Re: Is the installation of KB873374, GDI+ Detection Tool, really a security update for a Windows 2000 Server?

From: Torgeir Bakken \(MVP\) (Torgeir.Bakken-spam_at_hydro.com)
Date: 09/20/04


Date: Mon, 20 Sep 2004 19:45:55 +0200

Nate Goulet wrote:

> Is the installation of KB873374, GDI+ Detection Tool really a
> security update for a Windows 2000 Server?

The GDI+ Detection Tool is not a security update, just a tool
that tries (and badly so) to detect if you need any of the
available GDI+ updates.

> Should I bother installing this on my Windows 2000 Server? I'd
> rather not install optional updates that are not "critical".

If you have IE6 SP1 installed on the server, you should install this
one:
http://www.microsoft.com/downloads/details.aspx?FamilyId=B0095851-674D-4357-868C-DD75D88405EC&displaylang=en

> We're not running any of the programs in the list below on any of our
> pcs, so does that mean I don't need to install this?
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;873374
>
> The information in this article applies to:
> [snip list]

The list did not include the IE6 SP1 update or the Windows XP update.

If you have WinXP computers not running SP2, you should install this
one:
http://www.microsoft.com/downloads/details.aspx?FamilyId=6F8D70C1-63BD-4213-82C1-20266FDFD735&displaylang=en

If you have non-WinXP computers running IE 6 SP1, you should install
this one:
http://www.microsoft.com/downloads/details.aspx?FamilyId=B0095851-674D-4357-868C-DD75D88405EC&displaylang=en

More about this here:

Microsoft Security Bulletin MS04-028
Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution
http://www.microsoft.com/technet/security/Bulletin/MS04-028.mspx

-- 
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx


Relevant Pages

  • Re: GDI+ Security Update
    ... > told that I should install the GDI+ security update. ... I believe it downloads the MS GDI+ Detection Tool (Gdidettool.exe ... programs that present a risk. ...
    (microsoft.public.windowsxp.security_admin)
  • What is the GDI+ Detection Tool & Why Should I Install It?
    ... What is the GDI+ Detection Tool & Why Should I Install It? ... I actually _DID_ install the update, but ripped it out by restoring my ...
    (microsoft.public.win2000.general)
  • Re: Checking for the latest updates....
    ... It's a good idea to install them now and then check again, ... Microsoft Windows XP ... Windows XP Service Pack 1 ... Security Update for Windows XP ...
    (microsoft.public.windowsupdate)
  • Re: 14th February updated - now my documents wont open...
    ... Customers in the U.S. and Canada can receive technical support from Microsoft Product Support Services at 1-866-PCSAFETY. ... Given your desciption of the problems, I'd also install of the Windows ... Security Update for Windows XP ...
    (microsoft.public.windowsupdate)
  • Re: 14th February updated - now my documents wont open...
    ... Would Microsoft want to hear from me as to which module causes the failure? ... Given your desciption of the problems, I'd also install of the Windows ... Security Update for Windows XP ...
    (microsoft.public.windowsupdate)