Physician, heal thyself. Three Microsoft security fixes recently caused a lot of people serious problems with IE (Internet Explorer), Office and Outlook Express.
This article appears in the September 06 issue of PC Advisor, which is available now in all good newsagents.
A recent patch for Windows Explorer, distributed via Windows Update, in essence rendered Office unusable for many people, preventing them from opening or saving files. For others, IE’s address bar refused to accept manually entered URLs. The trouble mainly affected users who have HP’s Share-to-web program, which is no longer distributed. It came with HP PhotoSmart software, any HP DeskJet printer with a card reader and HP scanners. Some HP cameras and optical drives bundled the software. And certain PCs running older nVidia graphics cards had suffered some problems as well.
Microsoft has issued a patch via Windows Update (www.microsoft.com/technet/security/bulletin/ms06-015.mspx). If you have Automatic Updates enabled, it will automatically determine if you need the ‘patched’ patch.
Meanwhile, a patch for IE plugged eight critical holes in the browser, but altered the browser’s behaviour in response to an ongoing patent lawsuit brought by a California university. The update adjusts the way IE handles commonly used ActiveX controls, particularly for plug-ins such as the popular Macromedia Flash Player.
For the browser change to work correctly, websites have to make corresponding changes. Otherwise, every ActiveX control on a site requires an extra click to activate.
Microsoft has been trying to get the word out to website managers, but of course many of the millions of sites out there didn’t get updated. And users, who received little notice about the change, were caught off guard when many sites suddenly seemed broken.
Microsoft released a temporary workaround that undoes the ActiveX control patch while leaving the security update intact. The fix is due to be phased out soon because of the continuing patent battle, but for now you can get it at support.microsoft.com/kb/917425.
As if those bugs weren’t enough, users have reported their Outlook Express 6.0 address book vanished after installing a security patch for that program.
Microsoft has said only that it’s looking into the problem. Users on the company’s forum say they were able to retrieve their address books by uninstalling the patch. Luckily, the bug it fixes isn’t critical, so removing the patch seems to be an acceptable way to get your Outlook Express address book working again.