Prev: XP SP3 - Hid KB77165 - Other 11 Installed in Groups OK
Next: updates
From: MowGreen on 13 Feb 2010 15:00
Paul,

The update you mention is offered to systems that have Microsoft Visual
C++ installed on them. Apparently, some software was installed that
depends on Microsoft Visual C++ to run on and that's why the Security
update was not offered until now. IIRC, it's included in the Windows
Live Essentials bundle of "fluff".

The Security Bulletin for KB978251 shows the "Aggregate Severity Rating"
as Moderate.
Please read it and decide for yourself if it needs to be installed or
not: http://www.microsoft.com/technet/security/bulletin/MS09-035.mspx

If it were my system, I would install it. Then again, I wouldn't install
the fluff that Windows Live Essentials offers so ...

MowGreen
================
*-343-* FDNY
Never Forgotten
================

banthecheck.com
"Security updates should *never* have *non-security content* prechecked



Paul Calcagno wrote:
> I'm running Windows Vista Home Premium on an Acer Desktop with SP2, all
> WU's current, 2 GB RAM, CCleaner, SAS, MBAM and Avira. System's working
> just fine.
> Yesterday I got 2 new WU's, one of them being KB973924, a security
> update for MS Visual C++2008 Redistributable pkg (the other one is
> WinDefender definitions update). The publish date on KB973924 is August
> 2009. My question is why am I now getting this update offered to me at
> this time? And can I ignore this update without compromising my security
> status?
> Please advise is this is not the correct forum to post this question.
>
> Thanks in advance..........Paul C.
From: MowGreen on 14 Feb 2010 16:20
Description of the security update for the Microsoft Visual C++ 2008
Redistributable Package (for previously installed versions): July 28, 2009
http://support.microsoft.com/kb/973924

The above KB article contains this link to the Sec Bulletin:

Microsoft Security Bulletin MS09-035 - Moderate
Vulnerabilities in Visual Studio Active Template Library Could Allow
Remote Code Execution (969706)
http://www.microsoft.com/technet/security/bulletin/MS09-035.mspx

Actually, what I think happened was I was replying to 2 posts at once
and transposed KB978251 into the reply to you. So *yes*, it's typo, Paul.

I did get the URLs right, so I've got that goin' for me.
Now that I'm rechecking the Sec Bulletin page again, I don't even see a
mention of KB973924 until the 'Revisions' section.


MowGreen
================
*-343-* FDNY
Never Forgotten
================

banthecheck.com
"Security updates should *never* have *non-security content* prechecked


Paul Calcagno wrote:
> Thanks MowGreen.
>
> Just one question: You pointed me to a security bulletin for KB978251,
> but that's not the one associated with MS Viscual C++ redistributable
> package. Was that a typo.
>
> Thanks........Paul C.
>
> "MowGreen" <mowgreen(a)nowandzen.com> wrote in message
> news:ueUC7cOrKHA.5940(a)TK2MSFTNGP02.phx.gbl...
>> Paul,
>>
>> The update you mention is offered to systems that have Microsoft
>> Visual C++ installed on them. Apparently, some software was installed
>> that depends on Microsoft Visual C++ to run on and that's why the
>> Security update was not offered until now. IIRC, it's included in the
>> Windows Live Essentials bundle of "fluff".
>>
>> The Security Bulletin for KB978251 shows the "Aggregate Severity
>> Rating" as Moderate.
>> Please read it and decide for yourself if it needs to be installed or
>> not: http://www.microsoft.com/technet/security/bulletin/MS09-035.mspx
>>
>> If it were my system, I would install it. Then again, I wouldn't
>> install the fluff that Windows Live Essentials offers so ...
>>
>> MowGreen
>> ================
>> *-343-* FDNY
>> Never Forgotten
>> ================
>>
>> banthecheck.com
>> "Security updates should *never* have *non-security content* prechecked
>>
>>
>>
>> Paul Calcagno wrote:
>>> I'm running Windows Vista Home Premium on an Acer Desktop with SP2, all
>>> WU's current, 2 GB RAM, CCleaner, SAS, MBAM and Avira. System's working
>>> just fine.
>>> Yesterday I got 2 new WU's, one of them being KB973924, a security
>>> update for MS Visual C++2008 Redistributable pkg (the other one is
>>> WinDefender definitions update). The publish date on KB973924 is August
>>> 2009. My question is why am I now getting this update offered to me at
>>> this time? And can I ignore this update without compromising my security
>>> status?
>>> Please advise is this is not the correct forum to post this question.
>>>
>>> Thanks in advance..........Paul C.
>
 | 
Pages: 1
Prev: XP SP3 - Hid KB77165 - Other 11 Installed in Groups OK
Next: updates