MS10-034: Cumulative security update of ActiveX kill bits

2017-01-07T23:36:29
ID KB980195
Type mskb
Reporter Microsoft
Modified 2019-11-06T02:22:38

Description

<html><body><p>Addresses vulnerabilities for Microsoft software that could allow remote code execution if a user views a specially crafted webpage that instantiates a specific ActiveX control in Internet Explorer.</p><h2>INTRODUCTION</h2><div class="kb-summary-section section">Microsoft has released security bulletin MS10-034. To view the complete security bulletin, visit one of the following Microsoft websites: <ul class="sbody-free_list"><li>Home users:<br/><br/><div class="indent"><a href="http://www.microsoft.com/protect/computer/updates/bulletins/201006.mspx" id="kb-link-1" target="_self">http://www.microsoft.com/protect/computer/updates/bulletins/201006.mspx</a></div><span class="text-base">Skip the details</span>: Download the updates for your home computer or laptop from the Microsoft Update website now: <div class="indent"><a href="http://update.microsoft.com/microsoftupdate/" id="kb-link-2" target="_self">http://update.microsoft.com/microsoftupdate</a></div></li><li>IT professionals:<br/><br/><div class="indent"><a href="http://www.microsoft.com/technet/security/bulletin/ms10-034.mspx" id="kb-link-3" target="_self">http://www.microsoft.com/technet/security/bulletin/MS10-034.mspx</a></div></li></ul><span><h3 class="sbody-h3">How to obtain help and support for this security update</h3> <br/>Help installing updates: <br/><a href="https://support.microsoft.com/ph/6527" id="kb-link-4" target="_self">Support for Microsoft Update</a><br/><br/>Security solutions for IT professionals: <br/><a href="http://technet.microsoft.com/security/bb980617.aspx" id="kb-link-5" target="_self">TechNet Security Troubleshooting and Support</a><br/><br/>Help protect your computer that is running Windows from viruses and malware:<br/><a href="https://support.microsoft.com/contactus/cu_sc_virsec_master" id="kb-link-6" target="_self">Virus Solution and Security Center</a><br/><br/>Local support according to your country: <br/><a href="https://support.microsoft.com/common/international.aspx" id="kb-link-7" target="_self">International Support</a><br/><br/></span></div><h2>More Information</h2><div class="kb-moreinformation-section section"><h3 class="sbody-h3">Security update download packages</h3><span>The following files are available for download from the Microsoft Download Center:<br/></span><h4 class="sbody-h4">For Windows 7 for 32-bit systems </h4><span><img alt="Download " class="graphic" src="/library/images/support/kbgraphics/public/en-us/download.gif" title="Download "/><a href="http://download.microsoft.com/download/2/1/6/21616494-76c7-4d05-a573-bd4aa90e8460/windows6.1-kb980195-x86.msu" id="kb-link-8" target="_self">Download the Windows6.1-KB980195-x86.msu package now.</a></span><h4 class="sbody-h4">For Windows 7 for x64-based systems </h4><span><img alt="Download " class="graphic" src="/library/images/support/kbgraphics/public/en-us/download.gif" title="Download "/><a href="http://download.microsoft.com/download/1/a/0/1a0d4772-1ea8-436c-a103-55d4bdba744b/windows6.1-kb980195-x64.msu" id="kb-link-9" target="_self">Download the Windows6.1-KB980195-x64.msu package now.</a></span><h4 class="sbody-h4">For Windows Server 2008 R2 for Itanium-based systems </h4><span><img alt="Download " class="graphic" src="/library/images/support/kbgraphics/public/en-us/download.gif" title="Download "/><a href="http://download.microsoft.com/download/7/5/5/755a2ed9-f06e-41b7-abb7-e5c75e536aab/windows6.1-kb980195-ia64.msu" id="kb-link-10" target="_self">Download the Windows6.1-KB980195-ia64.msu package now.</a></span><h4 class="sbody-h4">For Windows Server 2008 R2 for x64-based systems </h4><span><img alt="Download " class="graphic" src="/library/images/support/kbgraphics/public/en-us/download.gif" title="Download "/><a href="http://download.microsoft.com/download/8/9/5/8957dea8-4f4e-44ec-adb5-98a523cabbf1/windows6.1-kb980195-x64.msu" id="kb-link-11" target="_self">Download the Windows6.1-KB980195-x64.msu package now.</a></span><h4 class="sbody-h4">For Windows Vista, for Windows Vista Service Pack 1, and for Windows Vista Service Pack 2 </h4><span><img alt="Download " class="graphic" src="/library/images/support/kbgraphics/public/en-us/download.gif" title="Download "/><a href="http://download.microsoft.com/download/2/d/3/2d37d4b9-276a-46d1-95ba-e0ff63c180a1/windows6.0-kb980195-x86.msu" id="kb-link-12" target="_self">Download the Windows6.0-KB980195-x86.msu package now.</a></span><h4 class="sbody-h4">For Windows Vista x64 Edition, for Windows Vista x64 Edition Service Pack 1, and for Windows Vista x64 Edition Service Pack 2 </h4><span><img alt="Download " class="graphic" src="/library/images/support/kbgraphics/public/en-us/download.gif" title="Download "/><a href="http://download.microsoft.com/download/2/c/8/2c8f9707-9241-495d-8830-e2139bc6384b/windows6.0-kb980195-x64.msu" id="kb-link-13" target="_self">Download the Windows6.0-KB980195-x64.msu package now.</a></span><h4 class="sbody-h4">For Windows Server 2008 for 32-bit systems and for Windows Server 2008 for 32-bit systems Service Pack 2 </h4><span><img alt="Download " class="graphic" src="/library/images/support/kbgraphics/public/en-us/download.gif" title="Download "/><a href="http://download.microsoft.com/download/b/d/9/bd96cceb-e37c-4f75-82d8-83e89f3b940d/windows6.0-kb980195-x86.msu" id="kb-link-14" target="_self">Download the Windows6.0-KB980195-x86.msu package now.</a></span><h4 class="sbody-h4">For Windows Server 2008 for Itanium-based systems and for Windows Server 2008 for Itanium-based systems Service Pack 2 </h4><span><img alt="Download " class="graphic" src="/library/images/support/kbgraphics/public/en-us/download.gif" title="Download "/><a href="http://download.microsoft.com/download/b/c/5/bc50034d-53ac-4fe6-9159-f49c71757fb5/windows6.0-kb980195-ia64.msu" id="kb-link-15" target="_self">Download the Windows6.0-KB980195-ia64.msu package now.</a></span><h4 class="sbody-h4">For Windows Server 2008 for x64-based systems and for Windows Server 2008 for x64-based systems Service Pack 2 </h4><span><img alt="Download " class="graphic" src="/library/images/support/kbgraphics/public/en-us/download.gif" title="Download "/><a href="http://download.microsoft.com/download/0/b/b/0bbbee8a-b4f1-4ecc-8953-fb05422d827c/windows6.0-kb980195-x64.msu" id="kb-link-16" target="_self">Download the KB980195-x64.msu package now.</a></span><h4 class="sbody-h4">For Windows XP Service Pack 2 and for Windows XP Service Pack 3 </h4><span><img alt="Download " class="graphic" src="/library/images/support/kbgraphics/public/en-us/download.gif" title="Download "/><a href="http://download.microsoft.com/download/0/7/a/07ab5bdc-10c5-4716-b6b4-cc85be71b8e9/windowsxp-kb980195-x86-enu.exe" id="kb-link-17" target="_self">Download the WindowsXP-KB980195-x86-ENU.exe package now.</a></span><h4 class="sbody-h4">For Windows XP Professional x64 Edition Service Pack 2 </h4><span><img alt="Download " class="graphic" src="/library/images/support/kbgraphics/public/en-us/download.gif" title="Download "/><a href="http://download.microsoft.com/download/5/b/a/5baded09-3767-4c52-b485-2c2c3f922958/windowsserver2003.windowsxp-kb980195-x64-enu.exe" id="kb-link-18" target="_self">Download the WindowsServer2003.WindowsXP-KB980195-x64-ENU.exe package now.</a></span><h4 class="sbody-h4">For Windows Server 2003 Service Pack 2 </h4><span><img alt="Download " class="graphic" src="/library/images/support/kbgraphics/public/en-us/download.gif" title="Download "/><a href="http://download.microsoft.com/download/3/8/3/38325aa7-a5cb-40fc-9786-8ef743877d99/windowsserver2003-kb980195-x86-enu.exe" id="kb-link-19" target="_self">Download the WindowsServer2003-KB980195-x86-ENU.exe package now.</a></span><h4 class="sbody-h4">For Windows Server 2003 with SP2 for Itanium-based systems </h4><span><img alt="Download " class="graphic" src="/library/images/support/kbgraphics/public/en-us/download.gif" title="Download "/><a href="http://download.microsoft.com/download/9/4/a/94a3fc29-3c52-4269-994b-8d8185ef8059/windowsserver2003-kb980195-ia64-enu.exe" id="kb-link-20" target="_self">Download the WindowsServer2003-KB980195-ia64-ENU.exe package now.