New Microsoft Windows Data Access Components Update [KB832483]

This is what it says, anyone know anything about this?
I get automatic updates, but it informs me first and I have the right of choice in whether or not I want it or not.

Anyone know whether this is a good update or not???

<hr></hr>

Security Update for Microsoft Data Access Components [KB832483]
An identified security issue in Microsoft Data Access Components could allow an attacker to compromise a Windows-based system and take a variety of actions. For example, an attacker could execute code on the system. By installing this update, you help protect your computer. After you install this item, you may have to restart your computer. Once you have installed this item, it cannot be removed.

Depends on what you mean by "good update". MDAC has been an underlying database function in Windows for a long time. If you want to delay implementation until you are satisfied the update itself doesn't have any bugs, then that will probably be fine. First, this update is rated as "Important" instead of "Critical". That means the probability of seeing an exploit in the near future is not real high. Second, unless you do a lot of database work over a network or the internet, your exposure to this is likely to be pretty low. On the other hand, MDAC updates are relatively common, and problems with them are rare. If you are wary and just want to wait until more is known about how well the patch works, you should be okay. For me personally, I'll probably wait a week or two before loading it. But that's just me.

Kay thanks Rhino

Okay, I have verified that you can wait safely. For an attack to be successful an attacker would have to
simulate a SQL server that is on the same IP subnet as the target system. So, you should be completely safe.

Totally safe, if that is the case.

The chances of that happening are a million to one.

Cool. That saves me an update download.

Oh, I"d DL it, but I would wait a week or two, just in case there are still some issue with that patch.

There are some minor issues with it, but they only involve indications of whether or not it's installed, and the fact that it doesn't show up under Add/Remove Programs. Go here and check items 9 and 10 for more details.

It is possible that the person who posted that message did not either DL SP2 or did not DL of it's patched components.

XP, or any OS that uses the NT kernel, is likely to encounter this, as I myself have.

The reason why it wont show up on the add/remove is because once it is installed You cannot remove it.

[ QUOTE ]
nosferatuscoffin said:
It is possible that the person who posted that message did not either DL SP2 or did not DL of it's patched components.

XP, or any OS that uses the NT kernel, is likely to encounter this, as I myself have.

[/ QUOTE ]
I've encountered that too, but there have been numerous reports about this, so......

[ QUOTE ]
Rink said:
The reason why it wont show up on the add/remove is because once it is installed You cannot remove it.

[/ QUOTE ]
Certainly possible, but not likely. Most such updates do show up there, especially on servers, if for no other reason than to serve as a list of what is and is not installed. Even if it wasn't supposed to show up in that particular location, the point these people are making is that there is no way to tell if it was installed or not. That's a major problem for system administrators who have to perform security audits on their systems. Microsoft also has special tools for system administrators that are designed to show them which updates are applicable, which ones have been installed and/or which ones should be. This update doesn't show up with those tools, which begs the question, "what other updates may also be left out?" That poses a major risk to one helluva lot of people and companies if they can't determine the security status of their systems.

Rhino I get these little updates on my lower left tray of my windows PC, this particular update stated that once it is installed it cannot be removed.

ok after I get the reminder again I will copy exactly word for word what it has to say about it ok?

I set my reminder for 3 days.

I think tomorrow will be the third day.

Hun,

If you have your Updates set correctly, you can see every update that has been installed and can use a prior Restore Point to get rid of it.

I have not installed it yet and it clearly stated that once it is installed it cannot be removed.

So I dunno if a Restore Point would have removed it or not.

Updates like this replace system files. Restore points unreplace them. Just be sure you make one prior to installing the update. Of course, the way luck runs sometimes, these will be files that don't get backed up. But, that's what the CD is for, eh?

heh yup and thanks for the explanation, now... how do I make a restore point? LOL heeh Ya I should know mebbe I already khow how to do it, but prolly dunno it