General discussion

Locked

New Microsoft Patches Out

By Joseph Moore ·
Happy Patch Tuesday, all!
2 new Microsoft patches are out. The big one is here:

http://www.microsoft.com/security/bulletins/200409_jpeg.mspx
It is at a Critical status, since it affects the following MS products:

* Windows XP
* Windows XP Service Pack 1 (SP1)
* Windows Server 2003
* Internet Explorer 6 SP1
* Office XP SP3
Note Office XP SP3 includes Word 2002, Excel 2002, Outlook 2002, PowerPoint 2002, FrontPage 2002, and Publisher 2002.
* Office 2003
Note Office 2003 includes Word 2003, Excel 2003, Outlook 2003, PowerPoint 2003, FrontPage 2003, Publisher 2003, InfoPath 2003, and OneNote 2003.
* Digital Image Pro 7.0
* Digital Image Pro 9
* Digital Image Suite 9
* Greetings 2002
* Picture It! 2002 (all versions)
* Picture It! 7.0 (all versions)
* Picture It! 9 (all versions, including Picture It! Library)
* Producer for PowerPoint (all versions)
* Project 2002 SP1 (all versions)
* Project 2003 (all versions)
* Visio 2002 SP2 (all versions)
* Visio 2003 (all versions)
* Visual Studio .NET 2002
Note Visual Studio .NET 2002 includes Visual Basic .NET Standard 2002, Visual C# .NET Standard 2002, and Visual C++ .NET Standard 2002.
* Visual Studio .NET 2003
Note Visual Studio .NET 2003 includes Visual Basic .NET Standard 2003, Visual C# .NET Standard 2003, Visual C++ .NET Standard 2003, and Visual J# .NET Standard 2003.
* .NET Framework 1.0 SP2
* .NET Framework 1.0 SDK SP2
* .NET Framework 1.1
* Platform SDK Redistributable: GDI+

Ok, one thing about this. I run XP SP2, so that did not need the patch. But I do have Office XP and Visio 2002, so I did the Office Update patch, and both products were detected as needing this patch. There was a patch for both products. Great! If I had had XP SP1, then that would have needed to be patched too! Turns out, the main DLL that is being patched is not just a single copy. Each application installs its own version of the file, and from what the article says, EACH version of the file needs patching. This also includes 3rd party programs that ALSO use a version of this file.
I scanned my IBM ThinkPad T42 laptop (brand new; 2 weeks old), and I have 6 copies of this one DLL file now, 3 of them in individual IBM pre-installed program file structures. So, if the article is true, then not only did I need to patch Office and Visio, but I need to see about a patch for this other preinstalled software (MyDVD, ArcSoft something-or-other, and IBM RecordNow!).

Plus to add to the extreme joy of this, the Technet article on this patch says to NOT distrbute this patch with SUS, but to do it manual!

I think I need a drink now, while this info is distributed and chewed over. ;-)

This conversation is currently closed to new comments.

0 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Back to IT Employment Forum
0 total posts (Page 1 of 1)  

Related Discussions

Related Forums