Microsoft Visual C++ 2005 Service Pack 1 Redistibutable Package

[bpa_retired]

Last week MS Updates offered an update titled "Security Update for
Microsoft Visual C++ 2005 Service Pack 1 Redistibutable Package (KB973923)".

My question is simply why was it offered, Do I actually need it? Or, should
I 'hide' it.

I am using XP Pro SP3, with all (other) current critical updates.

Add/Remove does not list anything for 'Microsoft Visual C++ 2005', 'Service
Pack 1 Redistibutable Package'.

Also, when I click on the link (in updates) for more info, I simply get a
'(MS) Sorry, but we couldn't find the page that you requested.'.

Any info would be appreciated.

[PA Bear [MS MVP]]

See the Affected Software seciont of
http://www.microsoft.com/technet/security/bulletin/MS09-035.mspx

Need more? See the "How to obtain help" section of
http://support.microsoft.com/kb/973923
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002

[bpa_retired]

PA Bear :
So, from the 1st link you provided it appears that the 'need' for "Security

Update for
Microsoft Visual C++ 2005 Service Pack 1 Redistibutable Package (KB973923)"

is actually 'triggered' by the release of "Cumulative Security Update for
Internet Explorer (972260) MS09-034" both released out-of-band at the same
time.

Thus it would seem that installing "Cumulative Security Update for Internet
Explorer (972260) MS09-034" triggers the need for "Security Update for
Microsoft Visual C++ 2005 Service Pack 1 Redistibutable Package (KB973923)",
and not necessarily related to Microsoft Visual C++ 2005, as the title
indicates.

[PA Bear [MS MVP]]

No, that is not the case. (My computer was offered MS09-034 but not
MS09-035.)

If IE6 or higher is installed, MS09-034 will be offered, period.

bpa_retired wrote:
> PA Bear :
> So, from the 1st link you provided it appears that the 'need' for
> "Security
> Update for
> Microsoft Visual C++ 2005 Service Pack 1 Redistibutable Package
> (KB973923)"
> is actually 'triggered' by the release of "Cumulative Security Update for
> Internet Explorer (972260) MS09-034" both released out-of-band at the same
> time.
>
> Thus it would seem that installing "Cumulative Security Update for
> Internet
> Explorer (972260) MS09-034" triggers the need for "Security Update for
> Microsoft Visual C++ 2005 Service Pack 1 Redistibutable Package
> (KB973923)",
> and not necessarily related to Microsoft Visual C++ 2005, as the title
> indicates.
>
>
>
> "PA Bear [MS MVP]" wrote:
>

>> See the Affected Software [section] of

[bpa_retired]

PA Bear :
Then I don't understand why MS09-035 Security Update for Microsoft Visual
C++ 2005 Service Pack 1 Redistibutable Package (KB973923) was offered.
Obviously Visual C++ .... is not the determining factor, since I do not have
Visual C++ .... installed. Incidentaly, this same situation ocurred on both
my desktop (with XP Pro SP3 and IE6) and my laptop (with XP Home SP3 and IE8).

Should I blindly install MS09-035 Security Update for Microsoft Visual C++
2005 Service Pack 1 Redistibutable Package (KB973923) without knowing what
the 'trigger' is, or should I hide it?

[PA Bear [MS MVP]]

Repost:

See the Affected Software section of

http://www.microsoft.com/technet/security/bulletin/MS09-035.mspx. If any of
the listed applications are installed, there's a specific update for it.

Affected Software (and KB number of applicatioin-specific update) includes:

- Microsoft Visual Studio .NET 2003 Service Pack 1 (KB971089)
- Microsoft Visual Studio 2005 Service Pack 1 (KB971090)
- Microsoft Visual Studio 2005 Service Pack 164-Bit Hosted Visual C++
Tools (KB973830)
- Microsoft Visual Studio 2008 (KB971091)
- Microsoft Visual Studio 2008 Service Pack 1 (KB971092)
- Microsoft Visual C++ 2005 Service Pack 1 Redistributable Package
(KB973544)
- Microsoft Visual C++ 2008 Redistributable Package (KB973551)
- Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package
(KB973552)

Need more help? See the "How to obtain help" section of
http://support.microsoft.com/kb/973923 or any of the above KB articles.