</a></span><h4 class="sbody-h4">For Windows Server 2003 x64 Edition Service Pack 2 </h4><span><img alt="Download " class="graphic" src="/library/images/support/kbgraphics/public/en-us/download.gif" title="Download "/><a href="http://download.microsoft.com/download/0/5/d/05d9a3c8-fc4c-448f-8c46-e5e04ff19126/windowsserver2003.windowsxp-kb980195-x64-enu.exe" id="kb-link-21" target="_self">Download the WindowsServer2003.WindowsXP-KB980195-x64-ENU.exe package now.</a></span><h4 class="sbody-h4">For Microsoft Windows 2000 with Service Pack 4 </h4><span><img alt="Download " class="graphic" src="/library/images/support/kbgraphics/public/en-us/download.gif" title="Download "/><a href="http://download.microsoft.com/download/b/7/c/b7cd6fd1-7ad2-4e54-9898-675e88c0f74f/windows2000-kb980195-x86-enu.exe" id="kb-link-22" target="_self">Download the Windows2000-KB980195-x86-ENU.EXE package now.</a></span><br/><br/><span>Release Date: June 8, 2010<br/><br/>For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:<br/><br/><div class="indent"><a href="https://support.microsoft.com/en-us/help/119591" id="kb-link-23">119591 </a> How to obtain Microsoft support files from online services<br/></div>Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.<br/></span><h3 class="sbody-h3">Security update deployment</h3><h4 class="sbody-h4">Windows 2000 (all versions)</h4><h5 class="sbody-h5 text-subtitle">Reference table</h5>The following table contains the security update information for this software. You can find more information in the "Deployment information" section.<br/><br/><div class="table-responsive"><table class="sbody-table table"><tr class="sbody-tr"><th class="sbody-th">Inclusion in future service packs</th><th class="sbody-th">The update for this issue may be included in a future update rollup</th></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Deployment</th></tr><tr class="sbody-tr"><td class="sbody-td">Installing without requiring user intervention</td><td class="sbody-td">Windows 2000 with Service Pack 4:<br/>Windows2000-KB980195-x86-ENU/quiet</td></tr><tr class="sbody-tr"><td class="sbody-td">Installing without restarting</td><td class="sbody-td">Windows 2000 with Service Pack 4: <br/>Windows2000-KB980195-x86-ENU/norestart</td></tr><tr class="sbody-tr"><td class="sbody-td">Update log file</td><td class="sbody-td">Windows 2000 with Service Pack 4:<br/>KB980195.log</td></tr><tr class="sbody-tr"><td class="sbody-td">More information</td><td class="sbody-td">See the "Detection and deployment tools and guidance" section. </td></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Restart requirement</th></tr><tr class="sbody-tr"><td class="sbody-td">Restart required?</td><td class="sbody-td">In some cases, this update does not require a restart. If a restart is required, you receive a message that advises you to restart. </td></tr><tr class="sbody-tr"><td class="sbody-td">Hotpatching</td><td class="sbody-td">Not applicable</td></tr><tr class="sbody-tr"><td class="sbody-td">Removal information</td><td class="sbody-td">Windows 2000 with Service Pack 4:<br/>Use the <span class="text-base">Add or Remove Programs</span> item in Control Panel, or use the Spuninst.exe utility that is located in the %Windir%\$NTUninstallKB980195$\Spuninst folder.</td></tr><tr class="sbody-tr"><td class="sbody-td">Registry subkey verification</td><td class="sbody-td">Windows 2000 with Service Pack 4: <br/><strong class="sbody-strong">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows 2000\SP5\KB980195\Filelist</strong></td></tr></table></div><h4 class="sbody-h4">Deployment information</h4><h5 class="sbody-h5 text-subtitle">Installing the update</h5><span>For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:<br/><br/><div class="indent"><a href="https://support.microsoft.com/en-us/help/824684" id="kb-link-24">824684 </a> Description of the standard terminology that is used to describe Microsoft software updates</div></span>This security update supports the following setup switches.<br/><br/><div class="table-responsive"><table class="sbody-table table"><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Supported security update installation switches </th></tr><tr class="sbody-tr"><th class="sbody-th">Switch</th><th class="sbody-th">Description</th></tr><tr class="sbody-tr"><td class="sbody-td">/help</td><td class="sbody-td">Displays the command-line options.</td></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Setup modes</th></tr><tr class="sbody-tr"><td class="sbody-td">/passive</td><td class="sbody-td">Unattended Setup mode. No user interaction is required, but the installation status is displayed. If a restart is required at the end of Setup, a dialog box is presented to the user by using a timer warning. This warning says that the computer will restart in 30 seconds. </td></tr><tr class="sbody-tr"><td class="sbody-td">/quiet</td><td class="sbody-td">Quiet mode. This is the same as unattended mode, but no status or error messages are displayed. </td></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Restart options</th></tr><tr class="sbody-tr"><td class="sbody-td">/norestart</td><td class="sbody-td">Does not restart the computer when the installation has completed.</td></tr><tr class="sbody-tr"><td class="sbody-td">/forcerestart</td><td class="sbody-td">Restarts the computer after installation and forces other applications to close when the computer shuts down. Open files are not saved when the applications close. </td></tr><tr class="sbody-tr"><td class="sbody-td">/warnrestart[:<strong class="sbody-strong">x</strong>]</td><td class="sbody-td">Presents a dialog box to the user together with a timer warning that the computer will restart in <strong class="sbody-strong">x</strong> seconds. (The default setting is 30 seconds.) Intended for use with the /quiet switch or the /passive switch. </td></tr><tr class="sbody-tr"><td class="sbody-td">/promptrestart</td><td class="sbody-td">Displays a dialog box that prompts the local user to allow for a restart</td></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Special options</th></tr><tr class="sbody-tr"><td class="sbody-td">/overwriteoem</td><td class="sbody-td">Overwrites OEM files without prompting.</td></tr><tr class="sbody-tr"><td class="sbody-td">/nobackup</td><td class="sbody-td">Does not back up files that are needed for uninstallation.</td></tr><tr class="sbody-tr"><td class="sbody-td">/forceappsclose</td><td class="sbody-td">Forces other programs to close when the computer shuts down.</td></tr><tr class="sbody-tr"><td class="sbody-td">/log:<strong class="sbody-strong">path</strong></td><td class="sbody-td">Allows for the redirection of installation log files.</td></tr><tr class="sbody-tr"><td class="sbody-td">/extract[:<strong class="sbody-strong">path</strong>]</td><td class="sbody-td">Extracts files, and the Setup program is not started.</td></tr><tr class="sbody-tr"><td class="sbody-td">/ER</td><td class="sbody-td">Enables extended error reporting.</td></tr><tr class="sbody-tr"><td class="sbody-td">/verbose</td><td class="sbody-td">Enables verbose logging. During installation, creates a %Windir%\CabBuild.log. This log details the files that are copied. By using this switch, the installation may run slower. </td></tr></table></div><span class="text-base">Note</span> You can combine these switches into one command. For backward compatibility, the security update also supports the setup switches that the earlier version of the Setup program uses.<br/><span>For more information about the installation switches that are supported, click the following article number to view the article in the Microsoft Knowledge Base:<br/><br/><div class="indent"><a href="https://support.microsoft.com/en-us/help/262841" id="kb-link-25">262841 </a>Command-line switches for Windows software update packages<br/></div></span><h5 class="sbody-h5 text-subtitle">Removing the update</h5>This security update supports the following setup switches.