Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Installing a Patch Silently - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Installing a Patch Silently
For those who are manually patching systems using Ilfak Guilfanov's unofficial patch, handler Tom Liston says that you can install it in an unattended mode by using this incantation:

wmffix_hexblog14.exe /VERYSILENT /SUPPRESSMSGBOXES

More details are here.  We do not have a working .msi version and am actively seeking help from anybody who can get one working.  This will make life a whole lot easier for enterprise administrators.  Unfortunately the above command will not work pleasantly in a GPO startup script, since a reboot is required for it to take effect.  After the reboot, it will try to install again which will create an annoying error message to users. 

A reminder:  be sure to test the patch above before deploying it across an enterprise.  While the handlers (including me) are running it on our own personal systems and it works as advertised, we can't vouch for any special software you might have in your own systems that could be disabled after the patch is installed.

Marcus

301 Posts
ISC Handler

Sign Up for Free or Log In to start participating in the conversation!