14 DAY TRIAL // As previously announced, Microsoft has re-released a patch designed to plug a security hole in Microsoft Windows Media Services on Windows 2000, after it pulled the update, noting that the initial release did not successfully resolve the issue as intended. “The re-release of MS10-025 is available. Again, this only affects those with Windows 2000 Servers in a non-default configuration with Windows Media Services installed. All customers with this configuration are advised to install this re-released update,” Carlene Chmaj, from the Microsoft Security Response team, revealed.
Microsoft Security Bulletin MS10-025, rated Critical, was initially released on April 13th, 2010, as a part of this month’s patch cycle for the Redmond company. On April 23rd, Jerry Bryant, group manager, Response Communications, revealed that the software giant had discovered MS10-025 wasn’t properly resolving the Windows Media Services vulnerability, and, as such, discontinued the distribution of the security bulletin altogether, noting that a re-release was in the works.
On April 27, 2010, Microsoft started offering the “revised bulletin to offer the rereleased security update for Windows Media Services running on Microsoft Windows 2000 Server Service Pack 4. Microsoft recommends that customers running the affected software apply the rereleased security update immediately,” the company stated.
In the eventuality of a successful exploit of the Critical vulnerability in Windows Media Services running on Windows 2000 Server, an attacker could execute remote code on an affected system. However, Microsoft has not offered any information related to the discovery of active attacks in the wild.
The new MS10-025 also caused the re-release of the April 2010 Security Release ISO Image. The patch package containing this month’s Windows security bulletin has been updated with the addition of the revamped MS10-025 and is now available for download from the Redmond company. The Security Release ISO Image contains multiple individual language versions of the April 2010 security updates designed to patch vulnerabilities affecting Windows operating systems.
The April 2010 Security Release ISO Image is available for download here.