Windows XP Service Pack 1 (SP1)

Archived content. No warranty is made as to technical accuracy. Content may contain URLs that were valid when originally published, but now link to sites or pages that no longer exist.

Microsoft has released Service Pack 1 for Windows XP.

Service Pack 1 (SP1) provides the latest updates to the Windows XP Operating System. These updates are a collection of fixes in the following areas: operating system reliability, application compatibility, setup, and security issues. This service pack includes fully regression-tested versions of the patches for all security vulnerabilities that had been discovered in Windows XP up to the closing date of Service Pack development. The following Microsoft Security Bulletins are included in Service Pack 1.

MS01-029 - Windows Media Player .ASX Processor Contains Unchecked Buffer [WMP for XP]

MS01-056 - Windows Media Player .ASF Processor Contains Unchecked Buffer [WMP for XP]

MS01-059 (315000) - Unchecked Buffer in Universal Plug and Play can Lead to System Compromise

MS01-060 (305601) - SQL Server Text Formatting Functions Contain Unchecked Buffers

MS02-006 (314147) - Unchecked Buffer in SNMP Service Could Enable Arbitrary Code to be Run

MS02-008 (318202) - XMLHTTP Control Can Allow Access to Local Files

MS02-012 (313450) - Malformed Data Transfer Request Can Cause Windows SMTP Service to Fail

MS02-013 (300845) - 04 March 2002 Cumulative VM Update

MS02-017 (311967) - Unchecked Buffer in the Multiple UNC Provider Could Enable Code Execution

MS02-018 (319733) - Cumulative Patch for Internet Information Service

MS02-029 (318138) - Unchecked Buffer in Remote Access Service Phonebook Could Lead to Code Execution

MS02-032 (320920) - 26 June 2002 Cumulative Patch for Windows Media Player

MS02-040 (326573) - Unchecked Buffer in MDAC Function Could Enable SQL Server Compromise

MS02-046 (327521) – Buffer Overrun in TSAC ActiveX Control Could Lead to Code Execution

MS02-048 - Flaw in Certificate Enrollment Control Could Allow Deletion of Digital Certificates

Internet Explorer 6 security patches are included in Windows XP Service Pack 1. The following Microsoft Security Bulletins are included in the Internet Explorer 6 update in Windows XP Service Pack 1.

MS01-051 (306121) - Malformed Dotless IP Address Can Cause Web Page to be Handled in Intranet Zone

MS01-054 (311311)- Invalid Universal Plug and Play Request can Disrupt System Operation

MS01-055 (312461) - 13 November 2001 Cumulative Patch for IE

MS01-058 (313675) - 13 December 2001 Cumulative Patch for IE

MS02-005 (316059) - 11 February 2002 Cumulative Patch for Internet Explorer

MS02-009 (318089) - Incorrect VBScript Handling in IE can Allow Web Pages to Read Local Files

MS02-015 (319182) - 28 March 2002 Cumulative Patch for Internet Explorer

MS02-023 (321232) - 15 May 2002 Cumulative Patch for Internet Explorer

MS02-027 (323889) - Unchecked Buffer in Gopher Protocol Handler Can Run Code of Attacker's Choice

MS02-047 (323759) – 22 August 2002 Cumulative Patch for Internet Explorer

To get more information about Windows XP SP1 and to download the Service Pack, click here.