Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » Microsoft Security Bulletin(s) for September 9, 2008
Search Topic:
Uniqs:
1882
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Spybot- saw this and downloaded it, figured I would share »
« do company servers know where you've been?  
page: 1 · 2
AuthorAll Replies
-


Curley

join:2002-04-10
Michigan
reply to dp
Re: Microsoft Security Bulletin(s) for September 9, 2008

Thank you Dp! Only needed 1 patch for GDI+.


AB
Premium
join:2006-04-04
Leesburg, VA

reply to Mele20
said by Mele20 See Profile :

I wasn't talking about the Microsoft page being straightforward or not. I was referring to Anonymous1's post and what Microsoft told him/her.
Silly me.
Given that you stated, in regards to the Windows Media 9 Encoder, that you had "read about it and . . . still don't really get what it is for", I was under the impression you had read about it, yet still didn't really get what it was for.


Anonymous1

@bell.ca
reply to dp
"...at some point, something you installed may have included WME 9. You may have removed it later but still have something on the PC that triggers the update."

Hmmm you maybe right HA Nut, I wonder what it could be.


HA Nut
Premium
join:2004-05-13
USA

reply to Anonymous1
I have 2 XP PCs. One needed the WME 9 patch and the other did not. The one that did, indeed has the encoder package as it was bundled with some media software I loaded some time ago. My guess (and that's all it is ) is that at some point, something you installed may have included WME 9. You may have removed it later but still have something on the PC that triggers the update.


Anonymous1

@bell.ca

reply to dp
I was on the phone with Microsoft for a couple of hours yesterdays and was transfer to many different departments, one them was the XP dept, in the end the Tech person on the line told me to download the Encoder and then install the patch and that is what made the problem go away.

I just want Microsoft to fix this problem because I don't want and I don't need Windows Media Encoder 9 on my computer. I guess another way to resolve the problem is if I turn off Automatic Updates. I just think that is not a good idea.

An hour later, I thinking maybe if I uninstall Windows Media Encoder 9 the patch will somehow stay on the computer. It did not and guess what happen when I restarted my computer? Automatic Updates prompt's me I have a update..... arrgghhhh this is madness.

FYI, I have XP SP3

Mele20
Premium
join:2001-06-05
Hilo, HI
reply to AB
I wasn't talking about the Microsoft page being straightforward or not. I was referring to Anonymous1's post and what Microsoft told him/her.

Mele20
Premium
join:2001-06-05
Hilo, HI

reply to Anonymous1
said by Anonymous1 :

And there is no treat to you if you don't have Windows Media Encoder 9 installed. Doesn't Windows Update scan your computer for the patches you do need?
I don't use WU. I get patches directly from Microsoft Download site each month after reading the monthly security bulletin both here and I also get the bulletin in my email. Probably, if I used WU, I would be offered this even though I don't have Windows Media Encoder 9. I agree it sounds like Microsoft goofed with this patch and their scanner is not working right since folks without the program are still being offered the patch.

You won't find any Microsoft folks here except Aaron Huelett who posts occasionally but his area of expertise is malware. I think you should call Microsoft. Problems with patches is a free call. However, the times I have called you have to get beyond the first line of response as those folks don't know much. You have to make it clear to the operator, who routes all the calls, that you are calling regarding a security patch for XP and that you want to speak to someone in the XP department. The operator may try and tell you that your credit card will be charged for the help but that is incorrect as all help regarding security patches is free of charge. But you need to get to someone in either XP or Vista (whichever you have) department.

--
"The same ferocity that our founders devoted to protect the freedom and independence of the press is now appropriate for our defense of the freedom of the internet. The stakes are the same: the survival of our Republic". Al Gore, The Assault on Reason


AB
Premium
join:2006-04-04
Leesburg, VA

reply to Mele20
said by Mele20 See Profile :

. . Windows Media Encoder 9 is NOT installed on this computer. . . .

