Wednesday, December 19th 2012

AMD to Get Rid of Catalyst Auto-Update Feature in 2013, Cites Security Concerns

It looks like somebody found a security vulnerability in the auto-update feature of AMD Catalyst Control Center (CCC), which notifies you of updates to Catalyst system software and directs you to the download page. AMD announced that it plans to discontinue the feature starting in 2013, and recommends that you get your driver updates the old-fashioned way: by keeping up with the news and getting your drivers from the internet. Due to the severity of the exploit, AMD recommended users to disable auto-updates in their current CCC configuration, or click on "skip" whenever it prompts you to update drivers. AMD stated:
AMD will be removing the auto-update notification functionality from versions of AMD Catalyst Control Center running under Windows Vista, Windows 7 and Windows 8, beginning in early 2013. Due to a minor security vulnerability in the auto-update notification, users are recommended to update to the latest AMD Catalyst driver release from the amd.com web site. Alternatively, users should (i) uncheck the "Automatically check for updates" option under AMD Catalyst Control Center > Information > Software Update, and (ii) choose to "Skip" notifications from the AMD Catalyst driver, which notifications recommend updating to the latest driver.
Add your own comment

33 Comments on AMD to Get Rid of Catalyst Auto-Update Feature in 2013, Cites Security Concerns

#1
lZKoce
Awesome, I hope nVidia will follow with the nVidia Update feature. I never install it, when doing Custom installation anyway. I just don't see the point of it.
Posted on Reply
#2
zsolt_93
I never install it either... But it installs itself somtimes even if you deselect it.. i'm talking about the nvidia one here.
Posted on Reply
#3
RejZoR
I'd like an antivirus style incrimental update. Why always download 180MB big package if only fraction of the data has actually changed.
Posted on Reply
#4
aayman_farzand
"minor security vulnerability" and they are removing the feature entirely instead of fixing it? Smart.

I don't use auto-update for my cards, but sometimes I see SLI profiles being installed automatically, good convenience to have.
Posted on Reply
#5
Protagonist
by: lZKoce
Awesome, I hope nVidia will follow with the nVidia Update feature. I never install it, when doing Custom installation anyway. I just don't see the point of it.
Just what i wanted to say :toast:
Posted on Reply
#6
Protagonist
by: zsolt_93
I never install it either... But it installs itself somtimes even if you deselect it.. i'm talking about the nvidia one here.
Happens with Express Install.

I always use Custom Installation, which allows removal of what you don't want installed, plus if by some chance it persists and installs just go to add remove program and uninstall it.
Posted on Reply
#7
hardcore_gamer
by: zsolt_93
I never install it either... But it installs itself somtimes even if you deselect it.. i'm talking about the nvidia one here.
I blocked the nvidia driver using firewall. Problem solved.:cool:
Posted on Reply
#8
renz496
vote for the notification only.
Posted on Reply
#9
HossHuge
by: renz496
vote for the notification only.
I do the same with all my programs
Posted on Reply
#10
WhiteLotus
Damn. Now I'm going to have to be less lazy and actually go after updates myself. I liked being pleasantly surprised every now and then when it said I could update my drivers.
Posted on Reply
#11
TheMailMan78
Big Member
by: lZKoce
Awesome, I hope nVidia will follow with the nVidia Update feature. I never install it, when doing Custom installation anyway. I just don't see the point of it.
Nvidia update just lets you know there is an update avalible. It doesnt auto install anything. Don't know what the big deal is as you still have to manually install the driver. All the update does it throw up a little flag in the corner and say "Hey there is an update on the website for yo sh1t dawg!".

AMD update is all like "ALL YOUR BASE ARE BELONG TO US" and bombs your rig with trojans.
Posted on Reply
#12
RejZoR
Well, i only got a notification with AMD Catalyst as well. It dodn't install anything by itself.
Posted on Reply
#13
newtekie1
Semi-Retired Folder
Both only alert you there is a driver update, they do not automatically install anything.

My guess is that the vulnerability in AMDs system allows someone to make the system alert the user there is an update and points them to a fraudulent site to download the "update" but that "update" could be anything, likely a virus.
Posted on Reply
#14
manofthem
I usually know theres an update by someone posting it here, whether a news post or a user post. Occasionally I'll check myself on AMD's site.
Posted on Reply
#15
lyndonguitar
I play games
Nahh, I don't use the feature anyway, If anything, it just bothers me. I update when I want to update.
Posted on Reply
#16
esrever
by: TheMailMan78
Nvidia update just lets you know there is an update avalible. It doesnt auto install anything. Don't know what the big deal is as you still have to manually install the driver. All the update does it throw up a little flag in the corner and say "Hey there is an update on the website for yo sh1t dawg!".

AMD update is all like "ALL YOUR BASE ARE BELONG TO US" and bombs your rig with trojans.
Can't tell if just stupid or didn't read the article and has never owned an AMD card.
Posted on Reply
#17
TheMailMan78
Big Member
by: esrever
Can't tell if just stupid or didn't read the article and has never owned an AMD card.
Never installed a driver that gave me a virus unlike you I assume.
Posted on Reply
#18
Ravenas
by: TheMailMan78
Never installed a driver that gave me a virus unlike you I assume.
I'm sorry but your post made no sense. Apparently you have never installed Catalyst Suite software?
Posted on Reply
#19
TheMailMan78
Big Member
by: Ravenas
I'm sorry but your post made no sense. Apparently you have never installed Catalyst Suite software?
Tons of times. Thats why I went NVIDIA.
Posted on Reply
#20
Ravenas
by: TheMailMan78
Tons of times. Thats why I went NVIDIA.
No wonder you came trolling this thread with a OP that made no sense.
Posted on Reply
#21
TheMailMan78
Big Member
by: Ravenas
No wonder you came trolling this thread with a OP that made no sense.
You shouldn't call people names.
Posted on Reply
#22
95Viper
Just like the rest of my software/apps/OS... I will handle update tasks myself.
Exception is A/V & malware definitions, I will let them check and notify, but I decide to install.

Off topic:

Think of TheMailMan78 when I hear this...

Youtube: C6up076lSH8
Posted on Reply
#23
H82LUZ73
I have never used the auto update thing myself...it made as much sense as the STEAM Auto Driver update a few years back,By the time it had any drivers too update you already went to AMD games site to download them.

As for Mailman using AMD ,I can vouch for him .....And he is our Whipping Post ;) (you new guys should clue in to his handle BANSTICK DUMMY,He earned it for a reason)He just Rustles your Jimmies,But has knowledge and experience So respect him.
Posted on Reply
#24
INSTG8R
Not ever used it. I don't let anything "Auto Update" outside of Java and Flash and even then I still end up checking manually for updates before they ever let me know. But on the off chance I do let them slide it will eventually wake me up to an update.
Posted on Reply
#25
Ravenas
I recall numerous times I have gotten Windows asking me to update my AMD drivers through Windows Update.
Posted on Reply
Add your own comment