[Harry Johnston [MVP]]

bpa_retired wrote:

> PA Bear :
> Then I don't understand why MS09-035 Security Update for Microsoft Visual
> C++ 2005 Service Pack 1 Redistibutable Package (KB973923) was offered.
> Obviously Visual C++ .... is not the determining factor, since I do not have
> Visual C++ .... installed.

Are you sure? This would have been automatically installed by any third-party
or Microsoft software that was written using VC++ 2005. I'm not sure whether it
would always appear in Add/Remove Programs, either.

Incidentaly, this same situation ocurred on both
> my desktop (with XP Pro SP3 and IE6) and my laptop (with XP Home SP3 and IE8).
>
> Should I blindly install MS09-035 Security Update for Microsoft Visual C++
> 2005 Service Pack 1 Redistibutable Package (KB973923) without knowing what
> the 'trigger' is, or should I hide it?

I'd recommend installing it.

Harry.

[bpa_retired]

PA Bear :
Harry :

Based on you suggestions I will let the V C++ update install; however it
certainly would be nice to know what applicaiton 'triggered' the need. I
have none of the applications listed in either PC.

Since the Win Update engine searches and parses the installed applications
on the PC to determine what updates are required, it seems that a relatively
trivial tweak could infact provide a list of the actual application(s) that a
given search hit on.

[PA Bear [MS MVP]]

Your username (bpa_retired) leads me to ask: Is Quicken, QuickBooks, or any
other accounting software installed?

FWIW & FYI, MS is aware of some related issues associated with Microsoft
Visual C++ 2005 Service Pack 1 Redistributable Package Update/MS09-035 and
related KB articles. Expect further guidance & details in a revision of
this page soon:
http://www.microsoft.com/technet/security/bulletin/ms09-035.mspx (currently
v1.0, dated July 28, 2009)

[bpa_retired]

PA Bear :

Yes, as a matter of fact I do have/use an older version of Quicken (2006)
and several years of TurboTax.

As I said earlier, when the Win Update scan detected (whatever it was that
it detected) that Quicken (or some related .exe, .dll, etc) existed on the PC
then that detected item could/should be listed as the reason an update is
required.

[PA Bear [MS MVP]]

> As I said earlier, when the Win Update scan detected (whatever it was that
> it detected) that Quicken (or some related .exe, .dll, etc) existed on the
> PC then that detected item could/should be listed as the reason an update
> is
> required.

Sorry, I don't see that in any of your posts quoted below.

In short, yes, install it.

[PA Bear [MS MVP]]

V1.1 (August 4, 2009): Added new entries to the section, Frequently Asked
Questions (FAQ) Related to This Security Update, to communicate that the
Known issues with this security update section in the associated Microsoft
Knowledge Base Article 969706 has been updated, and that the update
detection logic for KB973923 and KB973924 has been revised to correct a
package re-offering issue; and to clarify the difference between the Visual
C++ Redistributable packages and the other Visual Studio updates.
http://www.microsoft.com/technet/security/bulletin/ms09-035.mspx
--
~PA Bear

PA Bear [MS MVP] wrote:

<snip>

> FWIW & FYI, MS is aware of some related issues associated with Microsoft
> Visual C++ 2005 Service Pack 1 Redistributable Package Update/MS09-035 and
> related KB articles. Expect further guidance & details in a revision of
> this page soon:
> http://www.microsoft.com/technet/security/bulletin/ms09-035.mspx
> (currently
> v1.0, dated July 28, 2009)

<snip>

[Belmar]

Belmar
Can anyone recall what the redistributable package contained. One update
started to install Photo Gallery and I tried to cancel it. Since then,
everytime I boot - it wants me to put the install pkg in the reader.