Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Possible Issue with Forefront Update KB2508823 SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Possible Issue with Forefront Update KB2508823

Included in this Patch Tuesday is a Forefront update KB2508823[1] (Client Version: 1.5.1996.0).


We have received a number of reports that the KB2508823 update fails during the install. Once the update fails, the existing Forefront client is also removed. This leaves the machine without any anti-malware protection.

We recommend you hold off deploying the update until confirmation from Microsoft.

Microsoft have posted a similar warning here:
http://blogs.technet.com/b/clientsecurity/archive/2011/03/08/fcs-v1-march-2011-update.aspx

[1] http://support.microsoft.com/kb/2508823

 

Chris Mohan

 Chris

105 Posts
ISC Handler
Subscribe Mar 9th 2011
9 years ago
Microsoft had an update on the TechNet blog:

http://blogs.technet.com/b/clientsecurity/archive/2011/03/08/fcs-v1-march-2011-update.aspx

It seems the issue is caused by a previously undetected problem in Oct 2010 update. And this issue won't affect windows XP.
 Anonymous
Quote Mar 11th 2011
9 years ago

Sign Up for Free or Log In to start participating in the conversation!