Microsoft Refutes Vulnerability of Patch

By David Worthington | Published March 31, 2005, 6:21 PM

Microsoft has acknowledged that a small number of users who installed a security patch issued in January have experienced technical problems that may degrade system performance or cause unexpected behavior. Despite published reports, however, those who applied the patch are not subject to attacks stemming from the vulnerability.

The patch, KB891711 update corrects an issue with Windows cursor and icon format handling that could lead to remote code execution. KB891711 is a critical update.

A Microsoft spokesperson told BetaNews that the quality control issues associated with the patch were, "No big deal," saying, "Microsoft has received reports of a small subset of Windows 98 and ME users that have experienced problems after installing MS05-002."

"We are currently investigating these customer cases and working to provide a solution. Microsoft continues to encourage users to install this update to be protected from the vulnerability."

Microsoft also stated that reports claiming the patch does not protect users are factually incorrect.

But whether or the number of affected users is a small subset of customers, support newsgroups were abuzz with comments from customers discussing their own tribulations.

"With a company like Microsoft with all of the external testing and customers you would think that they would not have quality control issues," said Andrew Jaquith, senior analyst with Yankee Group, a research and consulting firm.

"This shouldn't happen but it is the nature of the beast. With the myriad of supported devices and pedigree of Windows, etc, it is impossible not to have hiccups from time to time. This points to the importance of thorough beta testing before production."

Comments

View comments by with a score of at least

Only microsoft! I agree how retarted.

Score: 0

|

...I have applied it on a few 98 systems and there are no apparent issues...hey guys! It's Windows 98, the oldest OS with support for critical updates. It supports more hardware and until just last year (when Win2k took the crown--that's right, windows 2000, not XP) more software than any other OS ever. MS is only supporting it because so many people would have gone nuts if they pulled the plug. MS has wanted to end support for 98 completely since June of 2003, and I imagine their programmers are beginning to get tired of supporting that aging OS. I can cut them some slack for this one, but then again if my network had the problem I may think differently...

Score: 0

|

Microsoft doesn't really care if anybody is using their previous software or not. For example, I have several WinCE machines (Jornada 680, Jornada 548) with OS's that they feel they don't need to support any longer. They should be made to support what they create. Just like OEM automobile parts they have to manufacture them and support them for a certain number of years.

Score: 0

|

I had to uninstall this patch a week ago.. I cite multiple crashes, slower system performance and lack of stability as the reasons for the uninstall. Since I uninstalled it, system runs MUCH better

Score: 0

|

I've also experienced problems on the few remaining Windows 98 machines here on my college campus.

We have found that the patch actually creates a "RunService" entry in the registry that runs C:\Windows\System\KB891711\KB891711.exe"... shutting down the program in the task list and then deleting the registry entry in HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices "disables" the patch from memory and seems to resolve crashing issues without the need for uninstalling... Also, WindowsUpdate will not attempt to reinstall it this way since it knows the patch is still there.

Score: 0

|

I removed it too-- how moronic to make a patch run as a service...

Score: 0

|

Issues on one of our machines in the office - I was considering wiping the thing until I read this. Quick disable of it in msconfig sorted all the issues!

Beforet that we were experience exception errors every 15 seconds or so, citing a crashed application (which I can only assume was this patch). Crazy thing.

Score: 0

|

Report: Microsoft to randomize Europe's browser screen choices

The fact that "A" is for "Apple" was apparently at the heart of browser vendor objections to Microsoft's alternative to listing IE first.

Acer eclipses Dell for #2 spot in global PC shipments, says iSuppli data

It literally does look like a 360-degree turnaround in Dell's fortunes, as the bells of bad tidings now toll solely for Dell.

Microsoft, don't hang up on Windows Mobile, but do call for help

Only a Manhattan Project can save Microsoft's phone strategy now.

See ya later, WinMo: Microsoft's mobile strategy needs a reboot

Carmi Levy | Wide Angle Zoom: Hands up if you're considering upgrading to a Windows phone for the holidays...Anybody?

Intel's marriage of CPU and GPU not ready for prime time

Although there will be an Intel component this month that can compute and plot in parallel, Betanews was told today, it won't be based on Project "Larrabee."

An alternative to Research in Motion's enterprise e-mail? There's an app for that

Good Technology today released an iPhone app compatible with its enterprise e-mail solution.

Playing catch-up in 2010: Windows Mobile, BlackBerry, and Symbian

Microsoft, RIM, and Nokia are each working on improved mobile operating systems. But could these efforts add up to too little, too late?

Will Nokia's plans further alienate American consumers?

A look at Nokia's plans for the coming years does little to shine up the company's increasingly dull image.

Bing bonked by service outage Thursday, Microsoft configured the wrong server

It's always nice to have a backup, but it's even nicer to remember which one is the backup. That's the lesson Bing's admins learned yesterday evening.

Survey reveals there are more women then men, including on social networks

If you think you can market your products and services online as though you're selling car batteries in the middle of halftime, think again. And again.

Android team updates 'Donut' and 'Eclair' SDKs

The Android SDK includes components which optimize app development for each version of the mobile operating system. Today, the 1.6 and 2.0 components got updates.