 | By Susan Bradley Even though Patch Tuesday has come and gone, we’re finally getting the solutions for several issues that cropped up after the latest patch for Internet Explorer was released. The patch, MS07-027, is high-priority to install now, but you first need to know about two major problems. |
MS07-027 (931768)
IE patch has problems but is important
Last issue, I had hoped to strongly recommend that folks install the latest IE security patch, MS07-027 (KB 931768), as it included numerous fixes to annoying print-margin errors. But late-breaking issues made me tell everyone to hold off. Now I’m ready to recommend installing, but with the warning that the patch has some issues of its own.
KB 937409 documents the first issue, which is commonly referred to as the "navcancl" issue. Primarily in Vista machines, as the MSRC blog explains, the issue is caused by temporary Internet files being in a location that doesn’t have the proper permissions set. The recommended workaround is to move the location back, as described in the KB article. While you could change the permissions on the folder or turn off IE’s phishing filter, it’s not recommended that you do so.
The next issue, which is still being tracked, involves an antispyware program that places too many hyperlinks in the Restricted Sites zone in Internet Explorer. This causes Outlook to react with a delay upon each keystroke. Sandi Hardimeier details the issues in a Spyware blog post. The workaround is to remove the site restrictions — or pick another antispyware program that doesn’t do this.
MS07-023 (934233) and MS07-025 (934873)
Office patches for Vista being offered again
If you’re running Vista and noticed that MS07-023 (KB 934233) and MS07-025 (KB 934873) were reoffered to patch your Office 2007 suite after Patch Tuesday, you’re not alone. The MSRC blog explains that there was a detection logic and, as a result, the patches may not have been properly installed on Vista.
(937871)
Svchost.exe issue revisited with new info
I told you in the last Patch Watch on May 10 that a fix for the so-called Svchost issue had arrived. With Microsoft Update installed, svchost.exe sometimes goes wild and consumes all available CPU time.
Related posts:
