MS10-022: Description of the security update for Visual Basic Scripting (VBScript) 5.7: April 13, 2010

Microsoft has released security bulletin MS10-022. To view the complete security bulletin, visit one of the following Microsoft Web sites:

• Home users:
  http://www.microsoft.com/security/updates/bulletins/201004.aspx
  Skip the details: Download the updates for your home computer or laptop from the Microsoft Update Web site now:
  http://update.microsoft.com/microsoftupdate/
• IT professionals:
  http://www.microsoft.com/technet/security/bulletin/ms10-022.mspx

How to obtain help and support for this security update

For home users, no-charge support is available by calling 1-866-PCSAFETY in the United States and Canada or by contacting your local Microsoft subsidiary. For more information about how to contact your local Microsoft subsidiary for support issues with security updates, visit the Microsoft International Support Web site: North American customers can also obtain instant access to unlimited no-charge e-mail support or to unlimited individual chat support by visiting the following Microsoft Web site: For enterprise customers, support for security updates is available through your usual support contacts.

More information about this security update

Known issue

We know about an issue that affects a limited scope of computers on which all the following conditions are true:

• Windows XP Service Pack 3 is installed.
• An old version of Windows Script Host 5.6 was manually installed.

Note By default, Windows XP Service Pack 3 installs Windows Script Host 5.7. This known issue is limited to computers on which an earlier version of Windows Script Host was manually installed, even though you do not have to do this.

On computers that are affected by this known issue, this security update may not install because an unexpected version of Vbscript.dll is present. In order to install this security update on Windows XP Service Pack 3, the version of the Vbscript.dll file must be 5.7 as a minimum.

To resolve this known issue on a computer that is running Windows XP Service Pack 3, and the version of the Vbscript.dll file is version 5.6, use one of the following methods, as appropriate for the version of Windows Internet Explorer that is installed on the computer.

For Internet Explorer 6

1. Restore Vbscript.dll to an expected file version.
   
   To restore Vbscript.dll to version 5.7, do one of the following:
   • Download and install the KB951978 Script Engine update for Windows XP:
     951978� Script output is not displayed as expected when you run VBScript or JScript scripts in Windows Vista Service Pack 1, in Windows Server 2008, or in Windows XP Service Pack 3
     Note If you have enabled automatic updates, you will be offered this update automatically.
   • Upgrade to Internet Explorer 8. For more information about how to obtain Internet Explorer 8, visit the following Microsoft Web site:
     http://go.microsoft.com/fwlink/?LinkId=144107
     Note If you have enabled automatic updates, you will be offered this update automatically.
   • Upgrade to Internet Explorer 7. For more information about how to obtain Internet Explorer 7, visit the following Microsoft Web site:
     http://go.microsoft.com/fwlink/?LinkID=158419
2. Install the security update.
   
   After you have successfully restored Vbscript.dll to an expected version as outlined here, install the VBScript 5.7 security update for Windows XP Service Pack 3 (KB981349) as described in Security Bulletin MS10-022.
   
   Note This security update will be offered through Automatic Updates if the version of Vbscript.dll is at least 5.7.0.0.

For Internet Explorer 7

1. Restore Vbscript.dll to an expected file version.
   
   To restore Vbscript.dll to version 5.7, do one of the following:
   • Download and install the KB951978 Script Engine update for Windows XP:
     951978� Script output is not displayed as expected when you run VBScript or JScript scripts in Windows Vista Service Pack 1, in Windows Server 2008, or in Windows XP Service Pack 3
     Note If you have enabled automatic updates, you will be offered this update automatically.
   • Upgrade to Internet Explorer 8. For more information about how to obtain Internet Explorer 8, visit the following Microsoft Web site:
     http://go.microsoft.com/fwlink/?LinkId=144107
     Note If you have enabled automatic updates, you will be offered this update automatically.
   • Uninstall Internet Explorer 7, and then reinstall Internet Explorer 7.
2. Install the security update.
   
   After you have successfully restored Vbscript.dll to an expected version as outlined here, install the VBScript 5.7 security update for Windows XP Service Pack 3 (KB981349) as described in Security Bulletin MS10-022.
   
   Note If you have enabled automatic updates, you will be offered this update automatically.

For Internet Explorer 8

If you have Internet Explorer 8 installed, and you have automatic updates enabled, you will be offered the correct update automatically, and you do not have to take any additional action. If you have to manually install this security update, download and install the VBScript 5.8 security update for Windows XP Service Pack 3 (KB981349) as described in Security Bulletin MS10-022.