<br/><br/><div class="table-responsive"><table class="sbody-table table"><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th"> Supported Spuninst.exe switches</th></tr><tr class="sbody-tr"><th class="sbody-th">Switch</th><th class="sbody-th">Description</th></tr><tr class="sbody-tr"><td class="sbody-td">/help</td><td class="sbody-td">Displays the command-line options.</td></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Setup modes</th></tr><tr class="sbody-tr"><td class="sbody-td">/passive</td><td class="sbody-td">Unattended Setup mode. No user interaction is required, but the installation status is displayed. If a restart is required at the end of Setup, a dialog box is presented to the user by using a timer warning. This warning says that the computer will restart in 30 seconds. </td></tr><tr class="sbody-tr"><td class="sbody-td">/quiet</td><td class="sbody-td">Quiet mode. This is the same as unattended mode, but no status or error messages are displayed. </td></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Restart options</th></tr><tr class="sbody-tr"><td class="sbody-td">/norestart</td><td class="sbody-td">Does not restart the computer when the installation has completed.</td></tr><tr class="sbody-tr"><td class="sbody-td">/forcerestart</td><td class="sbody-td">Restarts the computer after installation and forces other applications to close when the computer shuts down. Open files are not saved when the applications close. </td></tr><tr class="sbody-tr"><td class="sbody-td">/warnrestart[:<strong class="sbody-strong">x</strong>]</td><td class="sbody-td">Presents a dialog box to the user together with a timer warning that the computer will restart in <strong class="sbody-strong">x</strong> seconds. (The default setting is 30 seconds.) Intended for use with the /quiet switch or the /passive switch. </td></tr><tr class="sbody-tr"><td class="sbody-td">/promptrestart</td><td class="sbody-td">Displays a dialog box that prompts the local user to allow for a restart.</td></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Special options</th></tr><tr class="sbody-tr"><td class="sbody-td">/forceappsclose</td><td class="sbody-td">Forces other programs to close when the computer shuts down.</td></tr><tr class="sbody-tr"><td class="sbody-td">/log:<strong class="sbody-strong">path</strong></td><td class="sbody-td">Allows for the redirection of installation log files.</td></tr></table></div><h5 class="sbody-h5 text-subtitle">Verifying that the update was applied</h5><ul class="sbody-free_list"><li><span class="text-base">Microsoft Baseline Security Analyzer</span><br/><br/>To verify that a security update was applied to an affected system, you may be able to use the Microsoft Baseline Security Analyzer (MBSA) tool. See the "Detection and deployment tools and guidance" section for more information. </li><li><span class="text-base">Registry subkey verification</span><br/><br/>You may also be able to verify the files that this security update has installed by reviewing the registry subkeys that are listed in the reference table in this section. These registry subkeys may not contain a complete list of files that are installed. Also, these registry subkeys may not be created correctly when an administrator or an OEM integrates or slipstreams this security update into the Windows installation source files. </li></ul><h3 class="sbody-h3">Windows XP (all versions)</h3><h4 class="sbody-h4">Reference table</h4>The following table contains the security update information for this software. You can find more information in the "Deployment information" section.<br/><br/><div class="table-responsive"><table class="sbody-table table"><tr class="sbody-tr"><th class="sbody-th">Inclusion in future service packs</th><th class="sbody-th">The update for this issue will be included in a future service pack or update rollup</th></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Deployment</th></tr><tr class="sbody-tr"><td class="sbody-td">Installing without requiring user intervention</td><td class="sbody-td">Windows XP Service Pack 2 and Windows XP Service Pack 3:<br/>Windowsxp-KB980195-x86-enu/quiet</td></tr><tr class="sbody-tr"><td class="sbody-td"></td><td class="sbody-td">Windows XP Professional and Windows XP Professional Service Pack 2, x64-based versions:<br/>WindowsServer2003.WindowsXP-KB980195-x64-enu/quiet</td></tr><tr class="sbody-tr"><td class="sbody-td">Installing without restarting</td><td class="sbody-td">Windows XP Service Pack 2 and Windows XP Service Pack 3:<br/>Windowsxp-KB980195-x86-enu/norestart</td></tr><tr class="sbody-tr"><td class="sbody-td"></td><td class="sbody-td">Windows XP Professional and Windows XP Professional Service Pack 2, x64-based versions:<br/>WindowsServer2003.WindowsXP-KB980195-x64-enu/norestart</td></tr><tr class="sbody-tr"><td class="sbody-td">Update log file</td><td class="sbody-td">All supported versions of Windows XP and Windows XP Professional:<br/>KB980195.log</td></tr><tr class="sbody-tr"><td class="sbody-td">More information</td><td class="sbody-td">See the "Detection and deployment tools and guidance" section.</td></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Restart requirement</th></tr><tr class="sbody-tr"><td class="sbody-td">Restart required?</td><td class="sbody-td">In some cases, this update does not require a restart. If a restart is required, you receive a message that advises you to restart. </td></tr><tr class="sbody-tr"><td class="sbody-td">Hotpatching</td><td class="sbody-td">Not applicable.</td></tr><tr class="sbody-tr"><td class="sbody-td">Removal information</td><td class="sbody-td">All supported versions of Windows XP and Windows XP Professional:<br/>Use the <strong class="uiterm">Add or Remove Programs</strong> item in Control Panel, or use the Spuninst.exe utility that is located in the %Windir%\$NTUninstallKB980195$\Spuninst folder.</td></tr><tr class="sbody-tr"><td class="sbody-td">Registry subkey verification</td><td class="sbody-td">Windows XP Service Pack 2 and Windows XP Service Pack 3:<br/><strong class="sbody-strong">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB980195\Filelist</strong></td></tr><tr class="sbody-tr"><td class="sbody-td"></td><td class="sbody-td">Windows XP Professional and Windows XP Professional Service Pack 2, x64-based versions:<br/><strong class="sbody-strong">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP Version 2003\SP3\KB980195\Filelist</strong></td></tr></table></div><span class="text-base">Note</span> The security update for supported versions of Windows XP Professional x64 Edition is the same as the security update for supported versions of Windows Server 2003 x64 Edition.<br/><br/><br/><h4 class="sbody-h4">Deployment information</h4><h5 class="sbody-h5 text-subtitle">Installing the update</h5><span>For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:<br/><br/><div class="indent"><a href="https://support.microsoft.com/en-us/help/824684" id="kb-link-26">824684 </a> Description of the standard terminology that is used to describe Microsoft software updates</div></span>This security update supports the following setup switches.<br/><br/><div class="table-responsive"><table class="sbody-table table"><tr class="sbody-tr"><th class="sbody-th">Switch</th><th class="sbody-th">Description</th></tr><tr class="sbody-tr"><td class="sbody-td">/help</td><td class="sbody-td">Displays the command-line options.</td></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Setup modes</th></tr><tr class="sbody-tr"><td class="sbody-td">/passive</td><td class="sbody-td">Unattended Setup mode. No user interaction is required, but the installation status is displayed. If a restart is required at the end of Setup, a dialog box is presented to the user by using a timer warning. This warning says that the computer will restart in 30 seconds. </td></tr><tr class="sbody-tr"><td class="sbody-td">/quiet</td><td class="sbody-td">Quiet mode. This is the same as unattended mode, but no status or error messages are displayed. </td></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Restart options</th></tr><tr class="sbody-tr"><td class="sbody-td">/norestart</td><td class="sbody-td">Does not restart the computer when the installation has completed.