The company posted an update to its MS08—030 bulletin. The patch was meant to address a remote code execution vulnerability in Windows XP and Vista which had been deemed a 'critical' security risk by the company.
The original version of the patch posted on June 10th fixed the issue in Windows Vista, but left XP vulnerable. Windows 2000 and all Windows Server were not subject to either of the security bulletins.
"As soon as we learned of that possibility, we mobilized our Software Security Incident Response Process (SSIRP) to investigate the issue," said Microsoft security and response communications lead Christopher Budd.
"Our investigation found that while the other security updates were providing protections for the issues discussed in the bulletin, the Windows XP SP2 and SP3 updates were not."
The updated version of the patch can be obtained automatically through the Windows Update and Microsoft Update services. It can also be downloaded manually from the Microsoft Download Center web site.
Microsoft re-releases security fix
By
Shaun Nichols
on Jun 21, 2008 3:24PM
Microsoft has re-issued an ineffective security patch it released earlier this month.
