18 Apr 2006
Microsoft's latest security patch is causing issues for users of several HP products including cameras, scanners and printers.
Problems include blocked access to special folders like My Documents and My Pictures, and Office applications that stop responding when users try to save files in the My Documents folder.
Microsoft said in a security bulletin that the issue could also cause Internet Explorer to become unresponsive.
Another problem affects users of the Sunbelt Kerio Personal Firewall who are receiving prompts from the application when Internet Explorer is trying to launch a security application included in the update.
Microsoft released an application as part of last week's security patch that validates shell extensions before they are initiated by Windows or Internet Explorer.
This prevents attackers from installing code on a system when a user visits a specially crafted website.
But the Sunbelt Kerio Personal Firewall will prevent Internet Explorer from executing the new application as a security measure.
The HP issues are caused by the vendor's Share-to-Web software that comes bundled with several of its hardware products. The application is automatically started when a system boots up, and is flagged by the new shell validation tool.
"The change is not related to a software vulnerability, merely a product behaviour change to make the product more resilient to attack," Microsoft security programme manager Mike Reavey said in a blog posting.
Microsoft has provided instructions on how to repair both issues on its website.
Latest stories from Security
Related articles
Related jobs
Poll
What is the most important IT priority for your company this year?
Hands on with the highly anticipated Android 4.0 Ice Cream Sandwich hybrid tablet
Connect with V3.co.uk
This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes
Why good data management at all levels is essential in the modern business (video, 6mins)
Web Developer LAMP HTML CSS Bash Linux Cambridge...
Drupal / Web Developer ( PHP, Drupal, JavaScript, JQuery...
Web / .NET Developer ( ASP.NET, VB.NET, HTML, CSS, SQL...
Analyst / Developer (Case Management) - NW London - £35...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
No HP products installed update caused blue screen
I have no HP programs or hardware installed on my computer. Had hard time getting update installed had to change registry since programs are installed on "D" drive & not "C" drive. Once update installed caused blue screen stop error 0X000007E with reference to http.sys being invalid. Went to safe mode disabled auto restart, undid changes to registry & uninstalled update. Error still occurred. That update was the ONLY thing I had installed! I do use Kaspersky anti-hacker software & anti-virus. the only thing that was able to stop the error was to use "system restore"! Restored system to 2 days prior to update.......NO ERRORS SINCE! I AM NOT INSTALLING THAT UPDATE AGAIN!!!!!
Posted by: DAZIE 22 Apr 2006
Not Microsoft's choice
I read that the patch was added in reponse to a law suit that Microsoft has had to deal with. This 'patch' has been a royal pain though.
Posted by: jason 20 Apr 2006
more than just HP hardware
The remote control associated with Hauppauge PVR is also disabled after installing the poorly-tested patch. I have to uninstall the patch to restore the functionality of using the remote control.
Posted by: someone 19 Apr 2006