Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: msxml

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Microsoft
And, this specific program:
Microsoft XML Core Services (MSXML) 4.x

This thread has been marked as locked.
XPS720 msxml
Member 19th May, 2013 09:26
Ranking: 2
Posts: 5
User Since: 26th Oct, 2008
System Score: 97%
Location: UK
I am running Windows Vista Ultimate on a Dell XPS720. Secunia keeps reporting that I have insecure versions of MSXML in two areas.

C:\PROGRAM FILES\ACTIVISION\EMPIRES DAWN OF THE MODERN WORLD\MSXML\4.DLL 4.10.9404.0

C:\WINDOWS\SYSTEM32\MSXML4.DLL 4.20.9876.0

and that the secure version is 4.30.2100.0

I have run the update for MSXML 4.30.2100.0 several times and rebooted and rescanned but Secunia still says the above two are insecure.

--
Geoff Stone

Maurice Joyce RE: msxml
Handling Contributor 19th May, 2013 09:42
Score: 11711
Posts: 8,954
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Geoff,
I thought we had fixed this on your last thread.
It looks to me like you require option 1 of this solution.

MSXML ISSUES

The release note for MSXML 4 are here:
http://download.microsoft.com/download/A/2/D/A2D85...

Please note this SP was released before Windows 7 & 8 was produced therefore there is no mention of compatibility or support once installed - it works flawlessly with Windows 7 on both 32 & 64 Bit systems. I have NOT tested it on my Windows 8 PC because I have no old legacy programmes that require it to be installed.

Firstly, it is important to note the VERSION NUMBER currently installed which PSI gives in the vulnerability report because there are three possible solutions.

Solution 1
If PSI gives a version number starting 4.2 or 4.1 that indicates that the very old MSXML 4 SP2 or even older SP1 is installed which must be MANUALLY upgraded to MSXML 4 SP3 as follows:

Click this link: (please note that the system requirements for this download do state that Windows 7 is supported unlike the release notes)

http://www.microsoft.com/en-us/download/details.as...

Once open activate the clearly marked download link called MSXML.MSI - 2.3 MB.

Once installed run & rerun Windows Update - there are some additional patches for MSXML 4 SP3.

On completion PSI will show MSXML 4 as secure with version 4.30.2117.0. like this:

https://1ncuig.bn1.livefilestore.com/y1p234rvSc7mV...


Solution 2
If PSI reveals the path to be 4.3 that almost certainly indicates that the latest Windows Update patch is not installed correctly. Run a Windows Update scan - if that reveals nothing try a manual update using this link:

http://www.microsoft.com/en-us/download/details.as...

Solution 3

If MSXML 4 SP3 BETA is installed ensure it is fully removed prior to using Solution 1. The Release Notes referred.

Hope this helps.

Revised 22:29 17/05/2013

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
XPS720 RE: msxml
Member 19th May, 2013 10:12
Score: 2
Posts: 5
User Since: 26th Oct 2008
System Score: 97%
Location: UK
Having submiting the thread I just wondered if I had a system problem as I noted that Secunia was also reporting 2 other insecurities which had been updated so I decided to restore my system to an earlier time. Having done so I ran the update for MSXML again and re updated the other 2 insecurity updates. I Rebooted, restarted system and checked the files in the locations then ran a rescan of Secunia.

This time Secunia has reported that all programs are correct and up to date.

Apologies if I have wasted your time. Perhaps in hind sight I should have tried this first but on the other hand it is worth trying all angles by enlisting additional assistance to achieve a resolution.

Many thanks for your input.

Geoff.

--
Geoff Stone
Was this reply relevant?
+0
-0
Maurice Joyce RE: msxml
Handling Contributor 19th May, 2013 10:20
Score: 11711
Posts: 8,954
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Geoff,
You have not wasted my time. Pleased to see that everything is in order for you once again.

Enjoy the weekend.


--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability