KB837009

I keep getting a message in Windows Update that I should install the update
KB837009 for Outlook Express 6. I install it, and everything seems to be ok,
but after a short time the update appears again. When I follow the links that
Windows Update shows me to get more information
(http://go.microsoft.com/fwlink/?LinkId=26397) and download the update from
there, it tells me I should have Windows XP to install this patch.

I'm just wondering, why Windows Update keeps offering me this update when I
have Windows 2000 installed, and the standalone installing package says I
have to have Windows XP. Some BIG bug around here?

Is Win2K SP4 Rollup 1 installed?

OE Help > About > Files: What versions of MSOE.DLL, INETCOMM.DLL and
WAB32.DLL are displayed here?
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE, Shell/User, Security), AH-VSOP


e-monk wrote:
> I keep getting a message in Windows Update that I should install the
> update KB837009 for Outlook Express 6. I install it, and everything seems
> to be ok, but after a short time the update appears again. When I follow
> the links that Windows Update shows me to get more information
> (http://go.microsoft.com/fwlink/?LinkId=26397) and download the update
> from there, it tells me I should have Windows XP to install this patch.
>
> I'm just wondering, why Windows Update keeps offering me this update when
> I have Windows 2000 installed, and the standalone installing package says
> I have to have Windows XP. Some BIG bug around here?

Win2K SP4 Rollup 1 is installed. And here's the version info you asked for:
MSOE.DLL : 6.00.2800.1506
INETCOMM.DLL : 6.00.2800.1506
WAB32.DLL : 6.00.2800.1106

I'm using Finnish version of Windows (+ of course IE+OE), if it somehow
changes the situation.

"e-monk" <> wrote in message
news:C3E41696-B4FF-4FD4-948A-...
> Win2K SP4 Rollup 1 is installed. And here's the version info you asked for:
> MSOE.DLL : 6.00.2800.1506
> INETCOMM.DLL : 6.00.2800.1506
> WAB32.DLL : 6.00.2800.1106
>
> I'm using Finnish version of Windows (+ of course IE+OE), if it somehow
> changes the situation.


Those versions could have come from 897715 (MS05-30).

Please try the diagnostic tool the MS05-30 Security Bulletin mentions.


<title>KB894193 - How to obtain and use the Enterprise Update Scan Tool</title>
http://support.microsoft.com/default.aspx/kb/894193

(e.g. via link from Security Bulletin MS05-030)

<extract>
June 14th, 2005 Enterprise Update Scan Tool (MS05-029, MS05-030, MS05-031, MS05-033, MS05-034)
http://www.microsoft.com/downloads/d...7-0DEF3BBA1937

</extract>

Having never used this myself I would be very interested in knowing
if it shows you anything useful.

The sort of thing I would expect it to show you is that 837009 was a
cumulative update for OE and it was critical. Other updates for
OE have come along since then which replace modules in that set
which either aren't cumulative or aren't critical. In order to install 837009
you may have to back out whatever all of the others that you have
installed. (Evidently you have at least 897715 blocking 837009).


Good luck

Robert Aldwinckle
---

Hi Robert, and thanks! Removing 897715 helped. Running the tool printed me
results as you expected, here's the "interesting" part:

<BulletinTitle>Vulnerability in Outlook Express Could Allow Remote Code
Execution (897715)</BulletinTitle>
<Status>Installed</Status>

So, it was 897715 as expected, and the tool told it; I just can't make it
out, why can't this tool work automatically and inform about existing
conflicts?

Anyway, case clear.

See this KB article:

A dialog box with no text appears if you reply to a news message in Outlook
Express 6 Service Pack 1 (You may ignore the title)
http://support.microsoft.com/?kbid=555398

Also see this post of mine in a recent newsgroup discussion:
http://groups-beta.google.com/group/...7f3b0ed2?hl=en

For a reason yet to be determined, Windows Update was offering OE updates in
the wrong order to Win2k SP4 and WinXP SP1 users. They straightened it out
c. 14 Aug-05. Here's the fix:

1. Uninstall 'Windows 2000 Hotfix - KB897715' via Add/Remove Programs and
reboot.

2a. Assuming MSOE.DLL is now v6.00.2800.1409 or earlier (i.e.,
v6.00.2800.1123 or v6.00.2800.1106), install (KB)823353 manually using the
file downloaded from
http://www.microsoft.com/downloads/d...displaylang=en

2b. Optional: Reboot and install KB887797 via
http://www.microsoft.com/downloads/d...6-a1a3da675baf

3. Reboot and (re)install (KB)897715 manually using the file downloaded from
http://www.microsoft.com/downloads/d...d-28502b3d2518

Alternatively, after #1 above, check in at Windows Update and install
whatever OE Cumulative Update is now offered and reboot. Then return to
Windows Update to see if another one is now offered you.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE, Shell/User, Security), AH-VSOP


e-monk wrote:
> Win2K SP4 Rollup 1 is installed. And here's the version info you asked
> for: MSOE.DLL : 6.00.2800.1506
> INETCOMM.DLL : 6.00.2800.1506
> WAB32.DLL : 6.00.2800.1106
>
> I'm using Finnish version of Windows (+ of course IE+OE), if it somehow
> changes the situation.

PS: Please note that my previous reply to you on 25 Aug-05, containing the
same information as I just posted, was lost when MS reset the newsservers to
resolve some problems with all MS newsgroups.
--
~PA Bear

e-monk wrote:
> Win2K SP4 Rollup 1 is installed. And here's the version info you asked
> for: MSOE.DLL : 6.00.2800.1506
> INETCOMM.DLL : 6.00.2800.1506
> WAB32.DLL : 6.00.2800.1106
>
> I'm using Finnish version of Windows (+ of course IE+OE), if it somehow
> changes the situation.