Microsoft has been forced to re-release a security patch issued on this month’s Patch Tuesday, but which proved to be not all everyone hoped. The patch was supposed to cover remote code execution vulnerability in Vista and XP, and had been rated “critical” by the company.
However, although the patch covered the flaw in Vista, it didn’t give a fix for XP. That has now been addressed, according to Christopher Budd, Microsoft security and response communications lead.
"As soon as we learned of that possibility, we mobilized our Software Security Incident Response Process (SSIRP) to investigate the issue. Our investigation found that while the other security updates were providing protections for the issues discussed in the bulletin, the Windows XP SP2 and SP3 updates were not."
The updated patch is obtainable via the Microsoft Download Center or through automatic Windows Update.