Problem with hotfix KB891711

snyder · #1 (**permalink**) 21-01-2005, 03:03 PM

Yo,

I think this hotfix has ruined my printer's ability to print off of the internet (I have an h-p g85). I've had the printer for a while and it's always work like a charm. Ever since the end of December, it's been able to print offline things fine, but gums all up when I try to print off webpages. My windows 2000 update history says this hotfix (KB891711) was installed on 12/29/2004, so it may be the culprit.

Anybody have any ideas

jephree · #2 (**permalink**) 22-01-2005, 02:42 AM

I see issues with this update and firewalls. Tho the update page itself reflects a date of 1-10-05.

Anyway worth a try to uninstall that update just to see if it changes anything. Although I also see issues with uninstalling not completely restoring settings.

Security Update for Windows 2000 (KB891711)

File Name:
Windows2000-KB891711-x86-ENU.EXE
Download Size:
2576 KB
Date Published:
1/10/2005
Version:
891711

sonicmoon · #3 (**permalink**) 10-03-2005, 01:30 AM

i too have found a problem with hotfix kb891711... just installed it yesterday via the windows update notification, and since the reboot cannot do a windows search or open a browser (either by launching it manually or from a link in an email in outlook express) window -- the pc halts, and begins shutting down programs showing various errors have occurred. i use codestuff starter and found that a kb891711.exe file was in my startup after the windows update completed. good thing i make a habit of creating a restore point prior to any software install or windows update install. after returning to the restore point prior to the windows update, all is normal and working fine. is this hotfix really necessary and what options might i have to try installing it without the adverse affects?

jephree · #4 (**permalink**) 10-03-2005, 02:33 AM

This is the issue that hotfix was to fix:

Microsoft Windows LoadImage API Function Integer Overflow Vulnerability

Which include these Recommendations:

Quote:

Deploy network intrusion detection systems to monitor network traffic for malicious activity.
Network intrusion detection systems should be deployed to monitor all network traffic for signs of suspicious or anomalous activities. This may aid in detection of attacks that attempt to exploit latent vulnerabilities, as well as detection of malicious activity that may occur if such attacks are successful.

Do not accept or execute files from untrusted or unknown sources.
To exploit this issue, an attacker must entice a user to open a malicious file. Users should refrain from opening files that originate from untrusted or unknown sources.

Do not follow links provided by unknown or untrusted sources.
An attacker may host a malicious file on a Web site and entice users to follow a link to the site. Users should refrain from following links that originate from questionable or unknown sources.

Implement multiple redundant layers of security.
Memory protection schemes such as non-executable stack and heap configurations and randomly mapped memory segments will complicate exploitation of memory corruption vulnerabilities.

Microsoft has released updates to address this vulnerability on supported platforms.

I see some issues involving having the latest Service Pack before installing this update.

Captnhook · #5 (**permalink**) 10-03-2005, 03:25 AM

Quote:

Originally Posted by sonicmoon

i too have found a problem with hotfix kb891711... just installed it yesterday via the windows update notification...the pc halts, and begins shutting down programs showing various errors have occurred...found that a kb891711.exe file was in my startup after the windows update completed.

Have the same issue as you. After update when trying to open any browser (Explorer or Firefox) system would crash. I disabled KB891711 in system configuration and restarted PC everything works fine now. Only concern is my PC's vunerability to an attack. Currently I'm in contact with MS tech support and trying to find if this is a emerging issue with this latest update.

sonicmoon · #6 (**permalink**) 10-03-2005, 04:57 AM

Please post the results from your conversation with MS tech sppt, Captnhook. I have 2 firewalls installed and am using AVG Antivirus software, but am not sure if this would completely guard me against an attack of the kind this hotfix was meant to prevent. Thanks

jephree · #7 (**permalink**) 10-03-2005, 05:18 AM

Unfortunately I cannot retrace my original search on this thread but it did have to do with firewalls.

In any event you should only be running one; as they do tend to conflict.

I also wonder why this update is just showing up as it was released in early January.

File Name:
Windows2000-KB891711-x86-ENU.EXE
Download Size:
2576 KB
Date Published:
1/10/2005
Version:
891711

Anyway here are some more threads:

(KB891711)

microsoft.public.windowsupdate

From the above:

Quote:

I just installed two critical updates and one, KB891711, needed to be
unchecked in the startup menu in order for web sites to load up. I also
noticed that a patch, DXM6Patch_981116 was in there unchecked. Are these
supposed to be in the startup menu and do they need to run in order to work?

source

Captnhook · #8 (**permalink**) 10-03-2005, 06:14 AM

Just finished with a MS tech & that was fun.. NOT

The first Customer Service person I talked with told me "that I need that update because it basically protects me from a hacker and that he'd connect me with a tech who would assist me in getting that file re-installed on my PC so I'm safe".
The tech's "solution" was to uninstall KB891711 from my system (in safe mode).
He did ask if I was running any anti-virus protection (I'm not sure if that plays into his suggestion to remove the troublesome update).
He said that Windows 98 and ME sometimes have problems with the update but I should be fine now.
Huh?? Reading the MS bulletin on the patch makes it sound as if my PC is vunerable to the Cursor and Icon Format Handling Vulnerability described in http://www.microsoft.com/technet/sec.../ms05-002.mspx.

Note to "jephree" ..I suspect that the original patch in January was issued for Win XP and the current update release covers Win 98 & ME.

I'm going to follow up and write to MS Tech support to see what the CORRECT way of handling this issue is. Why issue a patch you claim is critical and then when it causes a system failure claim it's not "necessary" and instruct me to remove it??

jephree · #9 (**permalink**) 10-03-2005, 06:47 AM

Thanks for the update Capt'n

I see now that this was a new version released today.

Even more puzzling that the first version caused so many problems & yet again!

Best of luck on your quest with Microsoft Techs.

We all appreciate your findings!

another thread

Captnhook · #10 (**permalink**) 11-03-2005, 08:22 AM

Well I figured out what had been causing my system to crash whenever I tried to open Internet Explorer.
I have “Proxomitron Ver. Naoka-4.5” (webfiltering and ad-blocking software) installed and running on my PC. It must be in conflict with and be causing KB891771.exe to crash my PC when attempting to access the Internet. I have read that a few people have experienced similar problems with other browsers and I’m guessing that the web-filters on those browsers maybe causing similar problems to the one I experienced.

MS did get back to me and said they had passed my issue on to their “Support Professionals”. I’ll post any word I hear from them concerning the problem.

In the meanwhile I'll stick with Proxomitron.