Secunia SmallBusiness
Overview
Advisories
Research
Forums
Create Profile
Our Commitment
All Threads
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Program updating

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Microsoft
And, this specific program:
Microsoft XML Core Services (MSXML) 4.x

This thread has been marked as locked.
bobevanuk Program updating
Member 27th Aug, 2012 18:14
Ranking: 0
Posts: 4
User Since: 3rd Nov, 2011
System Score: N/A
Location: UK
Flash Player and MS XML Core shown as "updating" . I have tried to update Flash Player, shutting down programs, browsers etc but Flash Player still appears after installing the latest version and rescanning. I admit I did not close down Kasperki Internet Security, should I have done?

I have two PCs both using Windows XP Professional SP3.

The programs update ok on one PC but not on the other.

This problem didn't happen with the previous versions of Secunia so is a fix being worked or are we to continue with this workround, which does not seem to have worked for me on one of my PCs.

Maurice Joyce RE: Program updating
Handling Contributor 27th Aug, 2012 22:08
Score: 10495
Posts: 8,057
User Since: 4th Jan 2009
System Score: 100%
Location: UK
I take it that you have solved the MSXML issue?

What path does PSI give you for the vulnerable Flash file?

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 10 for Windows 7
16GB RAM
Was this reply relevant?
+0
-0
bobevanuk RE: Program updating
Member 28th Aug, 2012 00:08
Score: 0
Posts: 4
User Since: 3rd Nov 2011
System Score: N/A
Location: UK
I did not try to resolve the MSXML problem when the Adobe Flash rectification did not work.

The description in respect of the latter is;

C:\Windows\system32macromed\Flash\32_11_3_300_271. ocx

Installed version:

11.3.300.271(ActivX)
Was this reply relevant?
+0
-0
jonw9 RE: Program updating
Member 28th Aug, 2012 00:11
Score: 0
Posts: 2
User Since: 28th Aug 2012
System Score: N/A
Location: US
I have a similar problem. Secunia wants about six updates to various versions of MSXML and another update to Adobe Flash Player.

I think that Secunia has gone downhill badly. I've enjoyed it for several years, but it no longer works. The old format always worked and was vastly better, These "updating" indicators always fail. They should go back to six months ago and leave a good thing alone!
Was this reply relevant?
+0
-0
MikeWarner RE: Program updating
Member 28th Aug, 2012 06:02
Score: 0
Posts: 3
User Since: 28th Aug 2012
System Score: N/A
Location: US
Last edited on 28th Aug, 2012 06:07
I'm having the same issue as Bobeyvanuk with Adobe Flash Player and MSXML. I'm running PSI v.3.0.0.3001 on a 64-bit Win7 machine. PSI shows my current Flash Player version as 11.3.300.271 and the new version as 11.4.402.265, and my current MSXML version as 4.20.9876.0 and the new version as 4.30.2100.0. PSI shows the path to Flash Player as C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_30 0_271.dll, and the path to MSXML as C:\Windows\SysWOW64\msxml4.dll.
Was this reply relevant?
+0
-0
Maurice Joyce RE: Program updating
Handling Contributor 28th Aug, 2012 09:07
Score: 10495
Posts: 8,057
User Since: 4th Jan 2009
System Score: 100%
Location: UK
Adobe Flash gets itself in a muddle if elements are still running when any update is attempted. It tends to leave behind old vulnerable files.

I would suggest U all use the traditional tried & tested method to quickly clear out the muddle.

UPDATING THE STANDALONE ADOBE FLASH PLAYER

1. Download & SAVE these to desktop.

IE & Other Browsers using ActiveX.

http://fpdownload.adobe.com/get/flashplayer/curren...

& then here, if U have any other type of browser that does not have Flash embedded.

http://fpdownload.adobe.com/get/flashplayer/curren...

2. The installer will appear on the desk top. THE IMPORTANT BIT - Before agreeing to install Flash check these programmes are completely shut down (use the Task Manager if necessary (CTRL+SHIFT+ESC) to COMPLETELY EXIT these processes if running)):
a. All Browsers.
b. Windows Messenger.
c. Microsoft Skype & Plus! For Skype
d. Incredimail.
e. All Adobe Products.
f. PSI - Unless using version 2 or version 3

3. The new install will then remove all old files during the update process.

4. Complete a full PSI rescan & all should be in order.

Optional - Go to Start>Control Panel>click the Flash Player (32 Bit) icon>check the settings are to your requirements.



UPDATING MSXML 4.0

MSXML4 was shipped as an independent, downloadable SDK targeted at Independent Software Vendors and third parties. It is an upgrade for but not a replacement to MSXML3 as version 3 still provides legacy features. Versions 6,4 and 3 may be run concurrently.

MSXML 4.0 SP3 is the most recent version released in March 2009.IT WAS NOT OFFERED BY WINDOWS UPDATE & REQUIRES A MANUAL INSTALL. SP2 support expired in April 2010.

The download link (clearly marked MSXML.MSI - 2.3 MB) is here:
http://www.microsoft.com/downloads/en/details.aspx...

Please note this SP was released before Windows 7 was produced therefore there is no mention of compatibility - it works flawlessly with Windows 7 on both 32 & 64 Bit systems

Now run Windows Update - there are some additional patches for SP3.

Once installed run a full PSI scan & PSI will pick it up as secure with version 4.30.2114.0

Update 2 08:04 28/08/2012

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 10 for Windows 7
16GB RAM
Was this reply relevant?
+6
-0
pengwyn RE: Program updating
Member 28th Aug, 2012 09:44
Score: 5
Posts: 24
User Since: 6th Mar 2009
System Score: N/A
Location: Sacramento, N/A
Last edited on 28th Aug, 2012 09:49
Thanks for the direct links for the adobe updat0rs. I think it's quite an insane joke how flash has been updated over the past decade. Over the years, I have scribbled notes, batch files, special links, control panels and automated update services.

NONE OF THEM SEEM TO WORK PROPERLY

If I was the CEO of Adobe, I would get a giant leather bullwhip and smack the holy **** out of the Flash people.

To make it clear, I am pointing the entire webs anger right at that CEO. The Finger is laid upon his shoulder. If he's worth anything, he'll read this post and fix the problem. There is too much stuff going on in the world right now to be constantly interrupted with a broken half-measure update system.

Secunia has NOTHING to do with the CEO of ADOBE's rotten worthless behavior. If anything these glitches are Adobe's fault 100%, PSI, CSI just TELL you there's an update.

You let me be the CEO of ADOBE for a day and I will make sure the Flash people each get their skull tapped. IF they were not aware, they will be, or they will be fired. OR I would DUMP flash completely. ONE OF THE TWO NEEDS TO HAPPEN RIGHT NOW~!

They better figure it the hell out, and communicate within. This is absolutely insane that the entire freaking web depends on flash for stupid videos, and yet it's updated every few days because of exploit after freaking exploit.

The other thing, the AIR apps. They had a whole thing they nuked, it's left all the AIR programmers spread to the four winds across the web. It's some kind of freaking STORE...?? for developers?? who have to frigging sign in to DOWNLOAD air app binaries that run on workstations published by authors???

I'd have me some webmaster meat for breakfast, and some Flash for lunch, by dinner time, they either better have a plan, or plan to be eaten alive!!!

"Narayen’s leadership, technology insight and operational expertise "

(cough really?!!) expert at ignoring a decade long frigging problem!?

Bless you for posting the details of the Flash update. I especially note the DIRECT link to a path/filename this is a great first step to being on the same page, now adobe just needs to get all it's FLASH on one page, the update, the version check, the op's check, the update check, the whatever bla bla bla ALL AT ONE SPOT. one method, one confirmed, validated, logical way. not a plethora of broken links, tricky checkboxes, an daily exploits. The CEO of ADOBE should be wearing an asbestos heat reflecting suit about now.

Either that or he's a fake deluded CEO in the church of Adobe purposely harming the public..

Don't give me no cruft about flash is a free download.
It ain't free when you have spyware cause you missed a checkbox trying to SECURE your freaking box.

PS: since I love adding stuff... Let me be president (POTUS) for a day, and I will TAKE Flash and it's copyright away from Adobe, make it open source, and give it to the people.



Was this reply relevant?
+0
-0
bobevanuk RE: Program updating
Member 28th Aug, 2012 09:51
Score: 0
Posts: 4
User Since: 3rd Nov 2011
System Score: N/A
Location: UK
I remembered I had uninstalled and reinstalled Secunia on my other PC that is now updating ok.

The other methods having failed, I did the same with the problem PC. Lo and behold!; everything has updated and Secunia is working fine on both PCs: )
Was this reply relevant?
+0
-0
Maurice Joyce RE: Program updating
Handling Contributor 28th Aug, 2012 09:53
Score: 10495
Posts: 8,057
User Since: 4th Jan 2009
System Score: 100%
Location: UK
Good news - have you also fixed MSXML now?

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 10 for Windows 7
16GB RAM
Was this reply relevant?
+0
-0
pengwyn RE: Program updating
Member 28th Aug, 2012 10:12
Score: 5
Posts: 24
User Since: 6th Mar 2009
System Score: N/A
Location: Sacramento, N/A
Last edited on 28th Aug, 2012 10:15
Dear ADOBE CEO, ya think I'm kidding?

The Adobe Flash Player Update Service service entered the stopped state.
The Adobe Flash Player Update Service service was successfully sent a start control.
The Adobe Flash Player Update Service service entered the running state.


flooding my logs..... Flooding.... 1:03A, 2:03, 3:03, 4:03 ...
...12:03, 1:03A

yet.. with all that noise, the updater still fails, still has glitches, still can't work right.
can't ya kill explorer.exe and all processes, update, and bring it back up? Other than the occasional DCOM error (which I am purposely causing) your log entry is the only one making all this noise.

Well that's why I'm making noise, the CEO of ADOBE needs to get his head out of the champagne and coke, and give it the whole nine yards, FIX FLASH RIGHT NOW.

IT Sec.. what a joke.
Tech insight, for creativity, I give ya a 100%, but for security I give you a 0%

He said he has "leadership, technology insight, and operational expertise."

Come on Shantanu, lets see that leadership, lets see some tech insight, and operational expertise! The only thing I am seeing is a photoshop of your car with four flat tires stuck in a ditch! Meanwhile, the glitched patches cause mayhem and chaos on a daily basis.

While I WANT to love you, all I can do is stew.
That's it, I won't say anymore on this.
I said my piece. It's my truth even if you don't see it that way.
Was this reply relevant?
+0
-0
bobevanuk RE: Program updating
Member 28th Aug, 2012 12:59
Score: 0
Posts: 4
User Since: 3rd Nov 2011
System Score: N/A
Location: UK
on 28th Aug, 2012 09:53, Maurice Joyce wrote:
Good news - have you also fixed MSXML now?


Yes MSXML fixed. All working ok.
Was this reply relevant?
+0
-0
Maurice Joyce RE: Program updating
Handling Contributor 28th Aug, 2012 14:43
Score: 10495
Posts: 8,057
User Since: 4th Jan 2009
System Score: 100%
Location: UK
Pleased to see you are now all fixed up.

To protect your mail box from more updates/edits from tag on posts you now have the option to lock this thread or I can do it for you.

Just click the ACCEPT button in the post of the helper who offered U the best solution/advice to solve your problem or request I close it.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 10 for Windows 7
16GB RAM
Was this reply relevant?
+1
-0
jonwells RE: Program updating
Member 28th Aug, 2012 18:24
Score: 0
Posts: 1
User Since: 9th May 2009
System Score: N/A
Location: N/A
Maurice,

Thank you very much. I reloaded Secunia 2.0, and was then able to manually update Adobe Flash. I used your link to update MSMXL, and that one install cleared all five MSMXL updates requested by Secunia. (Under the newest Secunia, trying to update just took me to Windows Updates which had nothing to install.)

Back to 100%.

Jon
Was this reply relevant?
+0
-0
MikeWarner RE: Program updating
Member 29th Aug, 2012 08:12
Score: 0
Posts: 3
User Since: 28th Aug 2012
System Score: N/A
Location: US
Very professionally handled Maurice, thanks :)
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Factsheets
Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability