02.02.2004 - MS04-004: February 2004 Cumulative Security Update for Internet Explorer (832894)

This is a cumulative update that includes the functionality of all the previously-released updates for Internet Explorer 5.01, Internet Explorer 5.5, and Internet Explorer 6.0. Additionally, it eliminates the following three newly-discovered vulnerabilities: A vulnerability that involves the cross-domain security model of Internet Explorer. The cross domain security model of Internet Explorer keeps windows of different domains from sharing information. A vulnerability that involves performing a drag-and-drop operation with function pointers during dynamic HTML (DHTML) events in Internet Explorer. This vulnerability could allow a file to be saved in a target location on the user's system if the user clicked a link. A vulnerability that involves the incorrect parsing of URLs that contain special characters. When combined with a misuse of the basic authentication feature that has "username:password@" at the beginning of a URL, this vulnerability could result in a misrepresentation of the URL in the address bar of an Internet Explorer window. - Download Internet Explorer 6 SP1 Cumulative Patch - Download Internet Explorer 6 SP1 (64-Bit Edition) Cumulative Patch - Download Internet Explorer 6 Cumulative Patch (for Windows Server 2003) - Download Internet Explorer 6 (64-Bit Edition) Cumulative Patch (for Windows Server 2003) - Download Internet Explorer 6 Cumulative Patch - Download Internet Explorer 5.5 SP2 Cumulative Patch - Download Internet Explorer 5.01 SP4 Cumulative Patch - Download Internet Explorer 5.01 SP3 Cumulative Patch - Download Internet Explorer 5.01 SP2 Cumulative Patch - Download Cumulative Patch (WindowsUpdate) - View Additional Information - View Microsoft Security Bulletin MS04-004 - View Microsoft Knowledge Base Article - 832894 - Visit Microsoft Corporation