MS 3/28/02 Security Patch for IE6 - warning!

[Phil Dibowitz <webmaster () ipom com>]

BugTraq'ers,

I usually consider this list a bit over my head, and don't post, just read. I'm 
not totally sure this is on-topic, but I think it is. =)

The MS Security Patch for IE6:

----------------
Security Update, March 28, 2002 (Internet Explorer 6)
2456 KB/ Download Time: < 1 min The "28 March 2002 Cumulative Patch for Internet 
Explorer" update eliminates all previously addressed security vulnerabilities 
affecting Internet Explorer 6, as well as two new vulnerabilities, and is 
discussed in Microsoft Security Bulletin MS02-015. Download now to protect your 
computer from these vulnerabilities, the most serious of which could allow a 
malicious user to run code on your computer.
----------------
(That's directly from the MS Windows Update Site)

Seems to be pretty buggy. It trashed a Win2K machine of mine yesterday. After 
installing, I rebooted and shortly after lost my network connection... then I 
was unable to get into 'Network and Dialup Connections' or 'Add/Remove 
programs.' I tried recovery from 'Safe Mode' and 'Last known good configuration' 
options at boot, but I had the same problems in both modes. Doing a 'recovery' 
from CD didn't fix it either. As a last resort I chose to do an 'upgrade' from 
CD which downgraded IE6 to IE5 fixing the problem. I was then able to patch up 
to the latest IE MINUS that patch.

A friend mine also had a very similar experience with the patch. I'm curious to 
know if others have the same problem, and I also wanted to warn people.

Phil
--
Insanity Palace of Metallica
http://www.ipom.com
webmaster () ipom com
--