2004 Updates

• SMS 2003 Advanced Client for Windows XP EmbeddedDecember, 2004
  Download the Systems Management Server (SMS) 2003 Advanced Client for Windows XP Embedded to manage Windows XP Embedded-based hardware devices using SMS 2003.
• DirectX 9 Component Provides for the Latest in Graphics Rendering Capabilities for Windows XP Embedded with SP1 (883956)October, 2004
  Take advantage of enhancements in DirectShow, Direct3D and DirectPlay to build ever more innovative embedded devices.
• Cumulative Security Update for Outlook Express June (837009)June, 2004
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address MS04-013: Cumulative Security Update for Outlook Express (837009).
• Security Update for Jet Database Engine (KB837001) May 2004
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address MS04-014 Vulnerability in the Microsoft Jet Database Engine Could Allow Code Execution (KB837001).
• Security Update for Download.Ject for Windows XP Embedded (835732)April, 2004
  Download.Ject is a targeted attack by individuals or entities towards a specific server. Devices running IIS are possibly being compromised and being used to attempt to infect Internet Explorer users with malicious code. If you are running IIS 5.0 on your Windows XP Embedded-based device, please make sure you have Security Update MS04-011 applied to your device. If your device is running Internet Explorer, we recommend that you strengthen security profiles in Internet Explorer to maximize safe browsing on your device. You can find details on this process here. Windows XP Embedded-based devices running Internet Explorer can be updated with these settings using Device Update Agent. For more information about Download.Ject, visit our "What You Should Know About Download.Ject"
• Security Update for Windows XP Embedded with SP1 (828741)April, 2004
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address MS04-012: Cumulative Security Update for Internet Explorer (828741).
• Cumulative Security Update for Internet Explorer (832894) March, 2004
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address MS04-004: Cumulative Security Update for Internet Explorer (832894).
• Availability of the Windows XP SP1 USB 1.1 and 2.0 Update (822603) February, 2004
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address Availability of the Windows XP SP1 USB 1.1 and 2.0 Update (822603).
• Microsoft Security Bulletin MS04-007 ASN.1 Vulnerability Could Allow Code Execution (828028) February, 2004
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address Microsoft Security Bulletin MS04-007 ASN.1 Vulnerability Could Allow Code Execution (828028).
• Cumulative Security Update for Internet Explorer (824145) February, 2004
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address MS03-048: Cumulative Security Update for Internet Explorer (824145).
• MSMQ updates for Windows XP Embedded clients (833512) February, 2004
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address QFE: MSMQ updates for Windows XP Embedded clients.
• Cumulative Security Update for Internet Explorer (832894) February, 2004
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address MS04-004: Cumulative Security Update for Internet Explorer (832894).
• Buffer Overrun in MDAC Function Could Allow Code Execution (832483)February, 2004
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address Buffer Overrun in MDAC Function Could Allow Code Execution (832483).
• Change Minlogon binary to fix broken standby/resume (833642) February, 2004
  When using MinLogon on a Windows XP Embedded runtime, standby and resume functionality does not work properly. Minlogon fails to properly process a kernel message which performs the final steps to set the system into the Standby or Hibernate state. This functionality has been restored to MinLogon, enabling standby and hibernate functionality from the Win32 API SetSystemPowerState() and through ACPI hardware (power button, lid switch, etc.)
• Cumulative Patch for Internet Information Service (811114) February, 2004
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address Cumulative Patch for Internet Information Service (811114).

