Please install KB937061 seventy nine thousand times - Windows Updates

Microsoft Windows Forums Security Center Windows Updates Please install KB937061 seventy nine thousand times

9/13/2007 7:29 PM

	Srinath Sadda
1230 posts
www.meraTechExplorer.com
MW Addict

Please install KB937061 seventy nine thousand times

A hotfix making rounds is causing quite the confusion for Visual Studio users this week, surprise surprise. KB937061 was released two days ago, patching a vulnerability in the way Crystal Reports for Visual Studio handles maliciously crafted RPT files. Everyone installs/uses Crystal Reports right?

Because Windows Update is assuming that all users with some flavor of Visual Studio installed are using Crystal Reports, the hotfix is applied and it reports success (strangely).

Upon the next scan of your system, the hotfix isn't found, recommended for install, and ultimately "installed" again. Upon the next scan of your system, the hotfix isn't found, recommended for install, and ultimately "installed" again. Upon the next scan of your system, the hotfix isn't found, recommended for install, and ultimately "installed" again. Upon the next scan of your system, the hotfix isn't found, recommended for install, and ultimately "installed" again...

The workaround, at this point, is to hide the hotfix but I wouldn't recommend that. Just hold still, Microsoft will patch it up soon.

UPDATE

"If you have VS 2005 SP1 present but the Crystal Reports feature is not present, MS07-052 is re-offered. Customers are protected and are not at risk to this vulnerability We will be updating the detection on Microsoft Update, customers that have already installed this update need to take no action. We are working to resolve this issue and it should be fixed shortly Thank you" - Eric Brodish, Microsoft Corp (microsoft.public.windowsupdate)

[ Security Bulletin MS07-052 // Discussion on Microsoft forums ]

[ View ]