MS05-018: Vulnerabilities in Windows kernel could allow elevation of privilege and denial of service (890859)



The information in this article applies to:

  • Microsoft Windows 2000 Advanced Server SP3
  • Microsoft Windows 2000 Advanced Server SP4
  • Microsoft Windows 2000 Datacenter Server SP3
  • Microsoft Windows 2000 Datacenter Server SP4
  • Microsoft Windows 2000 Professional SP3
  • Microsoft Windows 2000 Professional SP4
  • Microsoft Windows 2000 Server SP3
  • Microsoft Windows 2000 Server SP4
  • Microsoft Windows Server 2003, Datacenter Edition
  • Microsoft Windows Server 2003, Datacenter Edition for Itanium-based Systems
  • Microsoft Windows Server 2003, Enterprise Edition
  • Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
  • Microsoft Windows Server 2003, Standard Edition
  • Microsoft Windows Server 2003, Web Edition
  • Microsoft Windows XP Home Edition SP1
  • Microsoft Windows XP Home Edition SP1a
  • Microsoft Windows XP Home Edition SP2
  • Microsoft Windows XP Media Center Edition
  • Microsoft Windows XP Media Center Edition 2005
  • Microsoft Windows XP Professional SP1
  • Microsoft Windows XP Professional SP1a
  • Microsoft Windows XP Professional SP2
  • Microsoft Windows XP Tablet PC Edition
  • Microsoft Windows XP Tablet PC Edition 2005
  • Microsoft Windows XP Professional 64-Bit Edition (Itanium) 2003

Microsoft has released security bulletin MS05-018. This security bulletin contains all the relevant information about the related security update. This includes file manifest information and deployment options. To view the complete security bulletin, visit one of the following Microsoft Web sites.

Known issues

  • The Add or Remove Programs tool in Microsoft Windows XP Service Pack 2 (SP2) lists software updates under the name of the product that a particular update applies to. In Windows XP SP2, the Add or Remove Programs tool lists the update that is described in this article under Windows XP - Software Updates. However, in Windows XP SP2, the Add or Remove Programs tool does not display an "Installed On" date for this update. Therefore, this update is not displayed in the Windows XP - Software Updates list according to the order of its installation. Instead, this update is displayed at the top of the Windows XP - Software Updates list.

    Note Add or Remove Programs is a Control Panel item.
  • You receive a "STOP 0x0000001E" error after you install security update MS05-018 on a Windows 2000-based computer. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

    898114 You receive a "STOP 0x0000001E" error after you install security update MS05-018 on a Windows 2000-based computer


Modification Type:MajorLast Reviewed:5/15/2006
Keywords:KBTOCOff kbWin2000preSP5fix kbWinXPpreSP3fix kbWinServ2003SP1fix kbWinServ2003preSP1fix kbQFE kbfix kbBug KbSECVulnerability kbSecurity KbSECBulletin kbHotfixServer KB890859 kbAudEndUser kbAudITPRO