Microsoft has released security bulletin MS08-040. To view the complete security bulletin, visit one of the following Microsoft Web sites:

• Home users:
  http://www.microsoft.com/protect/computer/updates/bulletins/200807.mspx (http://www.microsoft.com/protect/computer/updates/bulletins/200807.mspx)
  Skip the details Download the updates for a home computer or for a laptop from the Microsoft Update Web site now:
  http://update.microsoft.com/microsoftupdate (http://update.microsoft.com/microsoftupdate/)
• IT professionals:
  http://www.microsoft.com/technet/security/bulletin/MS08-040.mspx (http://www.microsoft.com/technet/security/bulletin/MS08-040.mspx)

How to obtain help and support for this security update

For home users, no-charge support is available by calling 1-866-PCSAFETY in the United States and Canada or by contacting your local Microsoft subsidiary. For more information about how to contact your local Microsoft subsidiary for support issues with security updates, visit the Microsoft International Support Web site: North American customers can also obtain instant access to unlimited no-charge e-mail support or to unlimited individual chat support by visiting the following Microsoft Web site: For enterprise customers, support for security updates is available through your usual support contacts.

Known issues with this security update

• The SQL VSS Writer Service must be enabled before you apply this update. If the SQL VSS Writer Service is currently disabled, you must first enable the service, and then apply the update. After this update is applied successfully, you can disable the SQL VSS Writer Service if you want.
• When you use the Add or Remove Programs item in Control Panel to uninstall this security update, the Windows Internal Database (WYukon) is also removed.
• If the Microsoft SQL Server 2005 installation or the SQL Server 2005 Express Edition installation is an upgrade from an earlier version of SQL Server, you should review the "Known issues with this security update" section in one of the following articles in the Microsoft Knowledge Base:
  948110  (http://kbalertz.com/Feedback.aspx?kbNumber=948110/ ) MS08-040: Description of the security update for SQL Server 2000 GDR and MSDE 2000: July 8, 2008
  948111  (http://kbalertz.com/Feedback.aspx?kbNumber=948111/ ) MS08-040: Description of the security update for SQL Server 2000 QFE and MSDE 2000: July 8, 2008
• You may receive an error message when you try to uninstall this update. For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base:
  955250  (http://kbalertz.com/Feedback.aspx?kbNumber=955250/ ) Error message when you try to uninstall a SQL Server 2005 Express Edition hotfix package: "1731 The source installation package for the product [2] is out of sync with the client package"

File information

The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

For all supported 32-bit editions of SQL Server 2005 Service Pack 2 (SP2)

For all supported Itanium-based editions of SQL Server 2005 SP2

For all supported x64-based editions of SQL Server 2005 SP2

For all supported x86 and x64 editions of Windows Internal Database (WYukon)