An update rollup is available for Internet Explorer 6 Service Pack 1

We have released update rollup 889669. This update rollup is intended for IT professionals who require Microsoft Internet Explorer hotfixes that were released after Microsoft Security Bulletin MS04-004. This update rollup includes the following fixes:

• The cumulative security fixes that are in security update 889293.
  
  Note Security update 889293 is documented in Microsoft Security Bulletin MS04-040.
• Update 888092 and update 871248.
• All Internet Explorer 6 Service Pack 1 (SP1) hotfixes that were released after Microsoft Security Bulletin MS04-004.

Update rollup 889669 is available from the Microsoft Download Center. You must install update rollup 889669 if you require an Internet Explorer 6 SP1 hotfix that was released after Microsoft Security Bulletin MS04-004.

Note If your computer is not running Internet Explorer 6 SP1 (version 6.00.2800.1106), install security update 889293 instead of update rollup 889669.

An update rollup is available for Microsoft Internet Explorer 6 SP1 (version 6.00.2800.1106). Update rollup 889669 includes security update 889293 (MS04-040) and Internet Explorer 6 SP1 hotfixes that were created after Microsoft Security Bulletin MS04-004. For Internet Explorer 6 Service Pack 1 for Microsoft Windows 2000 Service Pack 3, Windows 2000 Service Pack 4, Windows XP, Windows XP Service Pack 1, Windows NT Server 4.0 Service Pack 6a, Windows NT Server 4.0 Terminal Server Edition Service Pack 6, Windows 98, Windows 98 Second Edition, and Windows Millennium Edition, most Internet Explorer hotfixes are not included in MS04-040.

When you install one or more of the MS04-040 security updates for Internet Explorer 6 SP1, Internet Explorer hotfixes released since MS04-004 will be removed if the hotfix replaced one or more of the files listed in the "Security Update Information" section of Microsoft Security Bulletin MS04-040. Starting with MS04-025, cumulative hotfixes for Internet Explorer are available in a separate update rollup that includes both cumulative hotfixes and the security fixes included in the latest security update for Internet Explorer. For example, update rollup 871260 includes the cumulative security fixes in MS04-025 and hotfixes released since MS04-004. Update rollup 889669 includes the cumulative security fixes in MS04-040 and hotfixes released since MS04-004. For additional information about hotfixes included in update rollup 889669, see the "List of fixes that are included in this update rollup" section. The hotfix versions of the files that are included in this update rollup are installed regardless of whether you have previously installed an Internet Explorer hotfix to update one or more of the files that are listed in the "Security Update Information" section of the security bulletin. For additional information about the MS04-040 security updates (889293), visit the following Microsoft Web site:

Download information

Internet Explorer 6 Service Pack 1 (SP1) for Microsoft Windows 2000 Service Pack 3, Microsoft Windows 2000 Service Pack 4, Microsoft Windows XP, Windows XP Service Pack 1

The following files are available for download from the Microsoft Download Center:

Download the Windows XP, Windows XP Service Pack 1, Windows 2000 Service Pack 3, and Windows 2000 Service Pack 4 package now. (http://www.microsoft.com/downloads/details.aspx?FamilyId=C74028E2-10C9-4EDD-AD0A-36493677BFF8&displaylang=en)

Release Date: December 1, 2004

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base: Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.



Internet Explorer 6 Service Pack 1 (SP1) for Microsoft Windows 98 Second Edition, Microsoft Windows Millennium Edition, Microsoft Windows NT, Windows 98

The following files are available for download from the Microsoft Download Center:

Download the Windows 98 Second Edition, Windows Millennium Edition, Windows NT, and Windows 98 package now. (http://www.microsoft.com/downloads/details.aspx?FamilyId=171D1ED7-BEDD-40C8-B272-E457A2B020E3&displaylang=en)

Release Date: December 1, 2004

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base: Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.



Internet Explorer 6 Service Pack 1 (SP1) for Microsoft Windows XP 64-bit Edition

The following files are available for download from the Microsoft Download Center:

Download the Windows XP 64-Bit Edition package now. (http://www.microsoft.com/downloads/details.aspx?FamilyId=13A16832-769A-424E-9C4F-6188A7FCCEC0&displaylang=en)

Release Date: December 1, 2004

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base: Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.