</td></tr><tr class="sbody-tr"><td class="sbody-td">/forcerestart</td><td class="sbody-td">Restarts the computer after installation and forces other applications to close when the computer shuts down. Open files are not saved when the applications close. </td></tr><tr class="sbody-tr"><td class="sbody-td">/warnrestart[:<strong class="sbody-strong">x</strong>]</td><td class="sbody-td">Presents a dialog box to the user together with a timer warning that the computer will restart in <strong class="sbody-strong">x</strong> seconds. (The default setting is 30 seconds.) Intended for use with the /quiet switch or the /passive switch. </td></tr><tr class="sbody-tr"><td class="sbody-td">/promptrestart</td><td class="sbody-td">Displays a dialog box that prompts the local user to allow for a restart.</td></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Special options</th></tr><tr class="sbody-tr"><td class="sbody-td">/overwriteoem</td><td class="sbody-td">Overwrites OEM files without prompting.</td></tr><tr class="sbody-tr"><td class="sbody-td">/nobackup</td><td class="sbody-td">Does not back up files that are needed for uninstallation.</td></tr><tr class="sbody-tr"><td class="sbody-td">/forceappsclose</td><td class="sbody-td">Forces other programs to close when the computer shuts down.</td></tr><tr class="sbody-tr"><td class="sbody-td">/log:<strong class="sbody-strong">path</strong></td><td class="sbody-td">Allows for the redirection of installation log files.</td></tr><tr class="sbody-tr"><td class="sbody-td">/integrate:<strong class="sbody-strong">path</strong></td><td class="sbody-td">Integrates the update into the Windows source files. These files are located by using the path that is specified in the switch. </td></tr><tr class="sbody-tr"><td class="sbody-td">/extract[:<strong class="sbody-strong">path</strong>]</td><td class="sbody-td">Extracts files, and the Setup program is not started.</td></tr><tr class="sbody-tr"><td class="sbody-td">/ER</td><td class="sbody-td">Enables extended error reporting.</td></tr><tr class="sbody-tr"><td class="sbody-td">/verbose</td><td class="sbody-td">Enables verbose logging. During installation, creates a %Windir%\CabBuild.log. This log details the files that are copied. By using this switch, the installation may run slower. </td></tr></table></div><span class="text-base">Note</span> You can combine these switches into one command. For backward compatibility, the security update also supports many of the setup switches that the earlier version of the Setup program uses.<br/><span>For more information about the supported installation switches, click the following article number to view the article in the Microsoft Knowledge Base:<br/><br/><div class="indent"><a href="https://support.microsoft.com/en-us/help/262841" id="kb-link-27">262841 </a>Command-line switches for Windows software update packages<br/></div></span><h5 class="sbody-h5 text-subtitle">Removing the update</h5>This security update supports the following setup switches.<br/><br/><div class="table-responsive"><table class="sbody-table table"><tr class="sbody-tr"><th class="sbody-th">Switch</th><th class="sbody-th">Description</th></tr><tr class="sbody-tr"><td class="sbody-td">/help</td><td class="sbody-td">Displays the command-line options.</td></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Setup modes</th></tr><tr class="sbody-tr"><td class="sbody-td">/passive</td><td class="sbody-td">Unattended Setup mode. No user interaction is required, but the installation status is displayed. If a restart is required at the end of Setup, a dialog box is presented to the user by using a timer warning. This warning says that the computer will restart in 30 seconds. </td></tr><tr class="sbody-tr"><td class="sbody-td">/quiet</td><td class="sbody-td">Quiet mode. This is the same as unattended mode, but no status or error messages are displayed. </td></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Restart options</th></tr><tr class="sbody-tr"><td class="sbody-td">/norestart</td><td class="sbody-td">Does not restart the computer when the installation has completed.</td></tr><tr class="sbody-tr"><td class="sbody-td">/forcerestart</td><td class="sbody-td">Restarts the computer after installation and forces other applications to close when the computer shuts down. Open files are not saved when the applications close. </td></tr><tr class="sbody-tr"><td class="sbody-td">/warnrestart[:<strong class="sbody-strong">x</strong>]</td><td class="sbody-td">Presents a dialog box to the user together with a timer warning that the computer will restart in <strong class="sbody-strong">x</strong> seconds. (The default setting is 30 seconds.) Intended for use with the /quiet switch or the /passive switch. </td></tr><tr class="sbody-tr"><td class="sbody-td">/promptrestart</td><td class="sbody-td">Displays a dialog box that prompts the local user to allow for a restart.</td></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Special options</th></tr><tr class="sbody-tr"><td class="sbody-td">/forceappsclose</td><td class="sbody-td">Forces other programs to close when the computer shuts down.</td></tr><tr class="sbody-tr"><td class="sbody-td">/log:<strong class="sbody-strong">path</strong></td><td class="sbody-td">Allows for the redirection of installation log files.</td></tr></table></div><h5 class="sbody-h5 text-subtitle">Verifying that the update was applied</h5><ul class="sbody-free_list"><li><span class="text-base">Microsoft Baseline Security Analyzer</span><br/><br/>To verify that a security update was applied to an affected system, you may be able to use the Microsoft Baseline Security Analyzer (MBSA) tool. See the "Detection and deployment tools and guidance" section for more information. </li><li><span class="text-base">Registry subkey verification</span><br/><br/>You may also be able to verify the files that this security update has installed by reviewing the registry subkeys listed in the reference table in this section. These registry subkeys may not contain a complete list of installed files. Also, these registry subkeys may not be created correctly when an administrator or an OEM integrates or slipstreams this security update into the Windows installation source files. </li></ul><h3 class="sbody-h3">Windows Server 2003 (all versions)</h3><h4 class="sbody-h4">Reference table</h4>The following table contains the security update information for this software. You can find more information in the "Deployment information" section.<br/><br/><div class="table-responsive"><table class="sbody-table table"><tr class="sbody-tr"><th class="sbody-th">Inclusion in future service packs</th><th class="sbody-th">The update for this issue will be included in a future service pack or update rollup</th></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Deployment</th></tr><tr class="sbody-tr"><td class="sbody-td">Installing with requiring user intervention</td><td class="sbody-td">Windows Server 2003 Service Pack 1 and Windows Server 2003 Service Pack 2:<br/>Windowsserver2003-KB980195-x86-enu /quiet</td></tr><tr class="sbody-tr"><td class="sbody-td"></td><td class="sbody-td">Windows Server 2003 and Windows Server 2003 Service Pack 2, x64-based versions:<br/>WindowsServer2003.WindowsXP-KB980195-x64-enu /quiet</td></tr><tr class="sbody-tr"><td class="sbody-td"></td><td class="sbody-td">Windows Server 2003 with SP1 for Itanium-based systems and Windows Server 2003 with SP2 for Itanium-based systems:<br/>Windowsserver2003-KB980195-ia64-enu /quiet</td></tr><tr class="sbody-tr"><td class="sbody-td">Installing without restarting</td><td class="sbody-td">Windows Server 2003 Service Pack 1 and Windows Server 2003 Service Pack 2:<br/>Windowsserver2003-KB980195-x86-enu /norestart</td></tr><tr class="sbody-tr"><td class="sbody-td"></td><td class="sbody-td">Windows Server 2003 and Windows Server 2003 Service Pack 2, x64-based versions:<br/>WindowsServer2003.WindowsXP-KB980195-x64-enu /norestart</td></tr><tr class="sbody-tr"><td class="sbody-td"></td><td class="sbody-td">Windows Server 2003 with SP1 for Itanium-based systems and Windows Server 2003 with SP2 for Itanium-based systems:<br/>Windowsserver2003-KB980195-ia64-enu /norestart</td></tr><tr class="sbody-tr"><td class="sbody-td">Update log file</td><td class="sbody-td">All supported Windows Server 2003 x86-based versions, x64-based versions, and Itanium-based versions of Windows Server 2003:<br/>KB980195.log</td></tr><tr class="sbody-tr"><td class="sbody-td">More information</td><td class="sbody-td">See the "Detection and deployment tools and guidance" section.