Microsoft has released an update that fixes seven separate Windows vulnerabilities, all of which were rated "critical" by the software giant. As expected, the release patches the way Windows processes .ani Animated Cursor files - Microsoft decided to break its patch cycle because attackers were finding more ways to exploit the flaw in its Windows operating system. Direct Download Links: Windows 2000 SP4, Windows XP SP2, Windows XP X64, Windows Server 2003, Windows Server 2003 Itanium, Windows Server 2003 X64, Windows Vista, Windows Vista X64.

Yes, a patch for a patch: When you start a computer that is running Microsoft Windows XP with Service Pack 2, the Realtek HD Audio Control Panel may not start. Additionally, you may receive the following error message:

Rthdcpl.exe - Illegal System DLL Relocation

The system DLL user32.dll was relocated in memory. The application will not run properly. The relocation occurred because the DLL C:\Windows\System32\Hhctrl.ocx occupied an address range reserved for Windows system DLLs. The vendor supplying the DLL should be contacted for a new DLL.

This problem occurs when the Realtek HD Audio Control Panel (Rthdcpl.exe) by Realtek Semiconductor Corporation is installed.

This problem may occur after you install security update 925902 (MS07-017) and security update 928843 (MS07-008). The Hhctrl.ocx file that is included in security update 928843 and the User32.dll file that is included in security update 925902 have conflicting base addresses. This problem occurs if the program loads the Hhctrl.ocx file before it loads the User32.dll file.

http://www.microsoft.com/downloads/details.aspx?FamilyId=74AD4188-3131-429C-8FCB-F7B3B0FD3D86

Zert has a test site to check and see if your browser is vulnerable

http://zert.isotf.org/advisories/zert-2007-01.htm



Also, I've just received an email from Tom:

quote:

Might be good news for your site and yourself but Microsoft has released a long awaited patch, the bad part is that it will prevent AVG and Setpoint from working on lots of PC's(god knows what else). I know cuz I experienced it today. I'm pretty confident to say, AVG wont work after you install the latest security update from Microsoft. I couldn't find any fixes for all the apps it broke. There is one for onboard audio but does nothing for me with Xfi.

This is one example of the error people will get. It will happen to lots of applications that load the Hhctrl.ocx file before it loads the User32.dll file.

http://support.microsoft.com/kb/935448/

This is the patch that will kill the programs. http://support.microsoft.com/kb/925902/