Microsofts Latest Update Causes BSOD
Microsoft have announced that after installing the February security updates a limited number of users are experiencing the dreaded BSOD. There initial analysis suggests that the issue occurs after installing MS10-015 (KB977165). However, they have not confirmed that the issue is specific to MS10-015 or if it is an interoperability problem with another component or third-party software. The Microsoft team is working to resolve this as quickly as possible. They have also stopped offering this update through Windows Update as soon as they discovered the issues. However, those using enterprise deployment systems such as SMS or WSUS will still see and be able to deploy these packages.
As you may recall MS10-015 is an Elevation of Privilege that would require the attacker to have valid credentials in order to be able to leverage the vulnerability in an attack. Several other updates in this release were identified as having a high priority for deployment and Microsoft continue to encourage customers to thoroughly test the updates and deploy them immediately. At this time, they are not aware of any issues with the other updates that were released this month and they continue to encourage customers to install them as soon as possible in order to help ensure that they protected from the vulnerabilities they address.
While Microsoft work to address this issue, customers who choose not to install the update can implement the workaround outlined in the bulletin. CVE-2010-0232 was publicly disclosed and they previously issued Security Advisory 979682 in response. Customers can disable the NTVDM subsystem as a workaround and they have provided an automated method of doing that with a Microsoft Fix It that you can find here: http://support.microsoft.com/kb/979682.
Customers who are experiencing issues after installing any of our security updates can get help resolving the issues by either going to https://consumersecuritysupport.microsoft.com or by calling 1-866-PCSafety (1-866-727-2338). International customers can find local support contact numbers here: http://support.microsoft.com/common/international.aspx.