Microsoft releases Security Advisory 2974294

Page 1 of 2 12 LastLast

    Microsoft releases Security Advisory 2974294


    Posted: 17 Jun 2014
    Today, we released Security Advisory 2974294 to inform global customers about an update for the Microsoft Malware Protection Engine. This update addresses a privately disclosed issue and fixes a vulnerability that could allow a denial of service if the Microsoft Malware Protection Engine scans a specially crafted file.

    Updates for the Microsoft Malware Protection Engine are sent through security advisories as there is typically no action required to install the update. This is due to the fact that the built-in mechanism for the automatic detection and deployment of updates will apply the update within 48 hours of release. There’s no action for you to take here – the engine will do it for you. The exact time frame depends on the software used, Internet connection, and infrastructure configuration.

    We appreciate the researcher reporting this to us privately via Coordinated Vulnerability Disclosure (CVD) and for allowing us to release the update before there was any impact to our global customers.

    Thank you,
    Dustin Childs
    Group Manager, Response Communications
    Trustworthy Computing
    Source: Microsoft releases Security Advisory 2974294 - MSRC - Site Home - TechNet Blogs
    Brink's Avatar Posted By: Brink
    17 Jun 2014



  1. Posts : 5,605
    Originally Win 7 Hm Prem x64 Ver 6.1.7600 Build 7601-SP1 | Upgraded to Windows 10 December 14, 2019
       #1

    Thanks Shawn,

    It took a bit to figure out if I was okay, the gist of it is to go to the down arrow beside the Help button in MSE, click on About and check what your Engine version is, mine's 1.1.10701.0, so according to the following info quote I'm okay.



    First version of the Microsoft Malware Protection Engine with this vulnerability addressed

    Version 1.1.10701.0*
    *If your version of the Microsoft Malware Protection Engine is equal to or greater than this version, then you are not affected by this vulnerability and do not need to take any further action. For more information on how to verify the engine version number that your software is currently using, see the section, "Verifying Update Installation", in Microsoft Knowledge Base Article 2510781.

    Source: https://technet.microsoft.com/en-us/...curity/2974294
      My Computer


  2. Posts : 9,746
    Windows 7 Home Premium 64 bit sp1
       #2

    Thanks Shawn & Anak. My version is the same as yours Anak, so apparently we are OK, but thanks for the way to find the information on the Engine Version.
      My Computer


  3. Posts : 4,566
    Windows 10 Pro
       #3

    Funny, my windows defender in windows 7 is not updated, including none of my vms.

    Client Version: 6.1.7600.16385
    Engine Version: 1.1.10600.0
    Antispyware definitions: 1.175.2521.0

    When I use windows update it says I am up to date, it also says I am up to date when I use windows defender to search for updates as well.

    Am I missing something here?
      My Computer


  4. Posts : 9,746
    Windows 7 Home Premium 64 bit sp1
       #4

    Andrew, the info Anak supplied is for MSE. I don't know whether that relates directly to Windows Defender, as Defender gets disabled when MSE is installed. Whether the Engine version for MSE is the same as Defender would be a good question.
    I had a big 10+Mb update on MSE this morning so I assume that included the Malware Protection Engine update, so I suppose yours may still come though if Defender needs it.
      My Computer


  5. Posts : 4,566
    Windows 10 Pro
       #5

    Ranger4 said:
    Andrew, the info Anak supplied is for MSE. I don't know whether that relates directly to Windows Defender, as Defender gets disabled when MSE is installed. Whether the Engine version for MSE is the same as Defender would be a good question.
    Their article https://technet.microsoft.com/en-us/...curity/2974294

    specified windows defender on windows 7. So that is why I am confused. I don't use MSE.
      My Computer


  6. Posts : 25,847
    Windows 10 Pro. 64/ version 1709 Windows 7 Pro/64
       #6

    I'm thinking that Panda was suppose to turn off Defender in Windows 7.
    Maybe the Panda forum has thoughts on that.
      My Computer


  7. Posts : 9,746
    Windows 7 Home Premium 64 bit sp1
       #7

    Andrew. If you read down this MS website it mentions the Malware Engine under the Windows 8 section & it reads number above 1.1.9506.0 & referring to your number which you quoted in Post #4 as 1.1.10600.0 seems to be a much later number. Hope I am on the right track here.

    https://support.microsoft.com/kb/2510781
      My Computer


  8. Posts : 5,605
    Originally Win 7 Hm Prem x64 Ver 6.1.7600 Build 7601-SP1 | Upgraded to Windows 10 December 14, 2019
       #8

    andrew129260 said:
    Funny, my windows defender in windows 7 is not updated, including none of my vms.

    Client Version: 6.1.7600.16385
    Engine Version: 1.1.10600.0
    Antispyware definitions: 1.175.2521.0

    When I use windows update it says I am up to date, it also says I am up to date when I use windows defender to search for updates as well.

    Am I missing something here?
    Andrew,

    Are you seeing any error codes when trying to update? Even if your not this could be a case that your distribution database is broken and needs to be re-created.

    One area you may want to check is the last date modified of your Defender Folder/Files; Type/copy/paste Windows Defender in the Start >Search box, go to the Windows Defender Folder under Files, then right click and click on open file location then Folder to check the dates.
    You can also check the Reliability and Problem History with Reliability Monitor These two ways may give you a handle on when Defender started to act up.

    This link: Fix: Windows Defender will not update definitions, Will explain the error codes, offer a different automatic avenue to updating Defender, troubleshoot the problem, supplies a manual way to update, and in step #6 shows how to recreate the Distribution database.

    The file (mpas-fe.exe 64bit) offered at the Windows Club link is the same as the one offered here: Get the latest definitions - Microsoft Malware Protection Center It should update the Defender application.

    Both files have the same details:
    Microsoft releases Security Advisory 2974294-defender.jpg


    The usual caveats apply as to backups and restore points.
      My Computer


  9. Posts : 4,566
    Windows 10 Pro
       #9

    Layback Bear said:
    I'm thinking that Panda was suppose to turn off Defender in Windows 7.
    Maybe the Panda forum has thoughts on that.
    No panda does not disable windows defender :) I can open it and it is fully functioning. It updated definitions today but no engine upgrade still. Thank you for the suggestion.

    Ranger4 said:
    Andrew. If you read down this MS website it mentions the Malware Engine under the Windows 8 section & it reads number above 1.1.9506.0 & referring to your number which you quoted in Post #4 as 1.1.10600.0 seems to be a much later number. Hope I am on the right track here.

    https://support.microsoft.com/kb/2510781
    thanks for the info

    @Anak

    Appreciate it. No error codes, everything is successful when updating and everything looks happy ha. I will do this soon.

    I am still not sure why even my vms though are not updated as well. I have 2 windows 7 in VMS and they are not updated either. I do not understand what is going on.

    Is this also supposed to be released as a windows update in the future to apply the update to the malware engine?


    I have never once had a problem with updates or anything of the sort. So I do not understand what is going on...

    Maybe the update is only for windows 8 and mse and the article is wrong....idk
    Last edited by andrew129260; 18 Jun 2014 at 13:05.
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 15:25.
Find Us