10 responses to “MS-DEFCON 2: Eight Security Bulletins are out”

1. 

   todd April 15th, 2009 at 15:42

   Hi I also got 3 other updates which are kb952004,kb956572,and kb905866 which are not listed could u tell me what these do i have a 64-bit vista system . Thanks 4 any help. Your site is very helpful

2. 

   woody April 15th, 2009 at 20:41

   Todd -

   The first two are alternate KB numbers for MS09-012. I suggest you hold off on them.

   The last one is an update for Windows Mail. (!) I have no idea why it was offered to you, unless you suddenly started using Windows Mail. If you did, you should switch over to Windows Live Mail, http://download.live.com/wlmail , which is supported. Windows Mail has been orphaned, pretty much.

3. 

   RK April 15th, 2009 at 21:15

   Hi – I too show three KB’s not mentioned. Also, you mention four KB’s I do not have in my patch list for downloading:
   My patch items you did not mention:
   KB923561,952004,956572.
   Your mentioned items I do not have in my patch group:
   KB959454,960477,961759,968557.

   I realize I may not need some/any of those in this last group due to what MS programs I have on my PC (Dell using WinXP SP3), I may need your comments on those I have that you did not mention. (I also have two others that you have mentioned in previous items, so I discount those.)

4. 

   woody April 15th, 2009 at 21:31

   If the updates aren’t offered to you, and you’re running a “Genuine” copy of Windows XP, you don’t need to worry about them. There are many, many reasons why you may not need specific patches.

5. 

   RK April 15th, 2009 at 23:56

   Why am I always misunderstood. I hoped to get a comment or two about the three patches I can d/l, but were not mentioned in Woody’s item. (I thought I conveyed that I understood I might not have to concern myself about items Woody mentions and items not in the d/l list.)

6. 

   woody April 16th, 2009 at 09:00

   RK -

   The KB articles you see are secondary articles for the patches.

   KB 923561 is for MS09-010

   KB 952004 is for MS09-012

   KB 956572 is another Knowledge Base article for MS09-012.

   I could try to list all of the KB articles for all of the patches, but you’d see hundreds of numbers. Instead, I’ve listed the KB articles that most people see.

   If you’re ever curious about a Knowledge Base article, start Firefox and in the address bar type KB followed by the number, then press Enter. You don’t need to type in an URL. Simply typing, say,

   KB 956572

   will list the KB article as the first result.

   As a side-note… there are already LOTS of identified problems with this month’s patches.

7. 

   RK April 16th, 2009 at 09:11

   Please excuse me, I am not a techie, I barely know that there is a relationship between KB’s and the MSnn-nnn’s. You have to understand that all I see on the MS update screen are KB’s, so you are my go-to guy to let me know if I can paste them up or not.
   I want to thank you for your site and what you do for guys like me.

8. 

   woody April 16th, 2009 at 10:55

   RK -

   No problem at all. It’s a jungle out there.

   Most people don’t realize that typing KB followed by the number will take you straight to the Knowledge Base article.

   ‘Course, you may have a bit of trouble understanding the article. I frequently do…

9. 

   Dave April 17th, 2009 at 00:04

   I noticed that Susan Bradley in Window’s Secrets suggest that KB 963027 and KB 959426 should be installed immediately, even if you use Firefox.

   I presume that you disagree.

   Thanks

10. 

    woody April 17th, 2009 at 07:20

    Yep, I disagree. Susan and I often do.

    We address different audiences. Susan is more oriented toward businesses, I’m more concerned about home and home office users.

    At some point you’ll need to update Internet Explorer. But for now, as long as you’re using Firefox, I don’t see much exposure at all. SANS Internet Storm Center reports that exploit code is publicly available, but I haven’t heard of any working exploits if you’re using Firefox. MS09-014 says, “The vulnerabilities could allow remote code execution if a user views a specially crafted Web page using Internet Explorer or if a user connects to an attacker’s server by way of the HTTP protocol.”

    The other patch, KB 959246, is for a hole that’s been around a long time – the Safari carpet bomb attack. CVE says, “Apple Safari on Mac OS X, and before 3.1.2 on Windows, does not prompt the user before downloading an object that has an unrecognized content type, which allows remote attackers to place malware into the (1) Desktop directory on Windows or (2) Downloads directory on Mac OS X”

    While business users may still be running Internet Explorer – and some brave souls run older versions of Safari – I would be very surprised if any of the readers here fell into either group.