Software

It's Microsoft Patch Tuesday: May 2010

Justin James gathers the information you need to make the right decision on applying Microsoft's May 2010 patches in your organization.

For the second month in a row, the out-of-band patches were kept to a minimum, other than a pile of updates to the Best Practices Analyzer for Windows Server 2008 R2. Nicely enough, the number of security patches is quite low this time around, only two of them.

This blog post is also available in PDF format in a free TechRepublic download. The previous month's Microsoft Patch Tuesday blog entries are also available.

Security patches

  • MS10-030/KB978542 - Critical (XP, 7, 2003, 2008, 2008 R2, Outlook Express 5.5 and 6.0 for 2000): Outlook Express, Windows Mail, and Windows Live Mail have a vulnerability that can lead to a remote code execution attack, executed by a remote e-mail server. Microsoft rates this as "critical," but I believe that very few business users are using these applications, and I feel that it is extremely unlikely that a remote e-mail server would be compromised like this. For these reasons, I believe that this patch can wait until your next scheduled patch day, unless you use one of these e-mail applications on a regular basis. 1.1MB - 4.7MB
  • MS10-031/KB978213 - Critical (Office XP, Office 2003, Office 2007): A problem with the VBA run time can allow for an attacker to use a specially crafted document to perform remote code execution attacks. This affects Office as well as any other application that uses VBA. It is unclear if the attacks are mitigated in Office by forbidding Office from running macros. You should install this patch immediately. 1.3MB - 2.7MB

Other updates

None.

"The Usual Suspects": Updates to the Malicious Software Removal Tool (10.1MB - 12.7MB) and Junk E-mail filters (2.2MB).

Changed, but not significantly:

None.

Updates since the last Patch Tuesday

There have been a number of minor items added and updated since the last Patch Tuesday:

Changed, but not significantly:

About

Justin James is the Lead Architect for Conigent.

21 comments
Keith Baskett
Keith Baskett

Hello, I'm new to TechRepublic. I came across this site when searching for a solution to an Access 2000 problem which struck a couple of days back following a Windows XP update from Microsoft. Basically, databases that had been working fine suddenly produced the error message 'Error accessing file. Network connection may be lost.'. Now situation is my databases are not on a Network but on a stand alone laptop. Also, problem only seems to occur when I try and run a macro or VBA module. Strikes me from the foregoing threads that my problem might have resulted from the recent May patches. I've tried finding a solution to my problem on the internet but so far have not had any luck. Anybody able to throw any light on my problem and better still a solution. Thanks in advance to anyone that can help.

JCitizen
JCitizen

is Microsoft ending all support for W2K Office products. I believe that happened a few days ago. I doubt you could even get paid support. It never hurts to call Microsoft and request free support for update foibles, they always give me free support on update issues even though I call the paid support hotline. I simply tell them it is caused by the update and no other changes were evident, and they cheerfully help me work out if it. XP is also ending certain supports for SP1 and SP2 installations, but I think free update support for SP3 is available, but not for long. Paid support ends in 2012 or 2015, I believe. I'm not sure on the dates.

Keith Baskett
Keith Baskett

Hi J Citizen Just to say, if your message was in response to my request for help, I would like to thank you. My problem has been solved. Eventually found solution, bit long and tedious, but most importantly it worked. Anyway thanks for your suggestion. KeithBaskett

JCitizen
JCitizen

Glad you found a solution! :)

lamixy
lamixy

tks, you?re just funny :)

dayen
dayen

My bigest problem with updates is when my older software no longer runs. but one update don't know which one yet stop microsoft backup from running WHY? !! my solution by new server with server 3008 on it a great advancement I am sure

Who Am I Really
Who Am I Really

Yay! I survived another crash Tuesday here, no problems on the 2K or XP systems as of yet unlike the Mar. 30 Off Cycle one that took out one of my systems right down to no-boot, just sat there frozen requiring full system recovery from system image backup.

andrewgauger
andrewgauger

MS10-030/KB978542 - Critical (XP, 7, 2003, 3008, 2008 R2, Outlook Express 5.5 and 6.0 for 2000) I didn't know Windows 3008 was already out. I thought it was still beta.

Mark W. Kaelin
Mark W. Kaelin

At least I didn't leave the 3008 beta on a bar stool. ]:) Typo fixed.

Justin James
Justin James

This month's batch was smooth sailing. Best of all, only a handful of my servers needed a reboot! :) J.Ja

asics447
asics447

Servers and desktops so far so good will know more in a couple of days

Mark W. Kaelin
Mark W. Kaelin

Are the patches described by Justin giving you trouble this month? Share your experience with your peers, maybe we can help?

talley
talley

My personal and work laptop (running Vista and Vista Business) cannot connect and/or stay connected to my home network since the update. I thought it was the router until I brought a replacement work laptop running XP Pro home and it connected without any problems. I am not a networking/wireless expert and I can't figure out how to fix it. Any suggestions? (other than a really long cable?)

JCitizen
JCitizen

Usually fixed by turning off all encryption on the router and connecting, and testing whether it works flawlessly that way. Then I re-enable WPA2 or whatever is chosen, and problem solved. If this sounds like gobbley guuk, consult your router setup guide. Al of them are different, but the principal stays the same. Next I would see about updating your wireless driver from your laptop OEM, and also check for a firmware upgrade for the router. I know my router flash updates quite often, so yours may need one too!

jsk4224
jsk4224

using xp, tried to download 4 times. each time got an error message. first time this has ever happened. any advise?

Justin James
Justin James

Go to the Downloads page on the Microsoft site, and try to download them manually and run them like that. I have a server which I need to do that for too at the moment. J.Ja

gibsonse67
gibsonse67

Most of the May patches loaded, but I've got 7 patches that won't load - patches, like KB978601, KB981332, KB978542, KB980182, KB980232 and KB975496 won't load, starting back in late March. I'm running 64Bit Windows 7 Home Premium and have run the Windows Update hotfixes, like KB947821 successfully. I'm guessing I'll have to open a trouble ticket with Microsoft to get this figured out...

steve.lott
steve.lott

For the first time in a long time the patch went smoothly and everything came back up first time.

Editor's Picks