Microsoft Security Advisory: Update Rollup for ActiveX Kill Bits

Microsoft has released a Microsoft security advisory about this issue for IT professionals. The security advisory contains additional security-related information. To view the security advisory, visit the following Microsoft website:

Download packages

The following files are available for download from the Microsoft Download Center:

Windows 7, 32-bit versions

Download the Windows6.1-KB2562937-x86.msu package now.

Windows 7, 64-bit versions

Download the Windows6.1-KB2562937-x64.msu package now.

Windows Server 2008 R2, x64-based versions

Download the Windows6.1-KB2562937-x64.msu package now.

Windows Server 2008 R2, Itanium-based systems

Download the Windows6.1-KB2562937-ia64.msu package now.

Windows Vista, 32-bit versions

Download the Windows6.0-KB2562937-x86.msu package now.

Windows Vista, x64 versions

Download the Windows6.0-KB2562937-x64.msu package now.

Windows Server 2008, 32-bit versions

Download the Windows6.0-KB2562937-x86.msu package now.

Windows Server 2008, x64-based versions

Download the Windows6.0-KB2562937-x64.msu package now.

Windows Server 2008, Itanium-based systems

Download the Windows6.0-KB2562937-ia64.msu package now.

Windows XP, x86-based versions

Download the WindowsXP-KB2562937-x86-ENU.exe package now.

Windows XP Professional x64 Edition

Download the WindowsServer2003.WindowsXP-KB2562937-x64-ENU.exe package now.

Windows Server 2003, x64-based versions

Download the WindowsServer2003.WindowsXP-KB2562937-x64-ENU.exe package now.

Windows Server 2003, x86-based versions

Download the WindowsServer2003-KB2562937-x86-ENU.exe package now.

Windows Server 2003 for Itanium-based systems

Download the WindowsServer2003-KB2562937-ia64-ENU.exe package now.

Release Date: August 9, 2011

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base: Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Windows XP

Reference table

The following table contains the security update information for this software. You can find more information in the "Deployment information" section. Note The security update for supported versions of Windows XP Professional x64 Edition is the same as the security update for supported versions of Windows Server 2003 x64 Edition.

Deployment information

To install the update

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base: This security update supports the following setup switches. Note You can combine these switches into one command. For backward compatibility, the security update also supports many of the setup switches that the earlier version of the Setup program uses. For more information about the supported installation switches, click the following article number to view the article in the Microsoft Knowledge Base:

To remove the update

Note We do not recommend that you ever uninstall a security update.

This security update supports the following setup switches.

To verify that the update was applied

• Microsoft Baseline Security Analyzer
  
  To verify that a security update was applied to an affected system, you may be able to use the Microsoft Baseline Security Analyzer (MBSA) tool. See the "Detection and Deployment Tools and Guidance" section for more information.
• Registry subkey verification
  
  You may also be able to verify the files that this security update has installed by reviewing the registry subkeys listed in the reference table in this section. These registry subkeys may not contain a complete list of installed files. Also, these registry subkeys may not be created correctly when an administrator or an OEM integrates or slipstreams this security update into the Windows installation source files.

Windows Server 2003

Reference table

The following table contains the security update information for this software. You can find more information in the "Deployment information" section.

Deployment information

To install the update

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base: This security update supports the following setup switches. Note You can combine these switches into one command. For backward compatibility, the security update also supports many of the setup switches that the earlier version of the Setup program uses. For more information about the supported installation switches, click the following article number to view the article in the Microsoft Knowledge Base:

To remove the update

Note We do not recommend that you ever uninstall a security update.

This security update supports the following setup switches.

To verify that the update was applied.

• Microsoft Baseline Security Analyzer
  
  To verify that a security update was applied to an affected system, you may be able to use the Microsoft Baseline Security Analyzer (MBSA) tool. See the "Detection and Deployment Tools and Guidance" section for more information.
• Registry subkey verification
  
  You may also be able to verify the files that this security update has installed by reviewing the registry subkeys that are listed in the reference table in this section. These registry subkeys may not contain a complete list of installed files. Also, these registry subkeys may not be created correctly when an administrator or an OEM integrates or slipstreams this security update into the Windows installation source files.

