Something interesting about the recent Windows Patches was reported last week and many people missed it. According to Microsoft, anyone who used Microsoft Update or Microsoft Windows Server Update Services (WSUS) to download updates on computers running Windows Vista together with Microsoft Office 2007 may not have received the update offer. Alternatively, the company said if the updated were offered, the might not have installed correctly.
I wanted to let you know that we have updated the detection logic for the May 8th Security and Non-Security Updates for Office 2007, with the exception of the Junk Mail Filter update. In some cases, the original detection logic may not have offered the updates or the updates may not have been installed successfully on systems running Windows Vista, said Mark Griesi a member of the SRCT.
The changes to the logic Griesi said affected three MS bulletins. The three affected programs are MS07-023, MS07-024, and MS07-025. The missing patches, patched vulnerabilities in Office relating to remote code execution. MS07-025 was rated as important on Office 2007. The patch was listed as critical on all other Office versions. The other two patches listed as important targeted flaws in Excel and Word.
Its important to note that there has been no change to the actual binaries in the updates themselves, Griesi added. If you have already successfully installed the updates using Microsoft Update, you will not be offered the update again. The updates will also be available through WSUS and SMS/ITMU.
Administrators using WSUS to manage Vista networks using Office 2007 are reminded to approve the new patches. End users who get the updates from WSUS will also need to allow the new patches. So for those of you out there, such as myself, who are running Office 2007 on Windows Vista, please go ahead and install these updates if they are offered to you, Griesi offered, as one final bit of advice.
There are also two documents offered by Microsoft with additional details. The KB articles are KB934233 and KB934873.
Your Talkback on this Story