Woody Leonhard’s no-bull news, tips and help for Windows and Office
RSS icon Email icon Home icon
  • That Windows XP “Help Center” 0day

    Posted on July 4th, 2010 at 22:22 woody 6 comments

    Jacie wrote in one of the comments about seeing a BBC report on a Windows XP 0day security hole associated with the Help & Support function. Brian Krebs has a good discussion of it on his site.

    I’m not convinced it’s a major problem, but there’s no reason to sit and wait for Microsoft to patch it. If you’re still using Windows XP, go to KB article 2219475 and apply the fixit.

     

    6 responses to “That Windows XP “Help Center” 0day”

    1. My first “fix it”. Instructions nice and clear.
      Done.

    2. Hi Bill,

      What does this “fix-it” thing actually do?

      I actually have the Help Service set to “manual” and not “automatic”, so would this issue still affect me? Would I still need to do the “fix-it”?

      If so, would I need to reset the Help Service back to “automatic” before doing the “fix-it”? Or does it not matter?

      Or could I just set the Help Service to “disable” instead of doing the “fix-it” if need be? (Do other necessary services rely on the Help Service? I’m guessing not, since when I check the services list, it’s never running and I never use it.)

      My info: Windows XP SP2, IE 6 (used only for MS Updates), Firefox 3.6.6 (for all internet browsing), and Outlook Express 6. (Yeah, I know it’s old stuff…)

      Thanks, Woody!

    3. @Bill -

      You just run the Fixit. It switches a couple of Registry settings. Very simple.

    4. Thanks, Woody! (Not sure why I wrote my first post to my own name! D’oh!) :)

    5. MS Fixits are usually easy to apply and cause few problems, in my experience. And like many of the others, this one can be reversed when and if a real patch or this issue is ever released through MS Updates.

    6. @RC -

      Looks like this month’s Black Tuesday patches will fix the problem.

    Leave a reply