</td></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Restart requirement</th></tr><tr class="sbody-tr"><td class="sbody-td">Restart required?</td><td class="sbody-td">In some cases, this update does not require a restart. If a restart is required, you receive a message that advises you to restart. </td></tr><tr class="sbody-tr"><td class="sbody-td">Hotpatching</td><td class="sbody-td">This security update does not support Hotpatching. For more information about Hotpatching, see Microsoft Knowledge Base Article 897341. </td></tr><tr class="sbody-tr"><td class="sbody-td"></td><td class="sbody-td"></td></tr><tr class="sbody-tr"><td class="sbody-td">Removal information</td><td class="sbody-td">All supported x86-based versions, x64-based versions, and Itanium-based versions of Windows Server 2003:<br/>Use the <strong class="uiterm">Add or Remove Programs</strong> item in Control Panel, or use the Spuninst.exe utility that is located in the Spuninst.exe utility that is located in the %Windir%\$NTUninstallKB980195$\Spuninst folder.</td></tr><tr class="sbody-tr"><td class="sbody-td">Registry subkey verification</td><td class="sbody-td">All supported versions of Windows Server 2003:<br/><strong class="sbody-strong">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Server 2003\SP3\KB980195\Filelist</strong></td></tr></table></div><h4 class="sbody-h4">Deployment information</h4><h5 class="sbody-h5 text-subtitle">Installing the Update</h5><span>For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:<br/><br/><div class="indent"><a href="https://support.microsoft.com/en-us/help/824684" id="kb-link-28">824684 </a> Description of the standard terminology that is used to describe Microsoft software updates</div></span>This security update supports the following setup switches.<br/><br/><div class="table-responsive"><table class="sbody-table table"><tr class="sbody-tr"><th class="sbody-th">Switch</th><th class="sbody-th">Description</th></tr><tr class="sbody-tr"><td class="sbody-td">/help</td><td class="sbody-td">Displays the command-line options.</td></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Setup modes</th></tr><tr class="sbody-tr"><td class="sbody-td">/passive</td><td class="sbody-td">Unattended Setup mode. No user interaction is required, but the installation status is displayed. If a restart is required at the end of Setup, a dialog box is presented to the user by using a timer warning. This warning says that the computer will restart in 30 seconds. </td></tr><tr class="sbody-tr"><td class="sbody-td">/quiet</td><td class="sbody-td">Quiet mode. This is the same as unattended mode, but no status or error messages are displayed. </td></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Restart options</th></tr><tr class="sbody-tr"><td class="sbody-td">/norestart</td><td class="sbody-td">Does not restart the computer when the installation has completed.</td></tr><tr class="sbody-tr"><td class="sbody-td">/forcerestart</td><td class="sbody-td">Restarts the computer after installation and forces other applications to close when the computer shuts down. Open files are not saved when the applications close. </td></tr><tr class="sbody-tr"><td class="sbody-td">/warnrestart[:<strong class="sbody-strong">x</strong>]</td><td class="sbody-td">Presents a dialog box to the user together with a timer warning that the computer will restart in <strong class="sbody-strong">x</strong> seconds. (The default setting is 30 seconds.) Intended for use with the /quiet switch or the /passive switch. </td></tr><tr class="sbody-tr"><td class="sbody-td">/promptrestart</td><td class="sbody-td">Displays a dialog box that prompts the local user to allow for a restart.</td></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Special options</th></tr><tr class="sbody-tr"><td class="sbody-td">/overwriteoem</td><td class="sbody-td">Overwrites OEM files without prompting.</td></tr><tr class="sbody-tr"><td class="sbody-td">/nobackup</td><td class="sbody-td">Does not back up files that are needed for uninstallation.</td></tr><tr class="sbody-tr"><td class="sbody-td">/forceappsclose</td><td class="sbody-td">Forces other programs to close when the computer shuts down.</td></tr><tr class="sbody-tr"><td class="sbody-td">/log:<strong class="sbody-strong">path</strong></td><td class="sbody-td">Allows for the redirection of installation log files.</td></tr><tr class="sbody-tr"><td class="sbody-td">/integrate:<strong class="sbody-strong">path</strong></td><td class="sbody-td">Integrates the update into the Windows source files. These files are located by using the path that is specified in the switch. </td></tr><tr class="sbody-tr"><td class="sbody-td">/extract[:<strong class="sbody-strong">path</strong>]</td><td class="sbody-td">Extracts files, and the Setup program is not started.</td></tr><tr class="sbody-tr"><td class="sbody-td">/ER</td><td class="sbody-td">Enables extended error reporting.</td></tr><tr class="sbody-tr"><td class="sbody-td">/verbose</td><td class="sbody-td">Enables verbose logging. During installation, creates a %Windir%\CabBuild.log. This log details the files that are copied. By using this switch, the installation may run slower. </td></tr></table></div><span class="text-base">Note</span> You can combine these switches into one command. For backward compatibility, the security update also supports many of the setup switches that the earlier version of the Setup program uses.<br/><span>For more information about the supported installation switches, click the following article number to view the article in the Microsoft Knowledge Base:<br/><br/><div class="indent"><a href="https://support.microsoft.com/en-us/help/262841" id="kb-link-29">262841 </a>Command-line switches for Windows software update packages<br/></div></span><h5 class="sbody-h5 text-subtitle">Removing the update</h5>This security update supports the following setup switches.<br/><br/><div class="table-responsive"><table class="sbody-table table"><tr class="sbody-tr"><th class="sbody-th">Switch</th><th class="sbody-th">Description</th></tr><tr class="sbody-tr"><td class="sbody-td">/help</td><td class="sbody-td">Displays the command-line options.</td></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Setup modes</th></tr><tr class="sbody-tr"><td class="sbody-td">/passive</td><td class="sbody-td">Unattended Setup mode. No user interaction is required, but the installation status is displayed. If a restart is required at the end of Setup, a dialog box is presented to the user by using a timer warning. This warning says that the computer will restart in 30 seconds. </td></tr><tr class="sbody-tr"><td class="sbody-td">/quiet</td><td class="sbody-td">Quiet mode. This is the same as unattended mode, but no status or error messages are displayed. </td></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Restart options</th></tr><tr class="sbody-tr"><td class="sbody-td">/norestart</td><td class="sbody-td">Does not restart the computer when the installation has completed.