2003 Updates

• Windows Help and Support Center Could Lead to System Compromise for Windows XP Embedded with SP1 (825119) December, 2003
  This update addresses a vulnerability in the Help and Support Center function that could allow an attacker to execute code of their choice in the Local Computer security context.
• Buffer Overrun in Messenger Service Could Allow Code Execution for Windows XP Embedded with SP1 (828035 )December, 2003
  This update addresses a vulnerability in the Messenger Service that could allow arbitrary code execution on an affected system.
• .NET Framework 1.1 for Windows XP Embedded with SP1 (831558) December, 2003
  The .NET Framework 1.1 streamlines workflow by enabling you to store and execute multiple versions of an application or component on your development workstation. You can also take advantage of built-in support in the .NET Framework 1.1 for communication with Open Database Connectivity (ODBC) and Oracle databases, further streamlining development. The .NET Framework 1.1 includes support for Internet Protocol Version 6 (IPv6).
• Remote Desktop Protocol 5.2 for Windows XP Embedded with SP1 (828665)December, 2003
  The latest version of the Remote Desktop Protocol (RDP) client, Version 5.2, enables you to build Windows XP Embedded-based devices that can communicate with Windows Server 2003 via a Terminal Services session, not possible with prior releases of the RDP client. RDP 5.2 provides more powerful graphics resolution, as it supports 24-bit color and high-resolution (1200 x 1600). RDP 5.2 also enables near automatic redirection of resources, including Component Object Model (COM) ports and audio.
• Multilingual User Interface Pack for Windows XP Embedded with SP1 (831558) December, 2003
  The Windows XP Embedded Multilingual User Interface (MUI) Pack is the language pack add–on to the English version of Windows XP Embedded. This tool allows users or administrators to switch the Windows XP Embedded user interface — including menus, dialog boxes, and Help — from one language to another.
• Buffer Overrun: ListBox and ComboBox Control Could Allow Code Execution for Windows XP Embedded with SP1 (824141) December, 2003
  This update addresses a vulnerability in the ListBox and ComboBox Control functions that could give an attacker complete control of the system.
• Enhanced Write Filter Unable to Copy Large Amounts of Data to Protected Drive (832662) December, 2003
  This update addresses an issue with Enhanced Write Filter (EWF) whereby copying large amounts of data to an EWF-protected volume may corrupt the partition.
• Flaw in NetBIOS Could Lead to Information Disclosure (QFE 824105) December, 2003
  This update addresses a vulnerability in the NetBIOS Name Server (NBNS).
• Update for Dr. Watson Component (QFE #832447) December, 2003
  A new component is now available for Windows XP Embedded with Service Pack 1 that enables Dr. Watson functionality. This component adds registry keys to enable analysis of system crashes.
• Unchecked Buffer in DirectX Could Enable System Compromise (819696) December, 2003
  This update addresses a flaw in DirectX®. A security vulnerability results since it could be possible for a user to exploit buffer overruns in DirectShow®, enabling them to execute code in the security context of the logged-on user.
• Buffer Overrun in Windows Could Lead to Data Corruption (817606) November, 2003
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address MS03-024: Buffer Overrun in Windows Could Lead to Data Corruption (817606).
• Flaw in Windows Media Player Skins Downloading could allow Code Execution (817787) October, 2003
  A critical update has been issued for Windows XP Embedded-based devices. This update addresses a flaw in the way Windows Media Player 7.1 and Windows Media Player for Windows XP handle the download of skin files. The flaw means that an attacker could force a file masquerading as a skin file into a known location on a user’s machine.
• Unchecked Buffer in Windows Shell Could Enable System Compromise (821557) October, 2003
  A critical update has been issued for Windows XP Embedded-based devices. An unchecked buffer exists in one of the functions used by the Windows shell to extract custom attribute information from certain folders. A security vulnerability results because it is possible for a malicious user to construct an attack that could exploit this flaw and execute code on the user’s system.
• Vulnerability could allow Remote Code Execution for Windows XP Embedded with SP1 (QFE 823182) October, 2003
  A critical update has been issued for Windows XP Embedded and Windows NT Embedded-based devices. This update addresses a vulnerability in Authenticode that, under certain low memory conditions, could allow an ActiveX control to download and install without presenting the user with an approval dialog.
• How to Help Protect Your Devices Against the Blaster Worm (828750) October, 2003
  This is a cumulative patch that includes the functionality of all previously released patches for Internet Explorer 5.01, 5.5 and 6.0.
• Buffer Overrun in Windows Kernel Message Handling Could Lead to Elevated Privileges (811493) September, 2003
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address MS03-013: Buffer Overrun in Windows Kernel Message Handling could Lead to Elevated Privileges (811493).
• Domain Login Delays Using Multi-Lingual User Interfaces on Windows XP Embedded with Service Pack 1 Runtimes (824055)September, 2003
  Certain Windows XP Embedded devices may experience delays of five to fifteen minutes when attempted to login into domains. These delays occur on runtimes using the Multi-language User Interface (MUI) components to provide localization support for Windows XP Embedded.
• Unchecked Buffer In Windows Component Could Cause Server Compromise (815021)September, 2003
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address MS03-007: Unchecked Buffer In Windows Component Could Cause Server Compromise (815021).
• Windows XP Embedded with Service Pack 1 (824704) September, 2003
  This update addresses the Windows XP Embedded with Service Pack 1 QFE Rollup, Summer 2003 (824704) for Windows XP Embedded with SP1.
• Remote Procedure Call Service Update (QFE 824146) Windows XP Embedded with SP1 September, 2003
  This update addresses MS03-039 (Blaster and its variants): Buffer Overrun In RPCSS Service Could Allow Code Execution (824146) for Windows XP Embedded with SP1 .
• Buffer Overrun in HTML Converter Could Allow Code Execution (823559) August, 2003
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address MS03-023: Buffer Overrun In HTML Converter Could Allow Code Execution (823559).
• Buffer Overrun in Remote Procedure Call (RPC) Interface Could Allow Code Execution (823980) August, 2003