Windows Vista

Reference table

The following table contains the security update information for this software. You can find more information in the "Deployment information" section.

Deployment information

To install the update

When you install this security update, the installer checks whether one or more of the files that are being updated on the system have previously been updated by a Microsoft hotfix. For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base: This security update supports the following setup switches. For more information about the installer, click the following article number to view the article in the Microsoft Knowledge Base:

To verify that the update was applied

Microsoft Baseline Security Analyzer

To verify that a security update was applied to an affected system, you may be able to use the Microsoft Baseline Security Analyzer (MBSA) tool. See the "Detection and Deployment Tools and Guidance" section for more information.

Windows Server 2008

Reference table

The following table contains the security update information for this software. You can find more information in the "Deployment information" section.

Deployment information

To install the update

When you install this security update, the installer checks whether one or more of the files that are being updated on the system have previously been updated by a Microsoft hotfix. For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base: This security update supports the following setup switches: For more information about the installer, click the following article number to view the article in the Microsoft Knowledge Base:

To verify that the update was applied

Microsoft Baseline Security Analyzer

To verify that a security update was applied to an affected system, you may be able to use the Microsoft Baseline Security Analyzer (MBSA) tool. See the "Detection and Deployment Tools and Guidance" section for more information.

Windows 7

Reference table

The following table contains the security update information for this software. You can find more information in the "Deployment information" section.

Deployment information

To install the update

When you install this security update, the installer checks whether one or more of the files that are being updated on the system have previously been updated by a Microsoft hotfix. For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base: This security update supports the following setup switches. For more information about the installer, click the following article number to view the article in the Microsoft Knowledge Base:

To verify that the update was applied

Microsoft Baseline Security Analyzer

To verify that a security update was applied to an affected system, you may be able to use the Microsoft Baseline Security Analyzer (MBSA) tool. See the "Detection and Deployment Tools and Guidance" section for more information.

Windows Server 2008 R2

Reference table

The following table contains the security update information for this software. You can find more information in the "Deployment information" section.

Deployment information

To install the update

When you install this security update, the installer checks whether one or more of the files that are being updated on the system have previously been updated by a Microsoft hotfix. For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base: This security update supports the following setup switches. For more information about the installer, click the following article number to view the article in the Microsoft Knowledge Base:

To verify that the update was applied

Microsoft Baseline Security Analyzer

To verify that a security update was applied to an affected system, you may be able to use the Microsoft Baseline Security Analyzer (MBSA) tool. See the "Detection and deployment tools and guidance" section for more information.

Detection and Deployment Tools and Guidance

This section describes how to manage the software and security updates that you have to deploy to the servers, to the desktop computers, and to the mobile computers in your organization. For more information, visit the following Microsoft TechNet Update Management Center webpage: For more information about security in Microsoft products, visit the following Microsoft TechNet Security webpage: Security updates are available from Microsoft Update, Windows Update, and Office Update. Security updates are also available at the Microsoft Download Center. You can find them most easily by doing a keyword search for "security update."

Finally, security updates can be downloaded from the Microsoft Update Catalog. For more information, visit the following Microsoft webpage: The Microsoft Update Catalog provides a catalog of content that is searchable and that is available through Windows Update and through Microsoft Update. This content includes security updates, drivers, and service packs. By using a security bulletin number such as "MS08-010" for your search, you can add all the applicable updates to your basket. You can also add different languages for an update to your basket, and you can download the content to any folder that you want. For more information about the Microsoft Update Catalog, visit the following Microsoft Update Catalog FAQ webpage:

Detection and Deployment Guidance

Microsoft has provided detection and deployment guidance for this month's security updates. This guidance will also help IT professionals understand how they can use various tools to help deploy the security update. These tools include Windows Update, Microsoft Update, Office Update, the Microsoft Baseline Security Analyzer (MBSA), the Office Detection Tool, Microsoft Systems Management Server (SMS), and the Extended Security Update Inventory Tool. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

