Click Here to Install Silverlight*
United StatesChange|All Microsoft Sites
Microsoft
Download Center 
Search Advanced Search

Internet Explorer 5.5 Service Pack 2 Security Update: December 2001

Brief Description
This update addresses the vulnerability addressed in Microsoft Security Bulletin MS01-058. To find out if more recent security updates are available for you, see the Overview section of this page.

On This Page

Quick Details
File Name:q313675.exe
Version:5.5_sp2
Security Bulletins:MS01-058
Knowledge Base (KB) Articles:KB313675
Date Published:12/13/2001
Language:English
Download Size:2.2 MB
Estimated Download Time: 6 min 56K

Change Language:
  

Overview

A more recent critical security update is now available. To find the latest security releases for you visit Windows Update and click "Scan for updates." And visit the Protect your PC site to learn how to have the latest security updates delivered directly to your computer.

About this download: This update eliminates all known security vulnerabilities affecting Internet Explorer 5.5 Service Pack 2 (SP2) and Internet Explorer 6, and addresses the "Incorrect Content-Disposition Handling Can Cause IE to Execute Code Automatically" security vulnerabilities in Internet Explorer 5.5 SP2 and 6, and is discussed in Microsoft Security Bulletin MS01-058. Download now to protect your computer from all previously discussed security vulnerabilities affecting Internet Explorer 5.5 SP2 and 6, as well as three newly discovered vulnerabilities: the File Execution vulnerability, a variant of the Frame Domain Verification vulnerability, and the File Name Spoofing vulnerability.

 Top of page

System Requirements

  • Supported Operating Systems: Windows 2000; Windows 95; Windows 98; Windows ME; Windows NT
  • Internet Explorer 5.5 Service Pack 2

 Top of page

Instructions

  1. Click the Download link to start the download, or choose a different language from the drop-down list and click Go.
  2. Click the Security Update link to begin the download.
  3. Choose Run this program from its current location and click OK (in Internet Explorer 6, click Open).
  4. Click Yes if asked whether you would like to install and run Q313675.exe.
  5. Click Yes to begin the installation process.
  6. Restart your computer to complete the installation.


 Top of page

Additional Information

What vulnerabilities are eliminated by this patch?
This patch, when installed, eliminates all known security vulnerabilities affecting Internet Explorer 5.5 and 6.0. In addition to eliminating all previously discussed vulnerabilities affecting these versions, it also eliminates three new ones:
  • A vulnerability involving the handling of downloads that can lead to automatic code execution.
  • A newly discovered variant of the the "Frame Domain Verification" vulnerability discussed in Microsoft Security Bulletin MS01-015.
  • A vulnerability involving the display of file names in the File Download dialogue box.

 Top of page

 Top of page

 Top of page


© 2009 Microsoft Corporation. All rights reserved. Contact Us |Terms of Use |Trademarks |Privacy Statement