Microsoft confirmed that a faulty patch is causing BlueScreen

August 19, 2014  By Pierluigi Paganini


Microsoft is investigating on potentially faulty Windows security update that is causing some systems to crash with bluescreen error.

Last Friday, Microsoft urged its users to uninstall the latest security updates issued by the company because they are causing the unpleasant bluescreen, also know as  “Blue Screens of Death” or BSoD.

Microsoft released its usual Tuesday Security Updates on August to fix various problems, including privilege escalation vulnerabilities. Unfortunately a font cache clearing issue caused the Windows bluescreen.
Immediately after the release of the security patch, the users with nickname Xformer has published a post on the Microsoft’s support forum titled “Blue Screen (Stop 0x50) after applying update KB2982791 to Windows 7 Home Premium 64 bit“, the member refers of “Stop 0x50 errors,” aka bluescreen after applying any of four updates (KB2982791 KB2970228 KB2975719 or KB2975331).

“Yesterday I ran all the updates of the August patch day. Installation went smoothly. After rebooting everything worked fine. But when I shut down my notebook and switched it on a little later it came up with a blue screen with a Stop 0x50 in Win32k.sys. I could not even boot into safe mode as Windows failed to start no matter which mode chose.” states Xformer.

Microsoft received hundreds of complaints from users that were observing the BlueScreen of Death error, the patch which is causing the OS bluescreen error it coded as MS 14-045. The majority of complaints came from the users running Windows 7 OS with the 64bit version. Unfortunately, one of the nine updates provided in the patch, which fixes three security issues, is responsible for Windows crash.
Once in the bluescreen status, the users have no choice because they must reboot the OS.
Users that update their Windows machine observe a message displayed on the screen that reads:
“Your PC ran into a problem and needs to restart. We’re just collecting some error info and then we’ll restart for you (0% complete).”
Microsoft has removed the download links to the 2982791 security update and published a FAQ for the update and in an official announcement stated:

“Microsoft revised this bulletin to address known issues associated with installation of security update 2982791. Microsoft is investigating behavior associated with the installation of this update, and will update this bulletin when more information becomes available. Microsoft recommends that customers uninstall this update.”

To uninstall this update, please refer the Microsoft Knowledge Base Article 2982791, following the instructions to uninstall the
security fix that is causing the bluescreen error.
bluescreen of-death
“Microsoft is investigating behavior in which systems may crash with a 0x50 Stop error message (bugcheck) after any of the following updates are installed:
  • 2982791 MS14-045: Description of the security update for kernel-mode drivers: August 12, 2014
  • 2970228 Update to support the new currency symbol for the Russian ruble in Windows
  • 2975719 August 2014 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2
  • 2975331 August 2014 update rollup for Windows RT, Windows 8, and Windows Server 2012
This condition may be persistent and may prevent the system from starting correctly.”
Windows users are recommended to uninstall the faulty patch as soon as possible.

Pierluigi Paganini

(Security Affairs – BlueScree error, Microsoft)  

UPDATE from THREAT POST August 8th 2014

MICROSOFT FIXES BROKEN SECURITY PATCH MS14-045



Pierluigi Paganini
Pierluigi Paganini is member of the ENISA (European Union Agency for Network and Information Security) Threat Landscape Stakeholder Group and Cyber G7 Group, he is also a Security Evangelist, Security Analyst and Freelance Writer. Editor-in-Chief at "Cyber Defense Magazine", Pierluigi is a cyber security expert with over 20 years experience in the field, he is Certified Ethical Hacker at EC Council in London. The passion for writing and a strong belief that security is founded on sharing and awareness led Pierluigi to find the security blog "Security Affairs" recently named a Top National Security Resource for US. Pierluigi is a member of the "The Hacker News" team and he is a writer for some major publications in the field such as Cyber War Zone, ICTTF, Infosec Island, Infosec Institute, The Hacker News Magazine and for many other Security magazines. Author of the Books "The Deep Dark Web" and “Digital Virtual Currency and Bitcoin”.





You might also like





  • Sponsored Content

  • PixFuture

  • Digging the Deep Web: Exploring the dark side of the web

    Digging The Deep Web

  • Center for Cyber Security and International Relations Studies

  • Subscribe Security Affairs Newsletter

    newsletter

  • SecurityAffairs awarded as Best European Cybersecurity Tech Blog at European Cybersecurity Blogger Awards

    securityaffairs


More Story

Kaspersky revealed that Stuxnet Exploits is still used worldwide

 Experts at Kaspersky discovered that Stuxnet exploits targeting a Windows Shell Vulnerability is still largely used in cyber...