Microsoft Baseline Security Analyzer

Microsoft Baseline Security Analyzer (MBSA) lets administrators scan local and remote systems for missing security updates. The Microsoft Baseline Security Analyzer can also identify common security misconfigurations. For more information, visit the following Microsoft Baseline Security Analyzer webpage: The following table provides the MBSA detection summary for this security update: For more information about MBSA 2.1, visit the following Microsoft MBSA 2.1 Frequently Asked Questions webpage:

Windows Server Update Services

By using Windows Server Update Services (WSUS), administrators can deploy the latest critical updates and security updates for supported versions of Windows, Office, Exchange Server, and SQL Server. For more information about how to deploy this security update by using Windows Server Update Services, visit the following Microsoft Windows Server Update Services Product Overview webpage:

Systems Management Server

The following table provides the SMS detection and deployment summary for this security update. For SMS 2.0 and for SMS 2003, the SMS SUS Feature Pack (SUSFP) that includes the Security Update Inventory Tool (SUIT) can be used by SMS to detect security updates. For more information, visit the following Microsoft webpage for Downloads for Systems Management Server 2.0: For SMS 2003, the SMS 2003 Inventory Tool for Microsoft Updates (ITMU) can be used by SMS to detect security updates that are offered by Microsoft Update and that are supported by Windows Server Update Services. For more information about the SMS 2003 ITMU, visit the following Microsoft webpage for SMS 2003 Inventory Tool for Microsoft Updates: SMS 2003 can also use the Microsoft Office Inventory Tool to detect required updates for Microsoft Office applications. For more information, visit the following Microsoft webpages:

• Systems Management Server 2003 Software Update Scanning Tools
  http://technet.microsoft.com/en-us/sms/bb676786.aspx

  ( http://technet.microsoft.com/en-us/sms/bb676786.aspx)
• Downloads for Systems Management Server 2003
  http://technet.microsoft.com/en-us/sms/bb676766.aspx

  ( http://technet.microsoft.com/en-us/sms/bb676766.aspx)

System Center Configuration Manager (SCCM) 2007 uses WSUS 3.0 for detection of updates. For more information about SCCM 2007 Software Update Management, visit the following Microsoft webpage: Note for Windows Vista and for Windows Server 2008

Microsoft Systems Management Server 2003 with Service Pack 3 includes support for Windows Vista and for Windows Server 2008. For more information about SMS, visit the following Microsoft SMS webpage: For more information about detection and deployment guidance articles, click the following article number to view the article in the Microsoft Knowledge Base:

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). Note that dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time bias. The dates and times may also change when you perform certain operations on the files.

Windows Vista and Windows Server 2008 file information

• The files that apply to a specific product, milestone (SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
  Collapse this tableExpand this table

  Version	Product	Milestone	Service branch
  6.0.6002.18xxx	Windows Vista SP2 and Windows Server 2008 SP2	SP2	GDR
  6.0.6002.22xxx	Windows Vista SP2 and Windows Server 2008 SP2	SP2	LDR

• GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
• The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately. MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files (attributes not listed) are signed with a Microsoft digital signature.

For all supported x86-based versions of Windows Vista and Windows Server 2008

For all supported x64-based versions of Windows Vista and Windows Server 2008

For all supported IA-64-based versions of Windows Server 2008

Windows 7 and Windows Server 2008 R2 file information

• The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
  
  Collapse this tableExpand this table

  Version	Product	Milestone	Service branch
  6.1.7600. 16xxx	Windows 7 and Windows Server 2008 R2	RTM	GDR
  6.1.7600. 20xxx	Windows 7 and Windows Server 2008 R2	RTM	LDR
  6.1.7601. 17xxx	Windows 7 and Windows Server 2008 R2	SP1	GDR
  6.1.7601. 21xxx	Windows 7 and Windows Server 2008 R2	SP1	LDR

• GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
• The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows 7 and Windows Server 2008 R2" section. MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.

For all supported x86-based versions of Windows 7

For all supported x64-based versions of Windows 7 and Windows Server 2008 R2

For all supported IA-64-based versions of Windows Server 2008 R2