Installation information

You must be logged on as an administrator to install update rollup 889669 and security update 889293. To install a downloaded version of update rollup 889669, run the 889669 update rollup package that you downloaded by using the appropriate Setup switches. If you are an enterprise administrator, you can deploy update rollup 889669 and security update 889293 by using Microsoft Systems Management Server (SMS) Feature Pack or by using SMS 2003. Microsoft Baseline Security Analyzer (MBSA) can recognize that update rollup 889669 has been installed and, if it has, to correctly indicate that MS04-040 is present. You can use SMS to deploy the security update or the update rollup. This is because MBSA recognizes the newer file versions of the rollup as equivalent to the MS04-040 security update from a security perspective. You cannot use MBSA to determine whether the update rollup is relevant for a specific computer. For example, you cannot use MSBA to determine whether the computer is running any post-MS04-004 hotfixes. You can only use MSBA to determine whether the minimum security baseline that is established by MS04-040 has been met. You cannot use Microsoft Software Update Services (SUS) to deploy update rollup 889669. For additional information about using SMS to deploy update rollup 889669 to only those computers that are running post-MS04-004 hotfixes or how to determine whether the update rollup has been installed on client computers, click the following article number to view the article in the Microsoft Knowledge Base: You can use one of the following methods to verify that update rollup 889669 or security update 889293 has been installed:

WIndows 2000, Windows Server 2003, Windows XP 64-Bit Edition, Version 2003, and Windows XP (all editions)

• Compare the versions of the updated files on your computer with the files that are listed in the "File information" section.
• Confirm that the Installed DWORD value appears in the following registry key and that it has a data value of 1: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Hotfix\KB<nnnnnn>
  
  Note nnnnnn is the update article number.

All other Windows versions

• Compare the versions of the updated files on your computer with the files that are listed in the "File information" section.
• Confirm that the IsInstalled DWORD value appears in the following registry key and that it has a data value of 1: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2de9c32a-bd2c-4d19-8ec1-8af319e1c762}

Prerequisites

Microsoft has tested the versions of Windows and the versions of Internet Explorer that are listed in this article to assess whether they are affected by these vulnerabilities and to confirm that update rollup 889669 addresses these vulnerabilities.

To install update rollup 889669, your computer must be running Internet Explorer 6 SP1 (version 6.00.2800.1106) on one of the following versions of Windows:

• Windows XP 64-Bit Edition, Version 2002
• Windows XP Service Pack 1 (SP1)
• Windows XP Windows 2000 Service Pack 4 (SP4)
• Windows 2000 Service Pack 3 (SP3)
• Windows NT Server 4.0 Service Pack 6a (SP6a)
• Windows NT Server 4.0 Terminal Server Edition Service Pack 6 (SP6)
• Windows Millennium Edition
• Windows 98 Second Edition
• Windows 98

Restart requirements

You must restart your computer to complete the installation.

Setup switches

Windows XP and Windows 2000 (all versions)

The Windows XP and Windows 2000 versions of update rollup 873377 and security update 889293 (MS04-040) support the following Setup switches:

• /help: Displays the command-line options.
• /quiet: Quiet mode (no user interaction or display).
• /passive: Unattended mode (progress bar only).
• /uninstall: Uninstalls the package.
• /norestart: Do not restart when installation is complete.
• /forcerestart: Restart after installation.
• /l: Lists installed Windows hotfixes or update packages.
• /o: Overwrite OEM files without prompting.
• /n: Do not backup files needed for uninstall.
• /f: Force other programs to close when the computer shuts down.
• /extract: Extract the files without running Setup.

You can combine these switches in one command. For example, to install the update rollup without any user intervention, use the following command at a command prompt:

IE6.0sp1-KB889669-Windows-2000-XP-x86-enu /passive /quiet

To install the update rollup without forcing the system to restart, use the following command at a command prompt:

IE6.0sp1-KB889669-Windows-2000-XP-x86-enu /norestart

All other Windows versions

The other update packages for security update 889293 (MS04-040) and for update rollup 889669 support the following switches:

• /q : Use Quiet mode or suppress messages when the files are being extracted.
• /q:u : Use User-Quiet mode. User-Quiet mode presents some dialog boxes to the user.
• /Q:A : Specifies administrator-quiet mode, which does not present any dialog boxes to the user.
• /T: <full path: Specifies the target folder for extracting files.
• /C: Extracts the files without installing them. If /T: path is not specified, you are prompted for a target folder.
• /C: <Cmd>: Override Install Command defined by author. Specifies the path and name of the Setup .inf or .exe file.
• /R:N: Never restarts the computer after installation.
• /R:I: Prompts the user to restart the computer if a restart is required, except when used with /Q:A.
• /R:A: Always restarts the computer after installation.
• /R:S: Restarts the computer after installation without prompting the user.