</td></tr><tr class="sbody-tr"><td class="sbody-td">/forcerestart</td><td class="sbody-td">Restarts the computer after installation and forces other applications to close when the computer shuts down. Open files are not saved when the applications close. </td></tr><tr class="sbody-tr"><td class="sbody-td">/warnrestart[:<strong class="sbody-strong">x</strong>]</td><td class="sbody-td">Presents a dialog box to the user together with a timer warning that the computer will restart in <strong class="sbody-strong">x</strong> seconds. (The default setting is 30 seconds.) Intended for use with the /quiet switch or the /passive switch. </td></tr><tr class="sbody-tr"><td class="sbody-td">/promptrestart</td><td class="sbody-td">Displays a dialog box that prompts the local user to allow for a restart.</td></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Special options</th></tr><tr class="sbody-tr"><td class="sbody-td">/forceappsclose</td><td class="sbody-td">Forces other programs to close when the computer shuts down.</td></tr><tr class="sbody-tr"><td class="sbody-td">/log:<strong class="sbody-strong">path</strong></td><td class="sbody-td">Allows for the redirection of installation log files.</td></tr></table></div><h5 class="sbody-h5 text-subtitle">Verifying that the update was applied</h5><ul class="sbody-free_list"><li><span class="text-base">Microsoft Baseline Security Analyzer</span><br/><br/>To verify that a security update was applied to an affected system, you may be able to use the Microsoft Baseline Security Analyzer (MBSA) tool. See the "Detection and deployment tools and guidance" section for more information. </li><li><span class="text-base">Registry subkey verification</span><br/><br/>You may also be able to verify the files that this security update has installed by reviewing the registry subkeys that are listed in the reference table in this section. These registry subkeys may not contain a complete list of installed files. Also, these registry subkeys may not be created correctly when an administrator or an OEM integrates or slipstreams this security update into the Windows installation source files. </li></ul><h3 class="sbody-h3">Windows Vista (all versions)</h3><h4 class="sbody-h4">Reference table</h4>The following table contains the security update information for this software. You can find more information in the "Deployment information" section.<br/><br/><div class="table-responsive"><table class="sbody-table table"><tr class="sbody-tr"><th class="sbody-th">Inclusion in future service packs</th><th class="sbody-th">The update for this issue will be included in a future service pack or update rollup</th></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Deployment</th></tr><tr class="sbody-tr"><td class="sbody-td">Installing without requiring user intervention</td><td class="sbody-td">All supported 32-bit versions of Windows Vista:<br/>Windows6.0-KB980195-x86/quiet</td></tr><tr class="sbody-tr"><td class="sbody-td"></td><td class="sbody-td">All supported 64-bit versions of Windows Vista:<br/>Windows6.0-KB980195-x64/quiet</td></tr><tr class="sbody-tr"><td class="sbody-td">Installing without restarting</td><td class="sbody-td">All supported 32-bit versions of Windows Vista:<br/>Windows6.0-KB980195-x86/quiet/norestart</td></tr><tr class="sbody-tr"><td class="sbody-td"></td><td class="sbody-td">All supported 64-bit versions of Windows Vista:<br/>Windows6.0-KB980195-x64/quiet/norestart</td></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Restart requirement</th></tr><tr class="sbody-tr"><td class="sbody-td">Restart required?</td><td class="sbody-td">In some cases, this update does not require a restart. If a restart is required, you receive a message that advises you to restart. </td></tr><tr class="sbody-tr"><td class="sbody-td">Hotpatching</td><td class="sbody-td">Not applicable. </td></tr><tr class="sbody-tr"><td class="sbody-td">Removal information</td><td class="sbody-td">WUSA.exe does not support the uninstallation of updates. To uninstall an update that is installed by WUSA, open Control Panel, and then click <strong class="uiterm">Security</strong>. Under <strong class="uiterm">Windows Update</strong>, click <strong class="uiterm">View installed updates</strong>, and then select from the list of updates.<br/></td></tr><tr class="sbody-tr"><td class="sbody-td">Registry subkey verification</td><td class="sbody-td">A registry subkey does not exist to validate the presence of this update. </td></tr></table></div><h4 class="sbody-h4">Deployment information</h4><h5 class="sbody-h5 text-subtitle">Installing the Update</h5>When you install this security update, the installer checks whether one or more of the files that are being updated on the system have previously been updated by a Microsoft hotfix.<br/><span>For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:<br/><br/><div class="indent"><a href="https://support.microsoft.com/en-us/help/824684" id="kb-link-30">824684 </a> Description of the standard terminology that is used to describe Microsoft software updates</div></span>This security update supports the following setup switches.<br/><br/><div class="table-responsive"><table class="sbody-table table"><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Supported security update installation switches</th></tr><tr class="sbody-tr"><th class="sbody-th">Switch</th><th class="sbody-th">Description</th></tr><tr class="sbody-tr"><td class="sbody-td">/?, /h, /help</td><td class="sbody-td">Displays help on supported switches. </td></tr><tr class="sbody-tr"><td class="sbody-td">/quiet</td><td class="sbody-td">Suppresses the display of status or error messages. </td></tr><tr class="sbody-tr"><td class="sbody-td">/norestart</td><td class="sbody-td">When this switch is combined with the /quiet switch, the system is not restarted after installation even if a restart is required to complete the installation. </td></tr></table></div><span>For more information about the installer, click the following article number to view the article in the Microsoft Knowledge Base:<br/><br/><div class="indent"><a href="https://support.microsoft.com/en-us/help/934307" id="kb-link-31">934307 </a>Description of the Windows Update Stand-alone Installer (Wusa.exe) and of .msu files in Windows Vista and in Windows Server 2008<br/></div></span><h5 class="sbody-h5 text-subtitle">Verifying that the update was applied</h5><br/><ul class="sbody-free_list"><li><span class="text-base">Microsoft Baseline Security Analyzer</span><br/><br/>To verify that a security update was applied to an affected system, you may be able to use the Microsoft Baseline Security Analyzer (MBSA) tool. See the "Detection and deployment tools and guidance" section for more information.</li></ul><h3 class="sbody-h3">Windows Server 2008 (all versions)</h3><h4 class="sbody-h4">Reference table</h4>The following table contains the security update information for this software. You can find more information in the "Deployment information" section.<br/><br/><div class="table-responsive"><table class="sbody-table table"><tr class="sbody-tr"><th class="sbody-th">Inclusion in future service packs</th><th class="sbody-th">The update for this issue will be included in a future service pack or update rollup</th></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Deployment</th></tr><tr class="sbody-tr"><td class="sbody-td">Installing without requiring user intervention</td><td class="sbody-td">All supported 32-bit versions of Windows Server 2008:<br/>Windows6.0-KB980195-x86/quiet</td></tr><tr class="sbody-tr"><td class="sbody-td"></td><td class="sbody-td">All supported 64-bit versions of Windows Server 2008:<br/>Windows6.0-KB980195-x64/quiet</td></tr><tr class="sbody-tr"><td class="sbody-td"></td><td class="sbody-td">All supported Itanium-based versions of Windows Server 2008:<br/>Windows6.0-KB980195-ia64/quiet</td></tr><tr class="sbody-tr"><td class="sbody-td">Installing without restarting</td><td class="sbody-td">All supported 32-bit versions of Windows Server 2008:<br/>Windows6.0-KB980195-x86/quiet/norestart</td></tr><tr class="sbody-tr"><td class="sbody-td"></td><td class="sbody-td">All supported 64-bit versions of Windows Server 2008:<br/>Windows6.0-KB980195-x64/quiet/norestart</td></tr><tr class="sbody-tr"><td class="sbody-td"></td><td class="sbody-td">All supported Itanium-based versions of Windows Server 2008:<br/>Windows6.0-KB980195-ia64/quiet/norestart</td></tr><tr class="sbody-tr"><td class="sbody-td">More information</td><td class="sbody-td">See the "Detection and deployment tools and guidance" section.