 | By Susan Bradley The second of two Patch Tuesdays this month brought us more fixes that must be taken seriously. Though some of us are still playing catch-up from the Pre-Patch Tuesday that occurred on Apr. 3, it’s now time to fix important issues with Windows Vista, Realtek, and others. |
MS07-017 (925902)
.Ani bug patch needs a patch
As you may recall, Microsoft released a special security update on Apr. 3 to fix an issue that affects every version of Windows, including Vista. This update was a patch for an Animated Cursor File (.ani) vulnerability and other graphics processing flaws. The patch, unfortunately, prevented Realtek’s HD Audio Control Panel from running after the update was installed.
This week, we’re revisiting that patch, MS07-017 (925902). If you’re not familiar with the patch and its problems, read last week’s Patch Watch article. I want to make you aware that the new Microsoft patch that was designed to fix issues with the original patch is now more easily downloadable to your systems.
As the SANS Storm Center says, this is a crucial "patch now" issue. Malware and password-stealing attacks that exploit this flaw have already been found in the wild.
Knowledge Base article 935448 is now available and the fix can be downloaded using all the typical update mechanisms, including Windows Update and Microsoft Update. Even if you don’t have the Realtek Audio Control Panel software installed, you should install the new patch if you see the error message mentioned in my article last week. If so, let me know what software was mentioned as causing the issue in the error message.
Related posts:
