DrJBHL DrJBHL

Huge “Patch Tuesday” Coming–17 Bulletins–64 Vulnerabilities Addressed

▼

Huge “Patch Tuesday” Coming–17 Bulletins–64 Vulnerabilities Addressed

from JoeUser Forums

A really HUGE Update is coming on Tuesday!

17  patches are coming: 8 rated “Critical” and 9 rated “Important” with fixes for 64 documented vulnerabilities across Microsoft Windows, Microsoft Office, Internet Explorer, Visual Studio, .NET Framework and GDI+.

From Pete Voss’s Technet Blog:

 

“This month we'll be closing some issues that Microsoft has already previously spoken to, including the SMB Browser (Critical) issue publicly disclosed Feb. 15. Microsoft assessed the situation and reported that although the vulnerability could theoretically allow Remote Code Execution, that was extremely unlikely.  To this day, we have seen no evidence of attacks.

We are also planning a fix for the MHTML vulnerability in Windows, rated Important. We alerted people to this issue with Security Advisory 2501696 (including a Fix-It that fully protected customers once downloaded) back in late January. In March, we updated the advisory to let people know we were aware of limited, targeted attacks.

The bulletin release scheduled for the second Tuesday of the month, April 12, at approximately 10 a.m. PDT.”

Voss didn’t address the vulnerabilities discovered in the “Pwn2Own” contest.

People, please get the updates and patches. Also, please update your Programs: Stardock’s, and others…. This is an important key to your security, and a fast, reliable computer.

118,845 views 81 replies
Reply #26 from WinCustomize Forums Top

Okay

Reply #27 from WinCustomize Forums Top

Quoting Uvah, reply 24
I like you. You're silly. Seen it but never seen it.
End of Uvah's quote

at lest I make someone :rofl: :rofl:

Well it's like when I told my Niece's and Nephew to not leave their Bikes in the middle of the side walk cause someone Blind could trip over them ....... wait for it

 

and what do I do as I am walking to them the bikes and telling them ......... Yes I tripped over them. :|

 

now back off topic oops on topic 

my updates automatically even though I stopped 7's SP1 with SP's I wait and Hide to see if others PC's get Screwed then if all is good I pounce on them   

Curtains - Customize Windows with additional styles
Reply #28 from WinCustomize Forums Top

Just recently installed SP1 on Win7 Pro. Took 90 minutes this time around. On Home premium it took just under an hour. It was the day room I was at this time. Before it was sitting in Starbucks enjoying a very large Pike's Place. Good stuff.

Reply #29 from WinCustomize Forums Top

Quoting DisturbedComputer, reply 27
my updates automatically even though I stopped 7's SP1 with SP's I wait and Hide to see if others PC's get Screwed then if all is good I pounce on them
End of DisturbedComputer's quote

No one in their right mind should enable auto updates. Good way to let MS get inside your machine with WGA stuff.

Reply #30 from WinCustomize Forums Top

And WGA is undesirable because?

Reply #31 from Stardock Forums Top

Quoting Uvah, reply 24
What is GDI+?
End of Uvah's quote

One of the many graphics libraries on Windows. One that has more features and is easier to use than the basic GDI (Graphics Device Interface) but is not hardware accelerated like DirectX.

Reply #32 from WinCustomize Forums Top

Quoting DrJBHL, reply 30
And WGA is undesirable because?
End of DrJBHL's quote

Because I know I have a legit copy that came with my brand new machine and I don't need the system calling home to verify this every other month. I value my privacy. Besides Windows calling home eats up resources.

Reply #33 from WinCustomize Forums Top

meh.

Reply #34 from Stardock Forums Top

Quoting kona0197, reply 32
Quoting DrJBHL, reply 30And WGA is undesirable because?

Because I know I have a legit copy that came with my brand new machine and I don't need the system calling home to verify this every other month. I value my privacy. Besides Windows calling home eats up resources.
End of kona0197's quote

 

what?!?

Allowing windows to "phone home" now and then eats up resources?   The last time I needed to be concerned about "resources" I was running a 386 with 16MB RAM and had to decide which proggy would get to use what ram (high/low).   Besides, there are benefits to running WGA like having access to their FREE antimalware suite which is actually quite good and getting additional software support that isn't deemed "critical".

What privacy?  You browse the internet right?  You're on this forum......in this thread......google analytics is SPYING on you right now!  hehe  ;P

 

As Doc already so aptly put it!    meh

Reply #35 from WinCustomize Forums Top

I didn't want to say anything. Him did. ^^^^^^^

Reply #36 from WinCustomize Forums Top

Well,I knew some people got problems(reached a porn search) with the link posted from me to Secunia website.I can assure everyone I don't know anything about this.The link is not clickable for me,just copy/paste,and it goes to Secunia website(I checked several times).

However,I made some variations.

If the problem is still there I'll remove the post.

@ the_Monk - That could be right,I have got autocomplet add-on installed.But,in any case,no way at all for me to get a porn search!!

@Uvah- For what exactly PSI says you need a security patch? PS7 is the prog,but the patch can be needed,for example,for a plugin.Secunia PSI allows you to make a very detailed research about the problem.Always as example,around every month 1 version of Adobe Flash Player needs a patch(Insecure;contains vulnerability),until the updated version,that fix the problem,is released.

If something results end-of-life,please,check the element carefully;click on it in the scan result tab,go to the folder and open it.Although every software can make some mistakes,Secunia is not an antivirus,and it doesn't detect "false positive".

One more thing: did you enabled the Secure Browsing option? 

Reply #37 from WinCustomize Forums Top

There's a secure browsing option? In PSI or the browser? I use the one in FF4.

two things. One: I have an update for PS7, Its 7.01. When I tried to install it it says it cannot find Photoshop 7 in programs (x86) yet it is there and PSI found it with no problem. Two: I clicked on install solution and it very quickly took me to the download page for CS5. I do not have $1,000.00 US for CS5.

Its recommendation. Uninstall PS7. Not happening. False positive or no.

Reply #38 from WinCustomize Forums Top

Wait a minute. I just went through all the programs that PSI says are patched and up to date. One of them is XNview. I uninstalled XNview two weeks ago and put IrFanview in its place.

Reply #39 from Stardock Forums Top

Quoting Uvah, reply 38
Wait a minute. I just went through all the programs that PSI says are patched and up to date. One of them is XNview. I uninstalled XNview two weeks ago and put IrFanview in its place.
End of Uvah's quote

It must have left some data in the registry after the uninstall or something like that.

Reply #40 from WinCustomize Forums Top

Open PSI;in the main page,on the left,there is the section Configuration.Click on it,then Settings;check the box Enable "Secure Browsing" Page.

Next time  PSI will scan your PC you will get an additional page,Secure Browsing,that shows you the real time situaion of your browsers(loaded progs,plugins)and their security status as well. 

Reply #41 from WinCustomize Forums Top

Quoting Gwenio1, reply 39

Quoting Uvah, reply 38Wait a minute. I just went through all the programs that PSI says are patched and up to date. One of them is XNview. I uninstalled XNview two weeks ago and put IrFanview in its place.

It must have left some data in the registry after the uninstall or something like that.
End of Gwenio1's quote

Don't see how as I used Revo to uninstall it. It searches the registry for left over files. Those I deleted. Could be a folder i left behind in programs x86. Seen that happen before.

@inthebloodofeden ... doing that right now. thanks.

All done. PSI says Fire Fox is secure. PSI also says IE8 is not secure. It also says there is no vendor solution. :rofl: :rofl:

Reply #42 from WinCustomize Forums Top

inthebloodofeden: Your space bar is getting jealous of the other keys... ;)

Reply #43 from WinCustomize Forums Top

Oops .... no more unexpected excursions please.

