M100660: MS03-021 and MS05-009 are reported as not applicable to Windows XP SP1 devices that have Windows Media Player 9 Series installed

ManageSoft Security Patch Management fails to detect Windows Media Player 9 Series as installed on devices running Windows XP Service Pack 1. As a result, the security bulletins MS03-021 and MS05-009 will be reported as "not applicable" to such devices, and the relevant patch from these bulletins will not be installed.

The installation agent log file will show messages such as the following when processing relevant patch packages on affected devices (exact details in the logging will vary depending on the version of ManageSoft Security Patch Management in use):

  Detected installed product 
  "Windows XP Professional" (ProductID 183)
    Service pack "Windows XP Service Pack 1"
    (ServicePackID 234)
[...]
  Detected installed product 
  "Windows Media Player 9 Series for Windows XP" 
  (ProductID 164)
[...]
Security patch MS05-009/WindowsMedia9-KB885492-x86-ENU.exe 
is out of scope

In particular, note that the logging here incorrectly shows the product "Windows Media Player 9 Series for Windows XP" as being installed, but does not show the product "Windows Media Player 9 Series" as installed.

This incorrect behavior can be resolved for systems running ManageSoft Security Patch Management 7.2 or later by downloading the latest version of the ManageSoft Security Patch Management securityproducts.xml file as described in KB article 100659.

Additional Information

Information about the MS03-021 security bulletin can be found at http://www.microsoft.com/technet/security/bulletin/MS03-021.mspx.

Information about the MS05-009 security bulletin can be found at http://www.microsoft.com/technet/security/bulletin/MS05-009.mspx.

Additional Information

Comments