Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: Possible Issue with Forefront Update KB2508823 - SANS Internet Storm Center SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Possible Issue with Forefront Update KB2508823

Included in this Patch Tuesday is a Forefront update KB2508823[1] (Client Version: 1.5.1996.0).

We have received a number of reports that the KB2508823 update fails during the install. Once the update fails, the existing Forefront client is also removed. This leaves the machine without any anti-malware protection.

We recommend you hold off deploying the update until confirmation from Microsoft.

Microsoft have posted a similar warning here:



Chris Mohan


105 Posts
ISC Handler
Mar 9th 2011
Microsoft had an update on the TechNet blog:

It seems the issue is caused by a previously undetected problem in Oct 2010 update. And this issue won't affect windows XP.

Sign Up for Free or Log In to start participating in the conversation!