Reply #44 from WinCustomize Forums Top

@Uvah-About XNView detection:you installed PSI just now,so there was no progs monitoring from the application.XNview detected elements could be in a "old" folder,as you said;however,if the result is patched no problem.Sometimes,if progs monitoring is not enabled in PSI,it could be possible you need some time(2 weeks,20 days..)before an unistalled prog is not detected anymore or a new one is.Anyway,if the detection is Patched,no problem.

This for progs,not for browsers.

In the scan result tab you can see everything OK.but you need to go to Secure Browsing Page to see the real situation about browsers.

I know IE8 is not safe,perhaps there will be a patch from Microsoft,maybe not.Now they released IE9...

@DrJBHL-I understood,Doc.I'll take care.

Reply #45 from WinCustomize Forums Top

Taht was entertaining....

The quickest solution is just to correct the link in the original post.....[dun that]....;)

Reply #46 from WinCustomize Forums Top

Quoting the_Monk, reply 34
Besides, there are benefits to running WGA like having access to their FREE antimalware suite which is actually quite good and getting additional software support that isn't deemed "critical".
End of the_Monk's quote

I have yet to see any benefits from using MSE. AVG and Malewarebytes do a better job. Top that off with MSE does not have an option to turn off auto updates. Very annoying.

I block updates having to do with WGA. KB971033 for example. Here's a good reason why among others:

http://lauren.vortex.com/archive/000681.html

Reply #47 from Stardock Forums Top

Quoting kona0197, reply 46
Quoting the_Monk, reply 34Besides, there are benefits to running WGA like having access to their FREE antimalware suite which is actually quite good and getting additional software support that isn't deemed "critical".

I have yet to see any benefits from using MSE. AVG and Malewarebytes do a better job. Top that off with MSE does not have an option to turn off auto updates. Very annoying.

I block updates having to do with WGA. KB971033 for example. Here's a good reason why among others:

http://lauren.vortex.com/archive/000681.html

End of kona0197's quote

 

1.  MSE (especially the latest version with additional network protection) blows AVG clean out of the water.  AVG (at one time wasn't bad) is total bloatware now and for a fellow consumed with "resource usage" you sure have no problem just giving them away to sub-par software.  Malwarebytes isn't terrible but for a second opinion I'd much rather use HitMan Pro  www.surfright.nl  which I promise you is faster and much much more thorough.

 

2.  That article you linked is filled with conspiracy-theory like sentiment and I honestly can't believe there are still people out there believe such things.  Yes there have been "false positives" with regard to WGA (nothing a quick phonecall to MS won't / can't fix)......also nothing AVG and Malwarebytes haven't been guilty of in the past!  ;P

 

Either way, WGA and hell anything at all from MS is easy to work with if you don't have the "MS-hater" disposition to begin with.  Sure there were reports a few years ago of people having installed a "bad" MS update because of "automatic updates" and having subsequent issues, but attempting to USE those statements to suggest that DENIAL of WGA and/or MS automatic updates is for the greater good is BULLOCKS!

 

the Monk

 

Reply #48 from WinCustomize Forums Top

Quoting inthebloodofeden, reply 44
@DrJBHL-I understood,Doc.I'll take care.
End of inthebloodofeden's quote

hmmmm..... I don't think so...

 

MSE and WGA are fine with me. I only wish the skins placed here and Master Skins had a WGA. Wouldn't be a perfect fix, but it would help protect from Piracy.

If WGA protects Windows, then MS is just protecting its software, and that's just fine too. MSE works very well. Not perfect, but what is?

Reply #49 from WinCustomize Forums Top

I woould use MSE except there is no option to turn off the auto updates. When installed it turns on Windows auto updates. Unacceptable.

By the way AVG rates higher than Norton or McAfee. That's all I really am concerned about. A product that will detect viruses and work better than those programs you pay for.

Reply #50 from WinCustomize Forums Top

Quoting kona0197, reply 49
By the way AVG rates higher than Norton
End of kona0197's quote

Sorry, kona but no. Not in this world. Norton has been rated the best, and trades off with Kaspersky for that depending which review you read, and which testing done. But AVG isn't number one (unless you mean among the freewares).