</td></tr><tr class="sbody-tr"><th class="sbody-th"></th><th class="sbody-th">Restart requirement</th></tr><tr class="sbody-tr"><td class="sbody-td">Restart required?</td><td class="sbody-td">In some cases, this update does not require a restart. If a restart is required, you receive a message that advises you to restart. </td></tr><tr class="sbody-tr"><td class="sbody-td">Hotpatching</td><td class="sbody-td">Not applicable. </td></tr><tr class="sbody-tr"><td class="sbody-td">Removal information</td><td class="sbody-td">WUSA.exe does not support the uninstallation of updates. To uninstall an update that is installed by WUSA, open Control Panel, and then click <strong class="uiterm">Security</strong>. Under <strong class="uiterm">Windows Update</strong>, click <strong class="uiterm">View installed updates</strong>, and then select from the list of updates.<br/></td></tr><tr class="sbody-tr"><td class="sbody-td">Registry subkey verification</td><td class="sbody-td">A registry subkey does not exist to validate the presence of this update. </td></tr></table></div><h4 class="sbody-h4">Deployment information</h4><h5 class="sbody-h5 text-subtitle">Installing the Update</h5>When you install this security update, the installer checks whether one or more of the files that are being updated on the system have previously been updated by a Microsoft hotfix.<br/><span>For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:<br/><br/><div class="indent"><a href="https://support.microsoft.com/en-us/help/824684" id="kb-link-32">824684 </a> Description of the standard terminology that is used to describe Microsoft software updates</div></span>This security update supports the following setup switches:<br/><br/><div class="table-responsive"><table class="sbody-table table"><tr class="sbody-tr"><th class="sbody-th">Switch</th><th class="sbody-th">Description</th></tr><tr class="sbody-tr"><td class="sbody-td">/?, /h, /help</td><td class="sbody-td">Displays help on supported switches. </td></tr><tr class="sbody-tr"><td class="sbody-td">/quiet</td><td class="sbody-td">Suppresses the display of status or error messages. </td></tr><tr class="sbody-tr"><td class="sbody-td">/norestart</td><td class="sbody-td">When you combine this switch with the /quiet switch, the system is not restarted after installation even if a restart is required to complete installation. </td></tr></table></div><span>For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base:<br/><br/><div class="indent"><a href="https://support.microsoft.com/en-us/help/934307" id="kb-link-33">934307 </a>Description of the Windows Update Stand-alone Installer (Wusa.exe) and of .msu files in Windows Vista and in Windows Server 2008<br/></div></span><h5 class="sbody-h5 text-subtitle">Verifying that the update was applied</h5><br/><span class="text-base">Microsoft Baseline Security Analyzer</span><br/><br/>To verify that a security update was applied to an affected system, you may be able to use the Microsoft Baseline Security Analyzer (MBSA) tool. See the "Detection and deployment tools and guidance" section for more information.<br/><br/><br/><h3 class="sbody-h3">Detection and deployment tools and guidance</h3>This section describes how to manage the software and security updates that you have to deploy to the servers, to the desktop computers, and to the mobile computers in your organization. For more information, visit the following Microsoft TechNet Update Management Center webpage: <div class="indent"><a href="http://technet.microsoft.com/en-us/updatemanagement/default.aspx" id="kb-link-34" target="_self">http://technet.microsoft.com/en-us/updatemanagement/default.aspx</a></div>For more information about security in Microsoft products, visit the following Microsoft TechNet Security webpage: <div class="indent"><a href="http://technet.microsoft.com/en-us/security/default.aspx" id="kb-link-35" target="_self">http://technet.microsoft.com/en-us/security/default.aspx</a></div>Security updates are available from Microsoft Update, Windows Update, and Office Update. Security updates are also available at the Microsoft Download Center. You can find them most easily by doing a keyword search for "security update."<br/><br/>Finally, security updates can be downloaded from the Microsoft Update Catalog. For more information, visit the following Microsoft webpage: <div class="indent"><a href="http://catalog.update.microsoft.com/v7/site/home.aspx" id="kb-link-36" target="_self">http://catalog.update.microsoft.com/v7/site/Home.aspx</a></div>The Microsoft Update Catalog provides a catalog of content that is searchable and that is available through Windows Update and through Microsoft Update. This content includes security updates, drivers, and service packs. By using a security bulletin number such as "MS08-010" for your search, you can add all the applicable updates to your basket. You can also add different languages for an update to your basket, and you can download the content to any folder that you want. For more information about the Microsoft Update Catalog, visit the following Microsoft Update Catalog FAQ webpage: <div class="indent"><a href="http://catalog.update.microsoft.com/v7/site/faq.aspx" id="kb-link-37" target="_self">http://catalog.update.microsoft.com/v7/site/faq.aspx</a></div><h4 class="sbody-h4">Detection and deployment guidance</h4>Microsoft has provided detection and deployment guidance for this month's security updates. This guidance will also help IT professionals understand how they can use various tools to help deploy the security update. These tools include Windows Update, Microsoft Update, Office Update, the Microsoft Baseline Security Analyzer (MBSA), the Office Detection Tool, Microsoft Systems Management Server (SMS), and the Extended Security Update Inventory Tool.<br/><span>For more information, click the following article number to view the article in the Microsoft Knowledge Base:<br/><br/><div class="indent"><a href="https://support.microsoft.com/en-us/help/910723" id="kb-link-38">910723 </a>Summary list of monthly detection and deployment guidance articles<br/></div></span><h4 class="sbody-h4">Microsoft Baseline Security Analyzer</h4>Microsoft Baseline Security Analyzer (MBSA) lets administrators scan local and remote systems for missing security updates. The Microsoft Baseline Security Analyzer can also identify common security misconfigurations. For more information, visit the following Microsoft Baseline Security Analyzer webpage: <div class="indent"><a href="http://technet.microsoft.com/en-us/security/cc184924.aspx" id="kb-link-39" target="_self">http://technet.microsoft.com/en-us/security/cc184924.aspx</a></div>The following table provides the MBSA detection summary for this security update. <div class="table-responsive"><table class="sbody-table table"><tr class="sbody-tr"><th class="sbody-th">Software</th><th class="sbody-th">MBSA 2.1</th></tr><tr class="sbody-tr"><td class="sbody-td">Windows 2000 with Service Pack 4 </td><td class="sbody-td">Yes</td></tr><tr class="sbody-tr"><td class="sbody-td">Windows XP Service Pack 2 and Windows XP Service Pack 3</td><td class="sbody-td">Yes</td></tr><tr class="sbody-tr"><td class="sbody-td">Windows XP Professional and Windows XP Professional Service Pack 2, x64-based versions</td><td class="sbody-td">Yes</td></tr><tr class="sbody-tr"><td class="sbody-td">Windows Server 2003 Service Pack 1 and Windows Server 2003 Service Pack 2</td><td class="sbody-td">Yes</td></tr><tr class="sbody-tr"><td class="sbody-td">Windows Server 2003 and Windows Server 2003 Service Pack 2, x64-based versions</td><td class="sbody-td">Yes</td></tr><tr class="sbody-tr"><td class="sbody-td">Windows Server 2003 with SP1 for Itanium-based systems and Windows Server 