Microsoft Patch: Proceed With Caution
Sure, the Windows XP update fixes some problems, but it may bring new ones.Microsoft recently shipped two important service packs--one for Windows XP, and the other for Internet Explorer version 6. Service Pack 1 for Windows XP includes IE 6 SP-1, so if you're running XP, you'll have to install only the XP update to get both.
Windows XP SP-1 contains a critical patch for a previously unknown security flaw that may be one of the most dangerous holes I've ever written about. The flaw involves the way that XP's Help and Support Center works. Experts say that unlike run-of-the-mill security holes, this one is easy to exploit and can enable a miscreant to delete files from your hard drive remotely.
Microsoft has announced that it won't release a separate security patch for this serious hole.
A word of warning: When installing the XP service pack, don't be surprised if you run into some complications. So far, things have gone pretty smoothly for most users. But a number of e-mail messages I've gotten indicate that SP-1 is driving some of you batty.
Several readers reported that programs such as Microsoft Outlook stopped working properly. Others had trouble with their systems' overall stability. To deal with the issue, some users uninstalled SP-1; they said that the problems promptly went away. Though this tactic might work for a little while, it's not a good long-term plan. You will probably need to install SP-1 in order to get future updates.
At press time, Microsoft said it was looking into our readers' complaints. Meanwhile, the company has posted workarounds for acknowledged post-SP-1 problems; these include specific error messages and IntelliMouse glitches.
Just as the XP service pack rolled out, Microsoft released the first service pack for IE 6. This update contains all previous security fixes for IE 6, including the cumulative patch I wrote about last month. There are no new fixes in this service pack, but read "Java Jive" to learn about a patch that isn't covered in SP-1.
IE's SP-1 is available in different versions for Windows XP, 2000, Me, 98, and NT 4.
Kodak and Nikon Cameras Shock, Burn
Kodak is recalling its DC5000 Digital Zoom cameras because of a manufacturing defect that could cause users to sustain electrical shocks. The recall applies to you if you purchased your DC5000 camera between June 2000 and August 2002. Visit Kodak.com for Kodak's recall procedure.
At the same time, Nikon is recalling about 9000 of its Coolpix 2000 digital cameras because owners of these units may burn themselves. The affected models fall within the following serial number ranges: 3010001 to 3060980 and 3510001 to 3561916. Go to Nikonusa.com for Nikon's replacement policy info.
In Brief
Word Theft
Microsoft Word 97, 2000, and 2002 could permit a clever cracker to steal copies of files on your hard drive by sending you a malicious Word document file and getting you to return it. Microsoft says the apparent hole is simply a Word feature; at Microsoft TechNet the company offers some general ways to protect your files from prying eyes.
Java Jive
Microsoft found two "critical" holes in its Java Virtual Machine. The flaws could let a bad guy take over your system. Hop to Microsoft Security Bulletin MS02-052 to get the patch.
King Klez
Many users haven't updated their antivirus software to block the Klez.H worm. It's now the most widespread virus in history. To stop this insidious worm, go to McAfee's advisory page or to Symantec Security Response for removal steps.
Bugged?
Found a hardware or software bug? Tell us about it via e-mail at bugs@pcworld.com.
Stuart J. Johnston is a contributing editor for PC World. Click here to see past Bugs and Fixes columns.