Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Sudden reports of 10 insecure MS programs - MS Update won't work

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
Miriam J Sudden reports of 10 insecure MS programs - MS Update won't work
Member 19th Aug, 2011 21:06
Ranking: -1
Posts: 16
User Since: 31st Mar, 2009
System Score: N/A
Location: Philadelphia PA, US
Yesterday, PSI reported 100% ok. Now, it's reporting 10 insecure MS programs. When I try MS Update, it won't work, returning an error: Server Error403 - Forbidden: Access is denied.
You do not have permission to view this directory or page using the credentials that you supplied.

I definitely have a legal version of Windows XP Media, with SP 3 installed.

The automatic updates haven't been working for a long time. Why are these programs suddenly being reported when they haven't been before?

And, what to do when the MS Update page won't allow me to update?

I can't manually download patches either, since the MS site doesn't approve me. It always checks to see if I have the current update software, then it gives an error message that basically doesn't permit me to go any further manually or automatically.

mogs RE: Sudden reports of 10 insecure MS programs - MS Update won't work
Expert Contributor 19th Aug, 2011 22:26
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
@Miriam J

I'm not as familiar with XP as other members on the forum...but have found the following info which may be of help :-http://support.microsoft.com/ph/7024/en-id
Technical Support for Windows XP Media Center Edition
Because Windows XP Media Center Edition was included with your hardware device or with your system, the hardware manufacturer provides technical support and assistance for this software. Your computer manufacturer may have customized the installation with unique components, such as specific device drivers and optional settings to maximize performance on its hardware. If you want technical help with Windows XP Media Center Edition, contact your manufacturer directly. The manufacturer is best-qualified to support the software that it preinstalled on its hardware products.

For product information about Microsoft Windows XP Media Center Edition 2005, visit the following Microsoft Web site:

http://www.microsoft.com/windowsxp/mediacenter/def...

How-to Articles
How to determine the version of Media Center Edition that you are running
After you install or upgrade to Microsoft Windows XP Media Center Edition 2005, you may be unable to determine which version of Media Center Edition you are running. This article describes how to determine the version of Media Center Edition that you are running.


The other thing that might be worth checking....if you havn't already....is that your version of MS Update is current, as described here :-
Software Requirements
The latest version of Microsoft Update. You can determine whether or not you are running the latest version by visiting

update.microsoft.com

with Microsoft Internet Explorer, while logged in as the Administrator. If you are able to check your system for missing updates through this tool, your system should function properly with the Secunia PSI.

Sorry I can't be of more help.........regards,

--
Was this reply relevant?
+1
-2
Maurice Joyce RE: Sudden reports of 10 insecure MS programs - MS Update won't work
Handling Contributor 19th Aug, 2011 22:26
Score: 11743
Posts: 8,999
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 19th Aug, 2011 22:33
If U are not updating Windows then PSI may well pick up files that are vulnerable.

U need to follow this script to get Winndows Update running.

http://support.microsoft.com/kb/245142

Edit:
@Mogs - our posts crossed. Not sure I understand yours - Windows XP Media Edition was produced by Microsoft & has its own licence. It is one of many variants produce by MS.

Nothing to do with OEM or hardware.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
puget1 RE: Sudden reports of 10 insecure MS programs - MS Update won't work
Member 19th Aug, 2011 22:35
Score: 0
Posts: 551
User Since: 21st Dec 2007
System Score: N/A
Location: US
@Miriam J

Can you re-verify that you are the system administrator: to find this program in Windows Explorer, right-click and select "properties", then open the Security tab and check that both yourself and the System user are allowed "Full Control".

Rather than using PSI as the updater use "Window Update" with in your Start Menu.

Check with hidden updates within Windows update options and restore if this is the problem.

--
Windows Home Basic-Service Pack 2
Dell AMD Athlon 64x2 Processor 4000+ 2.10Ghz 2Memory 32 Bit

Firefox 27+ - MS Security Essentials+Spybot-Spyware Blaster-Malwarebytes-Emsisoft Malware- Sandboxie

IE 9-seldom












Was this reply relevant?
+0
-0
Miriam J RE: Sudden reports of 10 insecure MS programs - MS Update won't work
Member 20th Aug, 2011 00:07
Score: -1
Posts: 16
User Since: 31st Mar 2009
System Score: N/A
Location: Philadelphia PA, US
I am the System Administrator. After fishing around among MS Support pages, I did run msinfo32.exe and it reports that my Windows XP is "Professional".

I will work my way through the suggestions at http://support.microsoft.com/kb/245142. First, I'll wait so that I'm not doing it in a tired, anxious frame of mind, else I'll cause more problems.
Was this reply relevant?
+0
-0
Miriam J RE: Sudden reports of 10 insecure MS programs - MS Update won't work
Member 20th Aug, 2011 00:20
Score: -1
Posts: 16
User Since: 31st Mar 2009
System Score: N/A
Location: Philadelphia PA, US
P.S. while msinfo32.exe reports XP Pro, checking Properties of My Computer says Media Center Edition.

The Windows Explorer, "properties", does not have a Security tab . From Control Panel, the Security Center also doesn't identify an Administer or have a selection for full control; you may be thinking of Vista.

