Microsoft Security Bulletin MS03-013 Windows XP SP 1

NewsFactory

This bulletin was originally released on April 16, 2003. It has been revised to reflect that an update is now available for users of Windows XP Service Pack 1 Updated: May 28, 2003 .

A security issue has been identified that could allow an attacker to compromise a computer running Microsoft® Windows® and gain control over it. To attempt an attack, the attacker would have to be able to log on to the computer. You can help protect your computer by installing this update from Microsoft.

Products Affected by This Update
The following products require updating:

Microsoft Windows NT® 4.0
Microsoft Windows NT 4.0, Terminal Server Edition
Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows XP Service Pack 1

Buffer Overrun in Windows Kernel Message Handling could Lead to Elevated Privileges (811493)

Cereal Killer

This is important as well:

"Why has Microsoft reissued this bulletin?

Subsequent to the release of this bulletin and the associated patches, a performance related problem was identified with the Windows XP Service Pack 1 version of the patch. This problem is unrelated to the security vulnerability discussed in this bulletin, however the problem has caused some customers to notice performance degradation on Windows XP SP1 systems after applying the patch.

Microsoft has corrected this problem and re-issued this bulletin on May 28, 2003 to advise on the availability of a revised patch for Windows XP Service Pack 1."

Seems like the corrected the slow-downs many were experiencing with this update.

Rancho*

Q330909 from February still contains newer kernel files. The ones are from May are build 1151 while the ones from Q330909 are 1159.

dai

will not install if you have sp2