2003 with SP2 for Itanium-based systems</td><td class="sbody-td">Yes</td></tr><tr class="sbody-tr"><td class="sbody-td">Windows Vista and Windows Vista Service Pack 1</td><td class="sbody-td">Yes</td></tr><tr class="sbody-tr"><td class="sbody-td">Windows Vista and Windows Vista Service Pack 1, 64-bit versions </td><td class="sbody-td">Yes</td></tr><tr class="sbody-tr"><td class="sbody-td">Windows Server 2008 for 32-bit systems</td><td class="sbody-td">Yes</td></tr><tr class="sbody-tr"><td class="sbody-td">Windows Server 2008 for 64-bit systems</td><td class="sbody-td">Yes</td></tr><tr class="sbody-tr"><td class="sbody-td">Windows Server 2008 for Itanium-based systems</td><td class="sbody-td">Yes</td></tr></table></div>For more information about MBSA 2.1, visit the following Microsoft MBSA 2.1 Frequently Asked Questions webpage: <div class="indent"><a href="http://technet.microsoft.com/en-us/security/cc184922.aspx" id="kb-link-40" target="_self">http://technet.microsoft.com/en-us/security/cc184922.aspx</a></div><h4 class="sbody-h4">Windows Server Update Services</h4>By using Windows Server Update Services (WSUS), administrators can deploy the latest critical updates and security updates for Windows 2000 operating systems and later versions, for Microsoft Office XP and later versions, for Microsoft Exchange Server 2003, and for Microsoft SQL Server 2000 and later versions. For more information about how to deploy this security update by using Windows Server Update Services, visit the following Microsoft Windows Server Update Services Product Overview webpage: <div class="indent"><a href="http://technet.microsoft.com/en-us/wsus/bb466208.aspx" id="kb-link-41" target="_self">http://technet.microsoft.com/en-us/wsus/bb466208.aspx</a></div><h4 class="sbody-h4">Systems Management Server</h4>The following table provides the SMS detection and deployment summary for this security update.<br/><br/><div class="table-responsive"><table class="sbody-table table"><tr class="sbody-tr"><th class="sbody-th">Software</th><th class="sbody-th">SMS 2.0</th><th class="sbody-th">SMS 2003 with SUSFP</th><th class="sbody-th">SMS 2003 with ITMU</th><th class="sbody-th">Configuration Manager 2007</th></tr><tr class="sbody-tr"><td class="sbody-td">Windows 2000 with Service Pack 4 </td><td class="sbody-td">Yes</td><td class="sbody-td">Yes</td><td class="sbody-td">Yes</td><td class="sbody-td">Yes</td></tr><tr class="sbody-tr"><td class="sbody-td">Windows XP Service Pack 2 and Windows XP Service Pack 3</td><td class="sbody-td">Yes</td><td class="sbody-td">Yes</td><td class="sbody-td">Yes</td><td class="sbody-td">Yes</td></tr><tr class="sbody-tr"><td class="sbody-td">Windows XP Professional and Windows XP Professional Service Pack 2, x64-based versions</td><td class="sbody-td">No</td><td class="sbody-td">No</td><td class="sbody-td">Yes</td><td class="sbody-td">Yes</td></tr><tr class="sbody-tr"><td class="sbody-td">Windows Server 2003 Service Pack 1 and Windows Server 2003 Service Pack 2</td><td class="sbody-td">Yes</td><td class="sbody-td">Yes</td><td class="sbody-td">Yes</td><td class="sbody-td">Yes</td></tr><tr class="sbody-tr"><td class="sbody-td">Windows Server 2003 and Windows Server 2003 Service Pack 2, x64-based versions</td><td class="sbody-td">No</td><td class="sbody-td">No</td><td class="sbody-td">Yes</td><td class="sbody-td">Yes</td></tr><tr class="sbody-tr"><td class="sbody-td">Windows Server 2003 with SP1 for Itanium-based systems and Windows Server 2003 with SP2 for Itanium-based systems</td><td class="sbody-td">No</td><td class="sbody-td">No</td><td class="sbody-td">Yes</td><td class="sbody-td">Yes</td></tr><tr class="sbody-tr"><td class="sbody-td">Windows Vista and Windows Vista Service Pack 1</td><td class="sbody-td">No</td><td class="sbody-td">No</td><td class="sbody-td">See the "Note for Windows Vista and for Windows Server 2008" section later in this article</td><td class="sbody-td">Yes</td></tr><tr class="sbody-tr"><td class="sbody-td">Windows Vista and Windows Vista Service Pack 1, 64-bit versions</td><td class="sbody-td">No</td><td class="sbody-td">No</td><td class="sbody-td">See the "Note for Windows Vista and for Windows Server 2008" section later in this article</td><td class="sbody-td">Yes</td></tr><tr class="sbody-tr"><td class="sbody-td">Windows Server 2008 for 32-bit systems</td><td class="sbody-td">No</td><td class="sbody-td">No</td><td class="sbody-td">See the "Note for Windows Vista and for Windows Server 2008" section later in this article</td><td class="sbody-td">Yes</td></tr><tr class="sbody-tr"><td class="sbody-td">Windows Server 2008 for 64-bit systems</td><td class="sbody-td">No</td><td class="sbody-td">No</td><td class="sbody-td">See the "Note for Windows Vista and for Windows Server 2008" section later in this article</td><td class="sbody-td">Yes</td></tr><tr class="sbody-tr"><td class="sbody-td">Windows Server 2008 for Itanium-based systems</td><td class="sbody-td">No</td><td class="sbody-td">No</td><td class="sbody-td">See the "Note for Windows Vista and for Windows Server 2008" section later in this article</td><td class="sbody-td">Yes</td></tr></table></div>For SMS 2.0 and for SMS 2003, the SMS SUS Feature Pack (SUSFP) that includes the Security Update Inventory Tool (SUIT) can be used by SMS to detect security updates. For more information, visit the following Microsoft webpage for Downloads for Systems Management Server 2.0: <div class="indent"><a href="http://technet.microsoft.com/en-us/sms/bb676799.aspx" id="kb-link-42" target="_self">http://technet.microsoft.com/en-us/sms/bb676799.aspx</a></div>For SMS 2003, the SMS 2003 Inventory Tool for Microsoft Updates (ITMU) can be used by SMS to detect security updates that are offered by Microsoft Update and that are supported by Windows Server Update Services. For more information about the SMS 2003 ITMU, visit the following Microsoft webpage for SMS 2003 Inventory Tool for Microsoft Updates: <div class="indent"><a href="http://technet.microsoft.com/en-us/sms/bb676783.aspx" id="kb-link-43" target="_self">http://technet.microsoft.com/en-us/sms/bb676783.aspx</a></div>SMS 2003 can also use the Microsoft Office Inventory Tool to detect required updates for Microsoft Office applications. For more information, visit the following Microsoft webpages: <ul class="sbody-free_list"><li>Systems Management Server 2003 Software Update Scanning Tools<br/><br/><div class="indent"><a href="http://technet.microsoft.com/en-us/sms/bb676786.aspx" id="kb-link-44" target="_self">http://technet.microsoft.com/en-us/sms/bb676786.aspx</a></div></li><li>Downloads for Systems Management Server 2003<br/><br/><div class="indent"><a href="http://technet.microsoft.com/en-us/sms/bb676766.aspx" id="kb-link-45" target="_self">http://technet.microsoft.com/en-us/sms/bb676766.aspx</a></div></li></ul>System Center Configuration Manager (Configuration Manager 2007) 2007 uses WSUS 3.0 for detection of updates. For more information about Configuration Manager 2007 Software Update Management, visit the following Microsoft webpage: <div class="indent"><a href="http://technet.microsoft.com/en-us/library/bb735860.aspx" id="kb-link-46" target="_self">http://technet.microsoft.com/en-us/library/bb735860.aspx</a></div><span class="text-base">Note for Windows Vista and for Windows Server 2008</span><br/><br/>Microsoft Systems Management Server 2003 with Service Pack 3 includes support for Windows Vista and for Windows Server 2008. For more information about SMS, visit the following Microsoft SMS webpage: <div class="indent"><a href="http://www.microsoft.com/smserver/default.mspx" id="kb-link-47" target="_self">http://www.microsoft.com/smserver/default.mspx</a></div><span>For more information about detection and deployment guidance articles, click the following article number to view the article in the Microsoft Knowledge Base:<br/><br/><div class="indent"><a href="https://support.microsoft.com/en-us/help/910723" id="kb-link-48">910723 </a>Summary list of monthly detection and deployment guidance articles<br/></div></span></div></body></html>