MS09-019 bug mshtml version in IE7

I ran into an issue with IE7 crashing on a users machine while accessing a
particular website. The error faulted on mshtml.dll. After some research I
found that the user was using mshtml version 7.0.6000.16850

After searching the software distribution folder on that machine I found a
version of the file that was 7.0.6000.21045. This file is part of the
MS09-019 Cumulative Updates for Internet Explorer
http://support.microsoft.com/kb/969897

After I replaced the file the website no longer crashed IE.

I have 50+ computers at this site and none running Windows XP have applied
this dll file properly.

I have checked other sites too and this is the same on all computers I have
encountered.

----------------
This post is a suggestion for Microsoft, and Microsoft responds to the
suggestions with the most votes. To vote for this suggestion, click the "I
Agree" button in the message pane. If you do not see the button, follow this
link to open the suggestion in the Microsoft Web-based Newsreader and then
click "I Agree" in the message pane.

http://www.microsoft.com/communities...orer. general

MSHTML.DLL v7.0.6000.21045 was the QFE version installed by
MS09-019/KB969897. v7.0.6000.16850 is the GDR version of the same update.
There was a specific reason Automatic Updates (or WSUS, as the case may be)
installed the QFE version on this machine so replacing it with the GDR
version may have caused other problems.

You should replace the GDR version with the original QFE version then take
this up with MS Support:

=> For enterprise customers, support for security updates is available
through your usual support contacts.

=> For more information about how to contact your local Microsoft
subsidiary for security update support issues, visit the International
Support Web site: http://support.microsoft.com/common/international.aspx

PS: 99% of the time, errors involving MSHTML.DLL are caused by Add-ons
and/or hijackware infections!
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin; DTS-L.net


Chuck Williams wrote:
> I ran into an issue with IE7 crashing on a users machine while accessing a
> particular website. The error faulted on mshtml.dll. After some research I
> found that the user was using mshtml version 7.0.6000.16850
>
> After searching the software distribution folder on that machine I found a
> version of the file that was 7.0.6000.21045. This file is part of the
> MS09-019 Cumulative Updates for Internet Explorer
> http://support.microsoft.com/kb/969897
>
> After I replaced the file the website no longer crashed IE.
>
> I have 50+ computers at this site and none running Windows XP have applied
> this dll file properly.
>
> I have checked other sites too and this is the same on all computers I
> have
> encountered.

According to what you wrote below I did replace the GDR version with the QFE
version. All the computers I encounter run the GDR version of v7.0.6000.18650
not the QFE. I replace the file with the v7.0.6000.71045 file to fix the
issue.

"PA Bear [MS MVP]" wrote:

> MSHTML.DLL v7.0.6000.21045 was the QFE version installed by
> MS09-019/KB969897. v7.0.6000.16850 is the GDR version of the same update.
> There was a specific reason Automatic Updates (or WSUS, as the case may be)
> installed the QFE version on this machine so replacing it with the GDR
> version may have caused other problems.
>
> You should replace the GDR version with the original QFE version then take
> this up with MS Support:
>
> => For enterprise customers, support for security updates is available
> through your usual support contacts.
>
> => For more information about how to contact your local Microsoft
> subsidiary for security update support issues, visit the International
> Support Web site: http://support.microsoft.com/common/international.aspx
>
> PS: 99% of the time, errors involving MSHTML.DLL are caused by Add-ons
> and/or hijackware infections!
> --
> ~Robear Dyer (PA Bear)
> MS MVP-Windows (IE, OE, Security, Shell/User)
> AumHa VSOP & Admin; DTS-L.net
>
>
> Chuck Williams wrote:
> > I ran into an issue with IE7 crashing on a users machine while accessing a
> > particular website. The error faulted on mshtml.dll. After some research I
> > found that the user was using mshtml version 7.0.6000.16850
> >
> > After searching the software distribution folder on that machine I found a
> > version of the file that was 7.0.6000.21045. This file is part of the
> > MS09-019 Cumulative Updates for Internet Explorer
> > http://support.microsoft.com/kb/969897
> >
> > After I replaced the file the website no longer crashed IE.
> >
> > I have 50+ computers at this site and none running Windows XP have applied
> > this dll file properly.
> >
> > I have checked other sites too and this is the same on all computers I
> > have
> > encountered.
>
>

My apologies, you're right. You replaced the GDR version with the QFE
version. Nevertheless, the balance of my last reply still holds: There is a
reason the QFE version wasn't installed and the fact that the QFE version
resolves whatever problems this user was having suggests an incompatible
Add-on or an infection, neither of which were present when KB969897 was
installed.

As such, you should take this up with MS Support as the next Cumulative
Security Update for IE release may not install properly if the detection
engine "sees" the QFE version of MSHTML.DLL but the GDR versions of all
other IE files.


Chuck Williams wrote:
> According to what you wrote below I did replace the GDR version with the
> QFE
> version. All the computers I encounter run the GDR version of
> v7.0.6000.18650 not the QFE. I replace the file with the v7.0.6000.71045
> file to fix the issue.
>
> "PA Bear [MS MVP]" wrote:
>
>> MSHTML.DLL v7.0.6000.21045 was the QFE version installed by
>> MS09-019/KB969897. v7.0.6000.16850 is the GDR version of the same
>> update.
>> There was a specific reason Automatic Updates (or WSUS, as the case may
>> be)
>> installed the QFE version on this machine so replacing it with the GDR
>> version may have caused other problems.
>>
>> You should replace the GDR version with the original QFE version then
>> take
>> this up with MS Support:
>>
>> => For enterprise customers, support for security updates is available
>> through your usual support contacts.
>>
>> => For more information about how to contact your local Microsoft
>> subsidiary for security update support issues, visit the International
>> Support Web site: http://support.microsoft.com/common/international.aspx
>>
>> PS: 99% of the time, errors involving MSHTML.DLL are caused by Add-ons
>> and/or hijackware infections!
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-Windows (IE, OE, Security, Shell/User)
>> AumHa VSOP & Admin; DTS-L.net
>>
>>
>> Chuck Williams wrote:
>>> I ran into an issue with IE7 crashing on a users machine while accessing
>>> a
>>> particular website. The error faulted on mshtml.dll. After some research
>>> I
>>> found that the user was using mshtml version 7.0.6000.16850
>>>
>>> After searching the software distribution folder on that machine I found
>>> a
>>> version of the file that was 7.0.6000.21045. This file is part of the
>>> MS09-019 Cumulative Updates for Internet Explorer
>>> http://support.microsoft.com/kb/969897
>>>
>>> After I replaced the file the website no longer crashed IE.
>>>
>>> I have 50+ computers at this site and none running Windows XP have
>>> applied
>>> this dll file properly.
>>>
>>> I have checked other sites too and this is the same on all computers I
>>> have
>>> encountered.