Critical Microsoft Patches Cause Havoc

[Thaising]

Healer, heal thyself: This month three Microsoft security fixes ended up causing a lot of folks serious problems with Internet Explorer, Office, and Outlook Express.

A recent patch for Windows Explorer, distributed via Windows Update, essentially rendered Office unusable for many people, preventing them from opening or saving files. For others, IE's address bar refused to accept manually entered URLs.

The trouble mainly affected users who have the HP Share-to-Web program, which is no longer distributed. It came with HP PhotoSmart software, any HP DeskJet printer with a card reader, and HP scanners; some HP cameras and optical drives also bundled the software. And certain PCs running older nVidia graphics cards had problems as well.

Microsoft has issued a new patch via Windows Update. If you have Automatic Updates enabled, it will automatically determine if you need the "patched" patch. (See the tips below for more on configuring Automatic Updates.)

Meanwhile, a patch for IE plugged eight critical holes in the browser but also altered IE's behavior in response to an ongoing patent lawsuit brought by a California university. The update adjusts the way IE handles commonly used ActiveX controls, particularly for plug-ins such as the Macromedia Flash Player.

For the browser change to work correctly, Web sites have to make corresponding changes. Otherwise, every ActiveX control on a site requires an extra click to activate.

Microsoft has been trying to get the word out to Web site managers, but of course many of the millions of sites out there didn't get updated. And users, who received little notice about the change, were caught off guard when many sites suddenly seemed broken.

Microsoft released a temporary workaround that undoes the ActiveX control patch while leaving the security update intact. The fix is due to be phased out soon because of the continuing patent battle, but for now you can get it here.

As if those bugs weren't enough, users have reported that their Outlook Express 6 address book vanished after they installed a Microsoft security patch for that program.

Microsoft has said only that it is looking into the problem. Users on the company's forum say they were able to retrieve their address books by uninstalling the patch. Luckily, the bug it fixes isn't critical, so removing the patch seems to be an acceptable way to get OE's address book working again.

[rainman]

i've turned off automatic updates since my last installation and other than the red icon on the lower right corner of my screen alerting me that my computer is outdated and at risk, its been a ride without bumps

[rishi]

i've turned off automatic updates since my last installation and other than the red icon on the lower right corner of my screen alerting me that my computer is outdated and at risk, its been a ride without bumps

One can get rid of that anoing popup via 'Control Panel --> Security Center --> Change the way security center alerts me'.

[Firefoxx]

I've had problems with updates before... there are plenty of documented cases of security updates causing system instability. You just do as you see fit. I've had a case where I installed an NT service patch on a server, and the server died.

[rainman]

i've turned off automatic updates since my last installation and other than the red icon on the lower right corner of my screen alerting me that my computer is outdated and at risk, its been a ride without bumps

One can get rid of that anoing popup via 'Control Panel --> Security Center --> Change the way security center alerts me'.

lookie there, something i didn't know..thanks