You can combine these switches in one command. For example, to install the update rollup without any user intervention and to not force the system to restart, use the following command at a command prompt:

List of software updates that are included in this update rollup

Update rollup 889669 contains the following software updates:

• 888092  (http://support.microsoft.com/kb/888092/ ) You may receive an error message in module Mshtml.dll and Internet Explorer quits when you run a custom Web program in Internet Explorer 6
• A fix for a problem that causes Internet Explorer not to be able to locate the correct program associated with a particular file type. This problem occurs if the content-type header that is returned by the server contains trailing attributes, such as the character set. For example, if the content type that is returned by the server is "text/xml; charset=utf-8," Internet Explorer may not be able to locate the program that is used to open the file. We will update this article as soon as the Microsoft Knowledge Base article that is associated with this problem, 871248, is published.
• 873377  (http://support.microsoft.com/kb/873377/ ) An update rollup is available for Internet Explorer 6 Service Pack 1
• 889293  (http://support.microsoft.com/kb/889293/ ) MS04-040: Cumulative Security Update for Internet Explorer

File information

The English version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

Internet Explorer 6 Service Pack 1 for Windows 2000 and Windows XP (32-Bit Edition):Internet Explorer 6 Service Pack 1 for Windows XP (64-Bit Edition):Internet Explorer 6 Service Pack 1 for Windows 98, Windows 98 SE, Windows Me, and Windows NT:

Removal information

Internet Explorer 6 Service Pack 1 on Windows 2000 and Windows XP:

To remove this update, use Add or Remove Programs in Control Panel. The item that refers to this update lists it as a Windows update and not as an Internet Explorer update. This is a change from past Internet Explorer update rollups.

System administrators can use the Spunist.exe utility to remove this update rollup. The Spuninst.exe utility is located in the %Windir% \$NTUninstallKB nnnnnn $\Spuninst folder. This utility supports the following Setup switches:

• /?: Show the list of installation switches.
• /u: Use unattended mode.
• /f: Force other programs to quit when the computer shuts down.
• /z: Do not restart when the installation is complete.
• /q: Use Quiet mode (no user interaction).

All other Windows versions

To remove this update, use Add or Remove Programs in Control Panel. Click Internet Explorer 889669, and then click Change/Remove or Add/Remove.

System administrators can use the Ieuninst.exe utility to remove this update. This security update installs the Ieuninst.exe utility in the %Windir% folder. This utility supports the following Setup switches:

• /?: Show the list of supported switches.
• /z: Do not restart when the installation is complete.
• /q: Use Quiet mode (no user interaction).

For example, to remove this update quietly, use the following command:

c:\windows\ieuninst /q c:\windows\inf\q889669.inf

Note This command assumes that Windows is installed in the C:\Windows folder.

Known issues

Windows XP 64-Bit Edition, Version 2003

To correctly remove more than one cumulative update for Internet Explorer on a computer that is running Windows XP 64-Bit Edition, Version 2003, you must remove the updates in the same order that you installed them. For example, if you install 818529 and then you install 828750, you must remove 828750 before you remove 818529. For additional information about known issues that may occur after you install this update, click the following article number to view the article in the Microsoft Knowledge Base:

Windows XP, Windows 2000, Windows NT Server 4.0, Windows Millennium Edition, or Windows 98 Second Edition

• After you remove update rollup 889669 from a computer that is running Windows XP, Windows 2000, Windows NT Server 4.0, Windows Millennium Edition, or Windows 98 Second Edition, you cannot remove previous cumulative updates for Internet Explorer, such as critical update 818529. This behavior is by design. Removal is supported only for the last cumulative update that you installed.
• For additional information about known issues that may occur after you install this update, click the following article number to view the article in the Microsoft Knowledge Base:
  325192  (http://support.microsoft.com/kb/325192/ ) Issues after you install updates to Internet Explorer or Windows