MS17-JUN: Security update for Office 2010 - Office 2010 SP2 - KB3191848 **FALSE POSITIVE*

Usage and Config Patch
1

@BaiYunfei This patch isn’t offered by SCCM (in my test case on Win7/10), a case was opened with Microsoft and they conclude -

"KB3191848 (which is for OGL.dll) only applies to Office 2010 when it’s running on OS’s earlier than Vista. With Vista or later, the patch is not needed.

This conclusion is the same as our investigation results.
So you don’t have to worry about this patch if your machines are using Microsoft Vista or later version OS.

Also, we have already raised the request to the team who is in charge of the Office Article and they will update the article to add this information"

2

Thanks @nicksberger for the report, I will raise this to our team too.

3

Thanks, let me know if you want the full email analysis thread from Microsoft on the subject.

4

Thank you. I believe we only need Microsoft to update their KB page to state this clearly. We have seen similar behavior on certain patches before, but those information were posted on bulletin pages, which are no more.

Updated 2017-07-06: Microsoft has updated their webpage added an FAQ about this. BigFix content will be updated shortly.

1 Like
5

Will we get a notification when content published ?

6

Yes. This thread will be updated.

7

@BaiYunfei an ETA pls ?

8

I would estimate next week. However as the MS Update Tuesday is also on next week, the new security updates takes precedence.

9

Hi nicksberger,

The content for KB3191848 have been updated since Microsoft has released a revision for CVE-2017-0285 later last week.

The change has been published already:

Published site version:

Patches for Windows, version 2796.

Best Regards,
Sylvia