KB834707/MS04-038 is not offered on a XP SP2 Installation

I made a fresh install of Windows XP with integrated SP2 (CD taken
from the MVLS download area). WindowsUpdate works, it finds the
important/optional components like .net 1.1, and the critical .net 1.1
sp1 as well. But it does not find MS04-038, neither automatic nor
manual. MBSA claims MS04-038 with file version lower than exspected
[C:\WINDOWS\system32\browseui.dll, 6.0.2900.2180 < 6.0.2900.2518]
BROWSEUI.DLL indeed is 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158).

I checked the other conditions of item.xml for KB834707/MS04-038,
taken from our SUS. The key
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Hotfix\KB834707
does not exist. The versions of the other files are from SP2:
shdocvw.dll 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
wininet.dll 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
mshtml.dll 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
urlmon.dll 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)

I could reproduce it with both the german and the english language
version of XP with SP2 several times.

Another PC was set up completely the same way about two weeks ago,
here MS04-038 was downloaded and installed automatically. BROWSEUI.DLL
there has version 6.00.2900.2518 (xpsp_sp2_gdr.040919-1056).

WindowsUpdate.log says

2004-11-21 08:38:54+0100 1296 650 PT: Using server URL
https://v5.windowsupdate.microsoft.c...ce/client.asmx
2004-11-21 08:38:54+0100 1296 650 Add header for
accept-encoding: xpress succeeded
2004-11-21 08:38:55+0100 1296 650 DetectCompressionType
returning type 1, hr=0x0
2004-11-21 08:38:55+0100 1296 650 WU client found 0
updates and 10 categories in search
2004-11-21 08:38:55+0100 1296 650 WU client finished
Searching for update
2004-11-21 08:38:55+0100 1296 650 WU client calls back
to search call WindowsUpdate with code Call complete and error 0

Seems there is actually a problem with the detection of MS04-038.
--
Alex Bergdolt

did you try this installation:
Cumulative Security Update for Internet Explorer for XP Service Pack 2
(KB834707
http://www.microsoft.com/downloads/d...displaylang=en
make sure you select the proper langage

On Sun, 21 Nov 2004 13:45:05 -0800, jim riverman
<> wrote:

>did you try this installation:
>Cumulative Security Update for Internet Explorer for XP Service Pack 2

Thanks.
But its not that I couldn't install the hotfix manually or roll out by
SMS or SUS - its that I guess that WindowsUpdate is having a problem
here. MS04-038 should be installed automatically, and actually it does
not.
--
Alex Bergdolt

"Alex Bergdolt" <> wrote in message news:...
> On Sun, 21 Nov 2004 13:45:05 -0800, jim riverman
> <> wrote:
>
>>did you try this installation:
>>Cumulative Security Update for Internet Explorer for XP Service Pack 2
>
> Thanks.
> But its not that I couldn't install the hotfix manually or roll out by
> SMS or SUS - its that I guess that WindowsUpdate is having a problem
> here. MS04-038 should be installed automatically, and actually it does
> not.


http://www.microsoft.com/technet/sec.../ms04-038.mspx

Check the Severity Ratings (under Executive Summary).
None of the vulnerabilities cited are deemed to be Critical
for that platform. Therefore, the patch is not included under
Automatic Updates for it.


HTH

Robert Aldwinckle
---

I have checked mine and it did update from the web site.
I looked at my registry and found these key entries location.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Wind ows XP\SP3\KB834707]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\App
Management\ARPCache\KB834707]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\KB834707]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\HotFix\KB834707]
"Installed"=dword:00000001
"Comments"="Windows XP Hotfix - KB834707"
"Backup Dir"=""
"Fix Description"="Windows XP Hotfix - KB834707"
"Installed By"=""
"Installed On"=""
"Service Pack"=dword:00000003
"Valid"=dword:00000001

It is also listed in the ReportingEvents.log file.

is it possible that you have two versions of browseui.dll.
(6.0.2900.2180 , 6.0.2900.2518)on the hard disk ?
Other than that it could be a content mismatch in the datastore folder.

"Robert Aldwinckle" <> schrieb:

> http://www.microsoft.com/technet/sec.../ms04-038.mspx
>
> Check the Severity Ratings (under Executive Summary).
> None of the vulnerabilities cited are deemed to be Critical
> for that platform.

Although that's true, why the heck has it been *removed* from
Windows Update? It has been offered via WU once the update has
been released.

More curiuos, it's still listed in Windows Update Catalog under
as an critical update and is even still listed in mssecure.xml!?

> Therefore, the patch is not included under Automatic Updates for it.

It's not even listed as an optinal update right now x-/

Bye,
Freudi

"Ottmar Freudenberger" <> schrieb:
> "Robert Aldwinckle" <> schrieb:
>
>> http://www.microsoft.com/technet/sec.../ms04-038.mspx
>>
>> Check the Severity Ratings (under Executive Summary).
>> None of the vulnerabilities cited are deemed to be Critical
>> for that platform.
>
> Although that's true, why the heck has it been *removed* from
> Windows Update? It has been offered via WU once the update has
> been released.

Seems to be fixed, since KB834707 is offered again via WU :-)

Bye,
Freudi