News

Flawed April Security Bulletin Slated for Re-Release Tuesday

Microsoft will re-release one of its April security bulletins on Tuesday to fix a flaw in the patch that caused applications to crash on systems running either an older Hewlett-Packard utility or certain NVIDIA drivers.

"We're going to run a test pass on it and we will release this new update on Tuesday, April 25," Stephen Toulouse, a program manager for the Microsoft Security Response Center, disclosed in a posting Friday on the MSRC blog, where Microsoft has been updating users on the issue since Saturday.

The troubled patch is MS06-015. Originally released April 11 in Microsoft’s monthly "Patch Tuesday" event with four other bulletins, MS06-015 addressed a critical vulnerability in Windows Explorer that could allow remote code execution.

According to Microsoft, "well under a thousand" users reported problems with older versions of HP's "Share-to-web" software and older NVIDIA video card drivers. Both companies have newer versions of the software available for download online.

Microsoft initially provided user workarounds including a registry key fix, uploading the latest version of the HP or NVIDIA software or uninstalling the software. Some of those options are detailed in a Knowledge Base Article here.

Toulouse wrote that the new patch will have detection logic so it will only install on affected systems or on systems that haven't received the patch at all.

In trying to put the number of complaints in perspective, Microsoft released an interesting bit of data about the ubiquity and speed of its patching infrastructure: As of April 18, one week after the patch was first released, it had been successfully installed 120 million times.

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • Microsoft Previews Whiteboard Support in Teams Rooms Devices

    A preview of a new Microsoft Teams Rooms feature will enable organizations to use images of physical whiteboards as a dynamic space for videoconferencing.

  • 2019 Microsoft Conference Calendar: For Partners, IT Pros and Developers

    Here's your guide to all the IT training sessions, partner meet-ups and annual Microsoft conferences you won't want to miss this year.

  • Microsoft Warns of Heightened Threat of 'BlueKeep' Attacks

    Older Windows systems using Microsoft's Remote Desktop Services are at acute risk of remote code execution attacks due to the "BlueKeep" vulnerability.

  • The 2019 Microsoft Product Roadmap

    From the next major update to Windows 10 to the next generation of HoloLens, here's what's on tap from Microsoft this year.