplayLang=ru)
Spanish: Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=731cbb23-d5f5-4f69-a8d0-1072d949320a&DisplayLang=es)
Swedish: Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=731cbb23-d5f5-4f69-a8d0-1072d949320a&DisplayLang=sv)
Turkish: Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=731cbb23-d5f5-4f69-a8d0-1072d949320a&DisplayLang=tr)
Windows XP 64-Bit Edition
English (US):
Release Date: October 16, 2002Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=f5417d81-7c8f-4cf6-8c9b-4357a55048d3&DisplayLang=en)
French: Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=f5417d81-7c8f-4cf6-8c9b-4357a55048d3&DisplayLang=fr)
German: Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=f5417d81-7c8f-4cf6-8c9b-4357a55048d3&DisplayLang=de)
Japanese: Collapse this image
(http://www.microsoft.com/downloads/details.aspx?FamilyID=f5417d81-7c8f-4cf6-8c9b-4357a55048d3&DisplayLang=ja)
For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base: 119591
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.
(http://support.microsoft.com/kb/119591/EN-US/
)
How to Obtain Microsoft Support Files from Online Services
Installation InformationYou must restart your computer after you apply this update. This update supports the following Setup switches:
q328940_wxp_sp1_x86_enu /u /q /z WARNING: Your computer is vulnerable until you restart it.
File InformationThe English version of this fix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (also known as Universal Time Coordinate [UTC]). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.Windows XP Home Edition and Windows XP ProfessionalDate Time Version Size File name ------------------------------------------------------- 23-Sep-2002 22:03 5.1.2600.101 728,064 Helpctr.exe 23-Sep-2002 22:02 5.1.2600.101 696,832 Helpsvc.exe 23-Sep-2002 21:48 27,774 Hscmui.cab 23-Sep-2002 22:02 5.1.2600.101 9,216 Hscupd.exe 23-Sep-2002 21:49 70,111 Hscxpsp1.cab 23-Sep-2002 22:03 5.1.2600.101 145,408 Msconfig.exe 30-Sep-2002 16:25 5.1.2600.101 94,208 Pchshell.dll 30-Sep-2002 16:25 5.1.2600.101 33,280 Pchsvc.dll Date Time Size File name --------------------------------------------------- 19-Jul-2002 22:12 32,982 Dfs01.htm 25-Apr-2002 22:15 1,206 Dvdhtm01.js 17-Apr-2002 22:22 19,520 Hcpan_09.htm 17-Apr-2002 22:22 37,469 Hcspa_06.htm 13-Aug-2002 21:18 1,492 Package_description.xml Date Time Size File name ---------------------------------------------------- 12-Aug-2002 22:11 5,231 Common.js 17-Jul-2002 21:34 77,245 Cpt03.htm 01-Aug-2002 18:24 32,982 Dfs01.htm 01-Aug-2002 18:24 1,206 Dvdhtm01.js 01-Aug-2002 18:24 18,804 Hcerr_07.htm 01-Aug-2002 18:24 19,520 Hcpan_09.htm 01-Aug-2002 18:24 3,159 Hcscr_01.js 01-Aug-2002 18:24 37,469 Hcspa_06.htm 13-Aug-2002 20:35 2,368 Package_description.xml 01-Aug-2002 18:24 540 Raclientlayout.xml 01-Aug-2002 18:24 666 Rahelpeeacceptlayout.xml 01-Aug-2002 18:24 587 Raimlayout.xml 01-Aug-2002 18:24 569 Raura.xml 01-Aug-2002 18:24 16,097 Sihtm_03.htm 01-Aug-2002 18:24 14,129 Sihtm_04.js 01-Aug-2002 18:24 32,141 Sihtm_05.js 01-Aug-2002 18:24 25,050 Sihtm_06.htm 01-Aug-2002 18:24 27,910 Sihtm_06.js 01-Aug-2002 18:24 7,840 Sihtm_12.htm Windows XP 64-Bit EditionDate Time Version Size File name --------------------------------------------------------- 23-Sep-2002 22:06 5.1.2600.101 2,429,440 Helpctr.exe 23-Sep-2002 22:05 5.1.2600.101 2,636,288 Helpsvc.exe 23-Sep-2002 21:48 27,774 Hscmui.cab 23-Sep-2002 22:05 5.1.2600.101 22,016 Hscupd.exe 23-Sep-2002 21:49 68,110 Hscxpsp1.cab 23-Sep-2002 22:06 5.1.2600.101 487,936 Msconfig.exe 30-Sep-2002 16:26 5.1.2600.101 340,480 Pchshell.dll 30-Sep-2002 16:26 5.1.2600.101 107,008 Pchsvc.dll Date Time Size File name --------------------------------------------------- 19-Jul-2002 22:12 32,982 Dfs01.htm 25-Apr-2002 22:15 1,206 Dvdhtm01.js 17-Apr-2002 22:22 19,520 Hcpan_09.htm 17-Apr-2002 22:22 37,469 Hcspa_06.htm 13-Aug-2002 21:18 1,492 Package_description.xml Date Time Size File name --------------------------------------------------- 17-Jul-2002 21:34 77,245 Cpt03.htm 01-Aug-2002 18:24 32,982 Dfs01.htm 01-Aug-2002 18:24 1,206 Dvdhtm01.js 01-Aug-2002 18:24 18,804 Hcerr_07.htm 01-Aug-2002 18:24 19,520 Hcpan_09.htm 01-Aug-2002 18:24 3,159 Hcscr_01.js 01-Aug-2002 18:24 37,469 Hcspa_06.htm 13-Aug-2002 21:05 1,673 Package_description.xml 01-Aug-2002 18:24 16,097 Sihtm_03.htm 01-Aug-2002 18:24 14,129 Sihtm_04.js 01-Aug-2002 18:24 32,141 Sihtm_05.js 01-Aug-2002 18:24 25,050 Sihtm_06.htm 01-Aug-2002 18:24 27,910 Sihtm_06.js 01-Aug-2002 18:24 7,840 Sihtm_12.htm STATUSMicrosoft has confirmed that this problem may cause a degree of security vulnerability in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Windows XP Service Pack 1 (SP1). MORE INFORMATION
For more information, visit the following Microsoft Web site:
http://www.microsoft.com/technet/security/bulletin/MS02-060.mspx
(http://www.microsoft.com/technet/security/bulletin/MS02-060.mspx)
Properties | Article Translations |
Back to the top
