windows 7 Multiple KBs for the same issue

[Guest bkis1969]

I am trying to ascertain why there are multiple KBs issued for the same vulnerability on the same architecture (x64).

 

 

For example:

 

MS17-APR: SECURITY UPDATE FOR MICROSOFT GRAPHICS COMPONENT - WINDOWS SERVER 2003 SP2 (ENGLISH) (KB4014652)

MS17-APR: SECURITY UPDATE FOR MICROSOFT GRAPHICS COMPONENT - WINDOWS SERVER 2003 SP2 (ENGLISH) (KB4014794)

MS17-APR: SECURITY UPDATE FOR MICROSOFT GRAPHICS COMPONENT - WINDOWS SERVER 2003 SP2 (ENGLISH) (KB4015195)

MS17-APR: SECURITY UPDATE FOR MICROSOFT GRAPHICS COMPONENT - WINDOWS SERVER 2003 SP2 (ENGLISH) (KB4015380)

MS17-APR: SECURITY UPDATE FOR MICROSOFT GRAPHICS COMPONENT - WINDOWS SERVER 2003 SP2 (ENGLISH) (KB4015383)

 

All of these KBs address the same issue. But within each architecture there are numerous KBs, each with a different size but all with the same release date. When trying to precisely report vulnerabilities across the enterprise duplicate KBs make our reporting nearly unmanageable. We want to remove duplicates but we first want to make sure that items like this are indeed duplicates. Do these KBs address something separate from one another under the same title? This is very confusing, any help would be appreciated. We have tens of thousands of servers with OSs from Svr 2003 to 2012, and Windows 7 on clients.

 

Continue reading...