Common Tasks

Recent Posts

Community

Email Notifications

Personal Links

Archives

Security Protection - Harry Waldron (CS)

Security Best Practices, Breaking News, & Updates

Microsoft Security Re-Release of MS10-025 for Windows 2000 Server Only

Microsoft has released a corrected update for MS10-025 for Windows 2000 Server only (running Media Services).  Issues were experienced in it not being fully effective.  This patch should be promptly applied.

Microsoft Re-Releases Withdrawn Windows 2000 Patch 
http://blogs.pcmag.com/securitywatch/2010/04/microsoft_re-releases_withdraw.php
http://www.microsoft.com/technet/security/Bulletin/MS10-025.mspx

QUOTE: Microsoft has re-released MS10-025, an update for Windows 2000 Server running Windows Media Services. No other versions of Windows are affected. Microsoft had originally issued this patch this last Patch Tuesday, but withdrew it about a week later, stating that it did not, in fact, protect users against the vulnerability. How the patch was released in this state was not revealed. The new update, they say, actually fixes the problem, which is a stack overflow in Windows Media Services, a component not installed by default on Windows 2000 Server. If you applied the original flawed patch, you do not need to remove it in order to apply the new version.