Print... | Close

Security Update, January 18, 2001

This update resolves the "Relative Shell Path" security vulnerability in Windows 2000. Under certain conditions, this vulnerability allows a malicious user, who has physical access to a computer, to alter the code in the executable file Explore.exe. This file provides the Windows Shell functionality of the desktop, and a change in the code could alter the desktop functionality. If this occurs, the code substitution runs automatically for any subsequent user. Download now to prevent a malicious user from altering the functionality of your desktop.

This vulnerability exists because Explore.exe is specified by a relative path, rather than an absolute path, in the registry key that Windows consults during startup. If it is placed in a certain location, the substitute version of the executable file is loaded when the computer starts.

For more information about this vulnerability, please read Microsoft Security Bulletin MS00-052. (This site is in English.)

System Requirements

This update applies to:

How to use
Restart your computer to complete the installation.

How to uninstall
  1. Click Start, point to Settings, and then click Control Panel.
  2. Double-click Add/Remove Programs.
  3. Select Windows 2000 Hotfix (Pre-SP2) [See Q269049 for more information] and click Change/Remove to uninstall.

Print... | Close