Patch Management Solution

With Symantec Patch Management 7.5; On a Windows 7 system, MSWU-1000 (KB2991509) is being downloaded and installed BEFORE MS14-051 which causes subsequent opening of Internet Explorer to download pages instead of opening them. Once MS14-051 is installed, the behavior of Internet Explorer returns to normal.

KB2991509: Internet Explorer may become slow or unresponsive when web applications implement consecutive modal dialog boxes (Prerequisites)
http://support.microsoft.com/kb/2991509#prerequisites
Last Updated: August 21, 2014

"You must have MS14-051 Cumulative security update for Internet Explorer installed to apply this hotfix."

Attached is a screenshot of what a user may experience.

Hello Steven,

Thank you for the heads-up regarding this prerequisite check. While I have not been able to reproduce this in a lab, I have pushed up to Development for further review, for we may be able to add a check on the IsApplicable=TRUE Rule. Additionally, I have detailed this further on KM: TECH224085.

Please subscribe to this article and I will update it as soon as I have info from the Patch Dev Team.

Thank you,

Joshua

Thank you, Joshua.

Hey Joshua,

Here are the steps needed to reproduce behavior outside of SMP.

1. Install Windows 7 x64 SP1 (base, no patches)
2. Internet Explorer opens pages as expected.
3. Install KB2991509 (no reboot)
4. Internet Explorer opens, but pages do not display. Additionally, Internet Options cannot be opened.
5. Install KB2962872 (MS14-037) (reboot as required)
6. Internet Explorer opens, but prompts "Do you want to save this file?" instead of opening page.

Unconfirmed, but apparently this issue causing Microsoft Communicator to stop functioning as well.

Steve

-- Additional Information --

In our environment, we would have had MS14-037 installed already. For SMP, delaying delivery of MS14-051 to a system, allowing KB2991509 to get installed should allow for reproduction.

Many thanks! I will review this with the Patch Data Dev Team and follow up with our findings ASAP.

Joshua

Hello Steven,

     Adding MS14-037 and MS14-051 as prerequisites to MSWU-1000 (KB2991509). The change should go into today's XML release barring any major issues.

     Please feel free to follow up with any questions or concerns.

Thank you,

Joshua

Hey Josh,

MS14-051 replaces MS14-037. And KB2991509 is only for system that have recieved MS14-051. I'm not seeing the reason for MS14-037 being associated with KB2991509. Would it be possible to get an understanding of why is this case?

Thank you, in advance.

Hello MyITGuy,

Software Bulletin MS14-037 is part of the long line of bulletins that have been superseded as follows: MS14-021 to MS14-029 to MS14-035 to MS14-037 and ending on MS14-051 (as of today). This is one of the Bulletins that make up the succession for this vulnerability and is still viable to some clients.

You may review KM: TECH224085 with this publicized fix.

Hope this helps,

Joshua