When you visit a Web page that uses a custom pop-up object, Internet Explorer 6 closes unexpectedly

Important update

The problem that this article describes is corrected in the cumulative security update for Internet Explorer. To install the correct update for your environment, install all important or high-priority updates from the Microsoft Update Web site now: Note If you have problems with a security update, no-charge support is available by calling 1-866-PCSAFETY in the United States and in Canada or by contacting your local Microsoft subsidiary. For more information about how to contact your local Microsoft subsidiary for security update support issues, visit the International Support Web site. Enterprise customers can obtain support for security updates through their usual support contacts.

How to troubleshoot similar problems

To troubleshoot similar Internet Explorer stop, restart, or crash problems, self-help steps for a beginning to an intermediate computer user are available in English at the following Microsoft Web site:

You visit a Web page that uses a custom pop-up object. Or, on the home page of a Microsoft Windows SharePoint Services Web site, you click Modify Shared Page, and then click Design this Page. In both scenarios, Microsoft Internet Explorer 6 closes unexpectedly. Additionally, you may receive the following error message: The error report contains the following error-signature information. This problem occurs after you install security update 918899 on a Microsoft Windows XP Service Pack 2 (SP2)-based or a Microsoft Windows Server 2003 Service Pack 1 (SP1)-based computer.

For more information about security update 918899, click the following article number to view the article in the Microsoft Knowledge Base: For example, after you install security update 918899, this problem may occur when you visit a Web page that uses the custom menus, the custom message boxes, or the custom tooltips that are documented on the following Microsoft Web site:

This problem occurs because of a regression error in security update 918899.

To resolve this problem, install the most current cumulative security update for Internet Explorer, or install update 923996. For more information about the most current cumulative security update for Internet Explorer, visit the following Microsoft Web site: Note This fix was first included in security update 922760. For more information about security update 922760, click the following article number to view the article in the Microsoft Knowledge Base:

923996 update information

The following files are available for download from the Microsoft Download Center:

Download the Windows XP Service Pack 2 package now. (http://www.microsoft.com/downloads/details.aspx?FamilyId=FF9BC431-01F3-48E8-9A58-D701D2E60C1D)

Download the 32-bit Windows Server 2003 Service Pack 1 package now. (http://www.microsoft.com/downloads/details.aspx?FamilyId=4AE4AA58-97FB-4CCF-ABA4-F9271A9282E2)

Download the x64-based Windows Server 2003 package now. (http://www.microsoft.com/downloads/details.aspx?FamilyId=2B7B1D5B-0B08-432A-B552-857997513476)

Download the Itanium-based Windows Server 2003 Service Pack 1 package now. (http://www.microsoft.com/downloads/details.aspx?FamilyId=E9E5A987-A833-45B7-9127-8B812B27F44C)

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base: Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file. This update is scheduled to be included with the next cumulative security update for Internet Explorer, for Windows XP Service Pack 3, and for Windows Server 2003 Service Pack 2.

Prerequisites

The following list contains prerequisites for the update:

• Internet Explorer 6
• Security update 918899
• Windows XP SP2 or Windows Server 2003 SP1

Restart requirement

You must restart the computer after you apply this update.

Deployment information

To install this update without any user interaction, without a display, and without restarting the computer, use the /quiet and /norestart command-line options. For example, to do this on a computer that is running an x86-based version of Windows XP, type the following at a command prompt: For more information about command-line options to install this update, click the following article number to view the article in the Microsoft Knowledge Base: To verify that this update is installed, confirm that the files that are listed in the "File information" section are installed in the %systemroot%\System32 folder on the computer and that the following registry key exists:

Removal information

To remove this update, follow these steps:

1. Click Add or Remove Programs in Control Panel.
2. Remove Windows XP Hotfix - KB923996. If hotfixes are not listed in Add or Remove Programs, click to select the Show Updates check box.

You can also use the Spuninst.exe utility to remove this update. The Spuninst.exe utility is located in the %Windir%\$NTUninstallKB923996$\Spuninst folder. To remove this update without any user interaction, without a display, and without restarting the computer, use the /quiet and /norestart command-line options. For example, to do this on a computer that is running an x86-based version of Windows XP, type the following at a command prompt:For more information about how to use command-line options to remove this update, type the following at a command prompt:

Update replacement information

This update does not replace a previously released software update.

File information

The English version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Windows XP SP2 (32-bit versions)

Windows Server 2003 SP1 (32-bit versions)

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

By default, the error message that is mentioned in the "Symptoms" section is displayed when an unrecoverable error occurs in Internet Explorer. The error message includes an option to send information about the problem to Microsoft. Microsoft analyzes information about these types of errors to try to identify the causes.

The following errors are written to the Application log by Windows Error Reporting:

Windows XP SP2
Windows Server 2003 SP1Notes

• IT administrators can use the Corporate Error Reporting (CER) tool to manage error reports and error messages that are created by the Windows Error Reporting (WER) client in Microsoft Windows XP, in Microsoft Windows Server 2003, and in error-reporting (ER) clients that are included in other Microsoft programs. If error-reporting clients are configured to work together with CER 2.0, error reports are redirected to a CER-shared folder instead of being redirected to Microsoft.
• If you are using CER, you do not see event ID 1001.
• If Windows Error Reporting is disabled, you may not receive any visual notification when an unrecoverable error occurs. In some cases, you may receive an error message that resembles the following:
  IEXPLORE.EXE - Application Error
  The instruction at "0x7dc9d031" referenced memory at "0x00000020". The memory could not be "read".
  Click on OK to terminate the program.
  Click on CANCEL to debug the program.
  Additionally, an error that resembles the following may be written to the Application log:
  Date: Date
  Time: Time
  Type: Information
  User: N/A
  Computer: Computer name
  Source: Application Popup
  Category: None
  Event ID: 26
  Description: Application popup: IEXPLORE.EXE - Application Error : The instruction at "0x7dc9d031" referenced memory at "0x00000020". The memory could not be "read".
  If you disable error reporting, a Drwtsn32.log file, a User.dmp file, or both files may be created, depending on the system configuration.

For more information about event ID 1000 and about event ID 1001, visit the following Microsoft Web site: For more information about how to disable error reporting, click the following article numbers to view the articles in the Microsoft Knowledge Base: For more information about the Drwtsn32.log file and about the User.dmp file, click the following article number to view the article in the Microsoft Knowledge Base: