Faulty detection routine for MS08-024 (KB947864)?

I am in the process of validating the April 08 patches and have found that on
numerous machines with IE 7 installed, MS08-024 is not detected as necessary.
I am using ITMU v3 for SMS to deploy these patches, but visiting Windows
Update with the same computer also shows that MS08-024 - Cumulative update
for IE 7 is not needed. None of the machines actually have MS08-024
installed. I have verified this by looking at the version of URLMON.DLL on
these machines and it is older than the 7.0.6000.20772. The version on the
machine is 7.0.6000.20733

Here is the log entry from SMSWusHandler.log showing that MS08-024 is
detected as "INSTALLED". This is not correct. it is not installed. If I
remove the February cumulative update for IE 7, then run the scan again, the
patch is detected as needed. Windows Update is not correctly detecting the
abcense of MS08-024.



This is a Top-level update.
UpdateID={0162a7a8-01e2-416f-adcb-2c68141a7183} SmsWusHandler 4/9/2008
11:39:34 2336 (0x0920)
Leaf-update SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
Detected update with ID={6ff686ff-20e8-4dc3-82eb-c8d5e652ce32} for
Product(s) - SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
- Windows XP SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)
Update Title=Cumulative Security Update for Internet Explorer 7 for
Windows XP (KB947864), BulletinID=MS08-024 SmsWusHandler 4/9/2008
11:39:34 2336 (0x0920)
Status=Installed SmsWusHandler 4/9/2008 11:39:34 2336 (0x0920)



And this from ScanWrapper...

Product = Windows XP, BulletinTitle = Cumulative Security Update for
Internet Explorer 7 for Windows XP (KB947864) Software Updates Scan
Tool 4/9/2008 08:03:18 3484 (0x0D9C)
BulletinID = MS08-024, QNumber = 947864, Status = Installed - Software
Updates Scan Tool 4/9/2008 08:03:18 3484 (0x0D9C)



and


Updating Instance with ID = MS08-024, QNumber = 947864, Title = Cumulative
Security Update for Internet Explorer 7 for Windows XP (KB947864) Software
Updates Scan Tool 4/9/2008 08:03:20 3484 (0x0D9C)
Status = Installed Software Updates Scan Tool 4/9/2008 08:03:20 3484 (0x0D9C)
ScanDateTime = 20080409080318.000000+*** Software Updates Scan Tool 4/9/2008
08:03:20 3484 (0x0D9C)
TimeDetected = 20080409080318.000000+*** Software Updates Scan Tool 4/9/2008
08:03:20 3484 (0x0D9C)
TimeApplied = 20080409080318.000000+*** Software Updates Scan Tool 4/9/2008
08:03:20 3484 (0x0D9C)

.

Relevant Pages

  • RE: [Full-Disclosure] Re: [tool] the new p0f 2.0.1 is now out
    ... detecting. ... >> the system on machines that connect to your box, ... >> even if the device is behind a fascist packet firewall. ...
    (Full-Disclosure)
  • Re: your tax dollars at work
    ... If they are better at detecting a radiation source, then they may be able to prevent a device which could kill people couldn't it? ... If it can prevent someone or a lot of someones from dying, should we be making a cost benefit analysis to determine whether to use these machines or not? ... materials at ports, a report from the National Research Council says. ...
    (soc.retirement)
  • Re: Faulty detection routine for MS08-024 (KB947864)?
    ... Immediately after I restarted the machines, MS08-024 started to be recognized as necessary. ... I am using ITMU v3 for SMS to deploy these patches, but visiting Windows ... Update with the same computer also shows that MS08-024 - Cumulative update ... Windows Update is not correctly detecting the ...
    (microsoft.public.windowsupdate)
  • RE: Faulty detection routine for MS08-024 (KB947864)?
    ... I am using ITMU v3 for SMS to deploy these patches, but visiting Windows ... Update with the same computer also shows that MS08-024 - Cumulative update ... None of the machines actually have MS08-024 ... Windows Update is not correctly detecting the ...
    (microsoft.public.windowsupdate)
  • Re: Bush Strums as New Orleans drowns
    ... >>>modern machines. ... Detecting that it happened isn't the same as getting an accurate ... Republican precincts, but there are a few where Republicans ... Minneapolis, but Minneapolis is large enough to swing the entire ...
    (rec.arts.sf.fandom)