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address MS03-026: Buffer Overrun In RPC Interface Could Allow Code Execution (823980).
• Cumulative Patch for Outlook Express (330994) July, 2003
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address MS03-014: Cumulative Patch for Outlook Express (330994).
• Flaw in RPC Endpoint Mapper Could Allow Denial of Service Attacks (331953) July, 2003
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address MS03-010: Flaw in RPC Endpoint Mapper Could Allow Denial of Service Attacks (331953).
• Flaw in Windows Script Engine could allow code execution (814078) July, 2003
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address MS03-008: Flaw in Windows Script Engine could allow code execution (814078).
• Certain Enhanced Write Filter (EWF) commands do not work properly (Q823025) June, 2003
  This update addresses a potential problem when using EWF on certain Windows XP Embedded with SP1 runtimes. Certain commands issued through the EWF API or EWFMGR.EXE do not function properly, possibly causing blue screen errors.
• Remote Boot Server End-User EULA Update Tool (Q816490) June, 2003
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address Remote Boot Installer End-User EULA Update Tool (Q816490).
• Unchecked Buffer in Windows Redirector May Permit Privilege Elevation (810577) June, 2003
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address MS03-005: Unchecked Buffer in Windows Redirector May Permit Privilege Elevation (810577).
• VIA Ultra DMA Mode 5 incorrectly set to Ultra DMA Mode 6 (Q813861) June, 2003
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address Windows XP Service Pack 1 Incorrectly Identifies the VIA VT82C686B Chipset as Supporting Ultra DMA Mode 6 (Q813861).
• Programmatically control EWF APIs (Q818822) May, 2003
  A set of Application Programming Interfaces (API's) is available that allows programmatic control of Enhanced Write Filter (EWF) on Windows XP Embedded with Service Pack 1 runtimes. This API can be used to programmatically control all EWF functionality currently available through EWFMGR.EXE.
• Remote Boot Server update for Windows 2003 Server (Q820683) May, 2003
  A version of Remote Boot Server is available for installation on Windows 2003 Server machines. The MSI included in this package replaces the Windows XP Embedded Remote Boot Server.msi that shipped with Windows XP Embedded with Service Pack 2. The previous version specifically disallowed installation on Windows 2003 Server machines.
• SDI Manager cannot access partition information to originating partition (Q818716) May, 2003
  SDI Manager is a tool used to manipulate SDI images. In some circumstances, SDI Manager will be unable to write partition information from an SDI file back to the partition from which the information was originally read, displaying an error that the partition sizes do not match. This update resolves that problem.
• Windows XP Embedded with SP1 Help Update April, 2003
  This downloadable file will update your existing Microsoft XP Embedded with SP1 Help files to the most current information available. The new Help files have been reorganized so content is easier to find, how-to topics have been added to guide you through tasks, and existing content has been revised.
• System cloning resets runtime information (Q810144)April, 2003
  This update addresses a potential problem when using system cloning and FBRESEAL.EXE on Windows XP Embedded runtimes. When FBRESEAL.EXE is run on the embedded runtime, certain information can be reset, including domain membership, user-specific information such as start menu items, mounted drives, and network information. This update allows the OEM to decide which sets of information are retained or reset.
• Additional files copied into image when using Service Pack 1 MUI language packs (Q815363) March, 2003
  This update addresses a potential problem when using MUI language packs on Windows XP Embedded with Service Pack 1 runtimes, where extra files are copied as part of the Service Pack 1 MUI language pack build process. These extra files contribute to larger footprints and in rare cases can cause functional problems on the runtime.
• Blue screen error IRQL_NOT_LESS_OR_EQUAL using EWF (Q816654)March, 2003
  This update addresses a potential problem when using EWF on certain Windows XP Embedded with SP1 runtimes. In some cases, a blue screen error IRQL_NOT_LESS_OR_EQUAL can occur during EWF usage.
• Security Update for Windows XP Embedded with SP1 (Q811279) February, 2003
  Repository look-up may cause incorrect files to be copied for Windows XP Embedded with SP1.
• Cumulative Patch for Internet Explorer (324929) February, 2003
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address Microsoft Security Bulletin MS02-068: Cumulative Patch for Internet Explorer (324929).
• Cumulative Patch for Internet Information Service (Q327696) February, 2003
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address Microsoft Security Bulletin MS02-062: Cumulative Patch for Internet Information Service (Q327696).
• Flaw in SMB Signing Could Enable Group Policy to be Modified (329170) February, 2003
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address Microsoft Security Bulletin MS02-070: Flaw in SMB Signing Could Enable Group Policy to be Modified (329170).
• Unchecked Buffer in File Decompression Functions Could Lead to Code Execution (Q329048)February, 2003
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address Microsoft Security Bulletin MS02-054: Unchecked Buffer in File Decompression Functions Could Lead to Code Execution (Q329048).
• Unchecked Buffer in Windows Help Facility Could Enable Code Execution (Q323255)February, 2003
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address Microsoft Security Bulletin MS02-055: Unchecked Buffer in Windows Help Facility Could Enable Code Execution (Q323255).
• Unchecked Buffer in PPTP Implementation Could Enable Denial of Service Attacks (Q329834)February, 2003
  This is the Microsoft Windows XP Embedded with Service Pack 1 component update to address Microsoft Security Bulletin MS02-063: Unchecked Buffer in PPTP Implementation Could Enable Denial of Service Attacks (Q329834).

2002 Updates

• Headless Support Update for Windows XP Embedded with Service Pack 1 (Q331042) December, 2002
  This is the component update to address a scenario when you build a Windows XP Embedded with Service Pack 1 runtime for a headless device and the device fails to boot properly. Since the device is headless, you have no way of knowing it is not booting. In order to boot, Windows XP Embedded requires a display driver. Headless systems have no display hardware, and therefore do not load display drivers, causing Windows XP Embedded to fail during the boot process.