How to apply the 905413 security patch to the Windows Preinstallation Environment (828217)


The information in this article applies to:

  • Microsoft Windows Preinstall Environment (WinPE) 64-bit
  • Microsoft Windows Preinstall Environment (WinPE) 32-bit
  • Microsoft Windows Server 2003, Standard Edition
  • Microsoft Windows Server 2003, Enterprise Edition
  • Microsoft Windows Server 2003, 64-Bit Enterprise Edition
  • Microsoft Windows XP 64-Bit Edition Version 2003
  • Microsoft Windows XP 64-Bit Edition Version 2002
  • Microsoft Windows XP Professional

SUMMARY

The Windows Preinstallation Environment (WinPE) is a minimal Win32 subsystem with limited services, and it is based on the Windows XP Professional or the Windows Server 2003 kernel that is running in protected mode. WinPE contains the minimum functionality that you must have to run Windows Setup and to then pull an operating system from a network share.

This article describes how to apply the 905413 security patch to WinPE.

Note The 905413 security patch replaces the 824146 and 823980 security patches. For more information about the 824146 security patches, click the following article numbers to view the articles in the Microsoft Knowledge Base:

824146 MS03-039: A buffer overrun in RPCSS could allow an attacker to run malicious programs

823980 MS03-026: Buffer overrun in RPC may allow code execution

For more information about the 905413 security patch, click the following article number to view the article in the Microsoft Knowledge Base:

905413 MS06-012: Vulnerabilities in Microsoft Office could allow remote code execution

Important In addition to applying the 905413 security patch to WinPE, administrators and OEMs are encouraged to integrate or slipstream the 905413 security patch into their Windows installation source files.

For more information about how to integrate or slipstream the 905413 security patch into your Windows installation source files, click the following article number to view the article in the Microsoft Knowledge Base:

828930 How to integrate product updates into your Windows installation source files

MORE INFORMATION

Microsoft recommends that you apply the 824146 security patch to ISO images of WinPE that you create by using the following versions of WinPE:
  • Windows PE for Corporations (1.0) -- Windows XP was used as the source for this CD-ROM. You can use the build tools (for example, Mkimg.cmd) on this CD-ROM to build a version of WinPE that is based on Windows XP.
  • Windows PE 1.1 -- Windows XP Service Pack 1 (SP1) was used as the source for this CD-ROM. You can use the build tools (for example, Mkimg.cmd) on this CD-ROM to build a version of WinPE that is based on Windows XP SP1.
  • Windows PE 1.2 -- Windows XP SP1 was used as the source for this CD-ROM. You can use the build tools (for example, Mkimg.cmd) on this CD-ROM to build a version of WinPE that is based on either Windows XP SP1 or Windows Server 2003.
Note You can customize WinPE by using the build tools that are included on the WinPE CD-ROM. You can modify the existing flat of WinPE on the CD-ROM, or you can create a completely new build of WinPE by using Mkimg.cmd.

How to Update WinPE Images When You Start Windows from a CD-ROM

To apply the 824146 security patch to your WinPE ISO image, follow these steps:
  1. Download the appropriate 824146 security patch for the WinPE image that you are creating.
  2. Extract the 824146 security patch package to a folder (for example, C:\824146) by using the /x command-line switch. For example, to extract the Windows XP version of the 824146 security patch to C:\824146, type the following command:

    WindowsXP-KB824146-x86-ENU.exe -x:c:\824146

  3. Re-create your image by following the steps that are listed in the WinPE documentation. However, when you run the Mkimg.cmd command, do not include the option to create a *.iso image (for example, mkimg.cmd %sourcedir% %destination_dir%).
  4. When the Mkimg.cmd process has completed, locate the folder where Mkimg.cmd put the newly created WinPE image flat (for example, C:\Winpe_temp).
  5. Copy the appropriate Ole32.dll, Rpcrt4.dll, and Rpcss.dll files from the folder that you created in step 2 (for example, C:\824146) to the newly created Winpe flat (C:\Winpe_temp).
    • If you are creating a WinPE image by using Windows XP without SP1, copy Ole32.dll, Rpcrt4.dll, and Rpcss.dll from the SP1 folder in C:\824146.
    • If you are creating a WinPE image by using Windows XP SP1, copy Ole32.dll, Rpcrt4.dll, and Rpcss.dll from the SP2 folder in C:\824146.
    • If you are creating a WinPE image by using Windows Server 2003, copy Ole32.dll, Rpcrt4.dll, and Rpcss.dll from the RTMQFE folder in C:\824146.
After the process has completed, you can create your ISO image by running the OSCDimg.exe utility. For information about using OSCDimg.exe, see your WinPE documentation.

How to Update WinPE Images When You Start Windows from a RIS Server

To apply the 824146 security patch to your WinPE image on a RIS server, follow these steps:
  1. Download the appropriate 824146 security patch for the WinPE image that you are creating.
  2. Extract the 824146 security patch package to a folder (for example, C:\824146) by using the /x command-line switch. For example, to extract the Windows XP version of the 824146 security patch to C:\824146, type the following command:

    WindowsXP-KB824146-x86-ENU.exe -x:c:\824146

  3. Copy the appropriate Ole32.dll, Rpcrt4.dll, and Rpcss.dll files from the folder that you created in step 2 (for example, C:\824146) to your WinPE flat on the RIS server (for example, D:\remoteinstall\setup\%lang%\images\%dir_name%\i386).
    • If you are creating a WinPE image by using Windows XP without SP1, copy Ole32.dll, Rpcrt4.dll, and Rpcss.dll from the SP1 folder in C:\824146.
    • If you are creating a WinPE image by using Windows XP SP1, copy Ole32.dll, Rpcrt4.dll, and Rpcss.dll from the SP2 folder in C:\824146.
    • If you are creating a WinPE image by using Windows Server 2003, copy Ole32.dll, Rpcrt4.dll, and Rpcss.dll from the RTMQFE folder in C:\824146.
Modification Type:MajorLast Reviewed:9/27/2006
Keywords:kbhowto kbwinservsetup kbinfo KB828217 kbAudDeveloper
©2004 Microsoft Corporation. All rights reserved.