MS10-022: Description of the security update for Visual Basic Scripting (VBScript) 5.8: April 13, 2010

More information about this security update

Known issue

We know about an issue that affects a limited scope of computers on which all the following conditions are true:

• Windows XP Service Pack 3 is installed.
• An old version of Windows Script Host 5.6 was manually installed.

Note By default, Windows XP Service Pack 3 installs Windows Script Host 5.7. This known issue is limited to computers on which an earlier version of Windows Script Host was manually installed, even though you do not have to do this.

On computers that are affected by this known issue, this security update may not install because an unexpected version of Vbscript.dll is present. In order to install this security update on Windows XP Service Pack 3, the version of the Vbscript.dll file must be 5.7 as a minimum.

To resolve this known issue on a computer that is running Windows XP Service Pack 3, and the version of the Vbscript.dll file is version 5.6, use one of the following methods, as appropriate for the version of Windows Internet Explorer that is installed on the computer.

For Internet Explorer 6

1. Restore Vbscript.dll to an expected file version.
   
   To restore Vbscript.dll to version 5.7, do one of the following:
   • Download and install the KB951978 Script Engine update for Windows XP:
     951978 Script output is not displayed as expected when you run VBScript or JScript scripts in Windows Vista Service Pack 1, in Windows Server 2008, or in Windows XP Service Pack 3
     
     
     Note If you have enabled automatic updates, you will be offered this update automatically.
   • Upgrade to Internet Explorer 8. For more information about how to obtain Internet Explorer 8, visit the following Microsoft Web site:
     http://go.microsoft.com/fwlink/?LinkId=144107
     Note If you have enabled automatic updates, you will be offered this update automatically.
   • Upgrade to Internet Explorer 7. For more information about how to obtain Internet Explorer 7, visit the following Microsoft Web site:
     http://go.microsoft.com/fwlink/?LinkID=158419
2. Install the security update.
   
   After you have successfully restored Vbscript.dll to an expected version as outlined here, install the VBScript 5.7 security update for Windows XP Service Pack 3 (KB981349) as described in Security Bulletin MS10-022.
   
   Note This security update will be offered through Automatic Updates if the version of Vbscript.dll is at least 5.7.0.0.

For Internet Explorer 7

1. Restore Vbscript.dll to an expected file version.
   
   To restore Vbscript.dll to version 5.7, do one of the following:
   • Download and install the KB951978 Script Engine update for Windows XP:
     951978 Script output is not displayed as expected when you run VBScript or JScript scripts in Windows Vista Service Pack 1, in Windows Server 2008, or in Windows XP Service Pack 3
     
     
     Note If you have enabled automatic updates, you will be offered this update automatically.
   • Upgrade to Internet Explorer 8. For more information about how to obtain Internet Explorer 8, visit the following Microsoft Web site:
     http://go.microsoft.com/fwlink/?LinkId=144107
     Note If you have enabled automatic updates, you will be offered this update automatically.
   • Uninstall Internet Explorer 7, and then reinstall Internet Explorer 7.
2. Install the security update.
   
   After you have successfully restored Vbscript.dll to an expected version as outlined here, install the VBScript 5.7 security update for Windows XP Service Pack 3 (KB981349) as described in Security Bulletin MS10-022.
   
   Note If you have enabled automatic updates, you will be offered this update automatically.

For Internet Explorer 8

If you have Internet Explorer 8 installed, and you have automatic updates enabled, you will be offered the correct update automatically, and you do not have to take any additional action. If you have to manually install this security update, download and install the VBScript 5.8 security update for Windows XP Service Pack 3 (KB981349) as described in Security Bulletin MS10-022.

Prerequisites to apply this security update

To install this security update, you must have Microsoft Visual Basic Scripting Edition (VBScript) 5.8 installed on the computer.

VBScript 5.8 is installed by the following:

• Internet Explorer 8.0
• Windows 7 (x86-based and x64-based)
• Windows Server 2008 R2 (x64-based and Itanium-based)

To determine the version of VBScript installed on the computer, follow these steps:

1. Open Windows Explorer.
2. Locate the following directory:
   %systemroot% \System32
3. Right-click the Vbscript.dll file, and then click
   
   Properties.
4. Click the Details tab to view the
   
   File Version field.

If the file version starts with 5.8, for example 5.8.6001.18702, VBScript 5.8 is installed on the computer.

Removal information

To remove this security update, do one of the following:

• Use the Add or Remove Programs item or the Programs and Features item in Control Panel.
• Use the Spuninst.exe utility that is located in the %Windir%\$NTUninstallKB981332$\Spuninst folder.
• WUSA.exe does not support uninstalling updates. To uninstall an update that was installed by WUSA, click Control Panel, and then click Security. Under Windows Update, click View installed updates and select from the list of updates.

Restart information

You may have to restart the computer after you apply this security update.