| By Susan Bradley |
If you installed XP Service Pack 3 or Windows Server SP2 after September 2008, you need to reapply an important security update.
In addition, if Windows Update offers your XP or Server 2003 system Microsoft’s security bulletin MS08-067 patch, you should install it — even if you’ve previously done so.
XP SP3 and Server 2003 SP2 may need repatching
You may be wondering why my lead topic today is MS08-067, a patch from 2008. Well, I’m wondering, too.
You may find this week that your Windows XP SP3 and Windows 2003 SP2 machines are offered MS08-067 (954593). If so, you probably installed SP3 on XP or SP2 on Windows 2003 some time after September 2008.
People who installed MS08-067 when it first came out last summer — and then installed either the XP SP3 or 2003 SP2 service pack — may not know that systems were reverted back to a vulnerable version of gdiplus.dll.
Service packs aren’t supposed to do that. They’re supposed to be smart enough to retain the patched versions of all system files.