. . What exactly is it for as I think it sort of odd it was on my earlier Dell that came with XP Pro SP1 but not on this Dell with XP Pro SP2. Hmmm...I went and read about it and I still don't really get what it is for . . . .
Seems pretty straight-forward to me:

quote:
Overview
Windows Media Encoder 9 Series is a powerful tool for content producers who want to take advantage of the many innovations in Windows Media 9 Series, including high-quality multichannel sound, high-definition video quality, new support for mixed-mode voice and music content, and more.

More Control and Flexibility
Capture content with frame-accurate control. Protect live streams and initiate broadcasts. Author for a range of delivery scenarios including MBR streaming and CD/DVD.

Unmatched Audio and Video Quality
Create the clearest audio from multichannel to voice-only content. Encode to any levelfrom HD quality (1080i/1080p) to low data rate screen capture. Fine tune compression using new encoding modes.

Extensibility and Automation
Extend the Encoders functionality. Fully automate the encoding process. Includes 4 new utilities.
»www.microsoft.com/downloads/deta···ylang=en

»www.microsoft.com/windows/window···req.aspx

-----------------

From the KB page:

quote:
Mitigating Factors for Windows Media Encoder Buffer Overrun Vulnerability - CVE-2008-3008

• By default, Windows Media Encoder 9 Series is not installed on any version of Windows.
»www.microsoft.com/technet/securi···053.mspx


Anonymous1

@bell.ca

reply to dp
Mele20, I didn't want to install Windows Media Encoder 9 on my computer but if I didn't Automatic Updates would always prompt me saying I have updates to download.

The only way to fixed the problem for me was to download Windows Media Encoder 9 install it on my computer and then I install the patch from Windows Update.

What is really frustrating is why was this patch showing up for me on Windows Update in the first place? I didn't have the program so I didn't need the patch since the patch ONLY work with the program installed. And there is no treat to you if you don't have Windows Media Encoder 9 installed. Doesn't Windows Update scan your computer for the patches you do need?

I think, Microsoft needs to fix there scanner on Windows Update. Am I the only on here having the same issue? If you do how did you resolve it? Are there any Microsoft people here, on this forum, that I can talk too?


jaykaykay
4 Ever Young
Premium,MVM
join:2000-04-13
Scottsdale, AZ
reply to dp
Thanks for the heads up and thank heaven I know where to come before installing anything, from MS or anyone else. I will feel secure in doing so now. You guys are great.

Mele20
Premium
join:2001-06-05
Hilo, HI

reply to plk
I searched for it and found it in an obscure file that I forgot was copied from my old XP machine that died under warranty and replaced by Dell with this one. But Windows Media Encoder 9 is NOT installed on this computer. It was on my older XP computer. What exactly is it for as I think it sort of odd it was on my earlier Dell that came with XP Pro SP1 but not on this Dell with XP Pro SP2. Hmmm...I went and read about it and I still don't really get what it is for or why I had it on my older XP computer but don't on this one.
--
"The same ferocity that our founders devoted to protect the freedom and independence of the press is now appropriate for our defense of the freedom of the internet. The stakes are the same: the survival of our Republic". Al Gore, The Assault on Reason


plk
bo may sleep in loft
Premium
join:2002-04-20
Ogden, IA
reply to Anonymous1
Same problem here with windows media encoder 9 patch.
Fails to install. Not sure if I have this or not.

But the patch fails


lilhurricane
Crunchin' For Cures
Premium,Mod
join:2003-01-11
Purple Zone
clubs:
reply to dp
Thanks Don

Got it. No issues.

Mele20
Premium
join:2001-06-05
Hilo, HI

reply to Anonymous1
I just tried to install this patch and was told that I didn't need it because I don't have Windows Media Encoder 9 Series installed on this XP Pro SP2 computer.

Why would I want to install Windows Media Encoder 9 Series like Microsoft told you to do? My computer works fine without it. I don't even know what it is but I can't see why I should install it so I can then install a patch for it since I don't miss not having it!

So, are you saying that there is something wrong with the patch or what? I am thoroughly confused here.
--
"The same ferocity that our founders devoted to protect the freedom and independence of the press is now appropriate for our defense of the freedom of the internet. The stakes are the same: the survival of our Republic". Al Gore, The Assault on Reason


Anonymous1

@bell.ca

reply to dp
Let me explain, the file shows up in Windows Update that I need to download yet reading the Microsoft documentation this patch is for people who have Windows Media Encoder 9 Series installed which I do not have in on my computer, and does not come with Windows you have to download it from Microsoft.com. So here is the problem...

...I download the software update and at the end when Windows is in the process of installing it says "...fail!" instead of "...done!" Which makes Automatic Updates always telling me that I need to update.

So I am trying to apply a patch for a problem that I don't have, so why is this update being listed? Isn't Windows Update scan before hand suppose to list the updates you need?

Called Microsoft Support, they asked me to download a problem called Dial-a-fix that did not resolve the issue.

**Just off the phone Microsoft Support and the problem is resolve. I had to download Windows Media Encoder 9 Series and then install the patch.

I ask the person on the phone if Microsoft was getting a lot of phone calls concerning this issue? He said yes, and that after people ran the Dial-a-fix program the issue was fixed.


Grail Knight
Who Dares Wins
Premium
join:2003-05-31
reply to Anonymous1
quote:
Is anyone having trouble with this patch?
What kind of problem?
--
"Lego Succurro Lima"


Anonymous1

@bell.ca
reply to dp
Is anyone having trouble with this patch?

Microsoft Security Bulletin MS08-053
Vulnerability in Windows Media Encoder 9 Could Allow Remote Code Execution (954156)


Jrb2
Premium
join:2001-08-31
 reply to dp
Thanks Don and Nick !

(did not have the time to upgrade as of yet)


NICK ADSL UK
Premium,MVM
join:2004-02-22

reply to dp
Malicious Software Removal Tool
Published: January 11, 2005 | Updated: September 9, 2008
New Additions
We have added detection and cleaning capabilities for the following malicious software:

Slenfbot

»go.microsoft.com/fwlink/?linkid=···Slenfbot
--
Wilders Security Forum Admin
Microsoft MVP - Consumer Security



danny9
Go Ahead, Make My Day
Premium
join:2002-07-14
Clinton Township, MI
clubs:
reply to dp
Got them dp.
Thanks.
--
VoicePulse 07/29/04
Forums » Up and Running » Security » SecuritySpybot- saw this and downloaded it, figured I would share »
« do company servers know where you've been?  
page: 1 · 2


Tuesday, 08-Dec 22:24:53 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [193] Sprint Sued For Distracted Driving Death
· [81] 3G Network Test Says AT&T Is Tops
· [72] Mediacom Unveils 105 Mbps Pricing
· [62] Sprint Poised For A Turnaround?
· [50] The Future Of Wi-Fi Is Bright
· [48] WPA Cracker: Test WPA-PSK Networks In 20 Minutes
· [47] Site Leaks Yahoo, Verizon Fed Data Share Pricing
· [44] Microwaving Your Innards Is Not 'Extreme'
· [39] Verizon LTE: 5-12 Mbps Downstream
· [18] Verizon Settles With NJ Over Misleading FiOS Marketing
Most people now reading
· Comcast refused to install 400' feet. [Comcast HSI]
· Windows 7 boot manager editing questions [Microsoft Help]
· ICC Strats??? [World of Warcraft]
· IMG 1.7 (IMG Updates and Discussion) [Verizon FIOS TV]
· Comcast Customers: Would You Prefer Metered Billing? [Comcast HSI]
· Man Downloads Child Porn "Accidentally," Faces 20 Years [Security]
· Servers UP!!! [World of Warcraft]
· Start a job tomorrow, but not a "day job" [Canadian Chat]
· Throttling of NNTP traffic ?? [Cogeco]