Every time I've tried to use the Security Center "check for the latest updates from Windows Update", this is the result:

THE WEBSITE HAS ENCOUNTERED A PROBLEM AND CANNOT DISPLAY THE PAGE YOU ARE TRYING TO VIEW. THE OPTIONS PROVIDED BELOW MIGHT HELP YOU SOLVE THE PROBLEM.
FOR SELF-HELP OPTIONS:
FREQUENTLY ASKED QUESTIONS
FIND SOLUTIONS
WINDOWS UPDATE NEWSGROUP
FOR ASSISTED SUPPORT OPTIONS:
MICROSOFT ONLINE ASSISTED SUPPORT (NO-COST FOR WINDOWS UPDATE ISSUES)

That's why I've been giving up on the updates. When I have called for support, it's taken a day or more or working with the "tech support" helpers, and often has bollixed my system.

I do, of course, have antivirus and firewall protection. And PSI. This is the first time PSI has reported the Windows programs insecure, although I'm sure they have been for quite some time. Some of the reported insecure programs don't even show up in my Add/Remove program list.
Was this reply relevant?
+0
-0
Maurice Joyce RE: Sudden reports of 10 insecure MS programs - MS Update won't work
Handling Contributor 20th Aug, 2011 02:07
Score: 11743
Posts: 8,999
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 20th Aug, 2011 02:25
To find out what account U are running go to Start>Control Panel>User Accounts>Change User Accounts - the current set up will be there.

While U are working your way through the MS help I gave U could U please select one of the vulnerabilities PSI has given U & publish the troubleshoot report as follows:


FINDING A FILE PATH

From the DASHBOARD page click on SCAN RESULTS.

1. This will list all your programmes with a + to the left of each one.
2. Click the + sign next to the item that U want help with.
3. This will reveal the path under DETECTED INSTANCES.
4. Highlight it then copy (CTRL+C) then paste (CTRL+V)) that path back to the Forum.
OR THIS METHOD WHICH GIVES A HELPER MORE INFORMATION
4a Below DETECTED INSTANCES you will see You can double click this row for additional information & options>double click it>a box will appear>click TROUBLESHOOT REPORT>Now highlight the information revealed from START to END & copy it (CTRL+C) then post it to the Forum (CTRL+V)

The end result U post to the Forum should look like this:
---START---

Program Name:
Apple iTunes 10.x

Security State:
Insecure

Download Link:
http://appldnld.apple.com/iTunes10/061-9638.201103...

Instances Found:
C:\Program Files\iTunes\iTunes.exe, version: 10.1.2.17

Last System Scan (localtime):
3. Mar 2011, 16:47

Operating System:
Microsoft Windows XP Home Edition, Service Pack 3

---END---
Update 9 09:33 13/03/2011

EDIT: Late here so off to bed. U might also like to give this a whirl: http://support.microsoft.com/mats/windows_update/e...
Have just tested it on my XP PC - works like a charm




--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
Miriam J RE: Sudden reports of 10 insecure MS programs - MS Update won't work
Member 20th Aug, 2011 04:05
Score: -1
Posts: 16
User Since: 31st Mar 2009
System Score: N/A
Location: Philadelphia PA, US
Following Mauraice's instructions, the troubleshoot report says:
TroubleShoot Report:
---START---

Program Name:
Microsoft Windows Messenger 4.x

Security State:
Insecure

Download Link:
http://update.microsoft.com/microsoftupdate/

Missing Microsoft Patches (KB numbers):
KB2508272

Instances Found:
C:\Program Files\Messenger\msmsgs.exe, version: 4.7.0.3001

Last System Scan (localtime):
19. Aug 2011, 14:04

Operating System:
Microsoft Windows XP Professional, Service Pack 3

---END---


No download link is included for the program. The KB link is
http://support.microsoft.com/kb/2508272
Article ID: 2508272 - Last Review: April 12, 2011 - Revision: 1.0
MS11-027: Cumulative security update for ActiveX kill bits: April 12, 2011

I am now [10:04PM EDT] running MicrosoftFixit.wu.Run.exe

Will post results, and welcome comments on the troubleshoot report.
Was this reply relevant?
+0
-0
Miriam J RE: Sudden reports of 10 insecure MS programs - MS Update won't work
Member 20th Aug, 2011 04:20
Score: -1
Posts: 16
User Since: 31st Mar 2009
System Score: N/A
Location: Philadelphia PA, US
Well, MicrosoftFixit.wu.Run.exe didn't fix the problem. The Troubleshootoing Report lists several issues found/fixed - but I couldn't copy report;
next step: try the task that was causing the problem - went to security center, check for Windows Updates;
[svchost error - debug;]
Get the latest Windows Update software. - OK try;
Windows Update is downloading and installing the updated software:
result was SAME OLD PROBLEM:
The website has encountered a problem and cannot display the page you are trying to view. The options provided below might help you solve the problem.

Good Night, for now.
Was this reply relevant?
+0
-0
Maurice Joyce RE: Sudden reports of 10 insecure MS programs - MS Update won't work
Handling Contributor 20th Aug, 2011 08:54
Score: 11743
Posts: 8,999
User Since: 4th Jan 2009
System Score: N/A
Location: UK
U have got a problem!

Try to install the vulnerability from here:

http://support.microsoft.com/kb/2508272

Select the download/install link named FOR WINDOWS XP SERVICE PACK 3

Does that work?

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
Miriam J RE: Sudden reports of 10 insecure MS programs - MS Update won't work
Member 20th Aug, 2011 16:50
Score: -1
Posts: 16
User Since: 31st Mar 2009
System Score: N/A
Location: Philadelphia PA, US
You mean "Try to install the vulnerability FIX from here:", don't you?
Was this reply relevant?
+0
-1
Maurice Joyce RE: Sudden reports of 10 insecure MS programs - MS Update won't work
Handling Contributor 20th Aug, 2011 18:55
Score: 11743
Posts: 8,999
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Sorry - yes - use that link for a possible fix.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability