Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: (MSXML) 6.x - is it really a problem?

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as resolved.
dehawkinz (MSXML) 6.x - is it really a problem?
Member 4th Apr, 2010 15:51
Ranking: -2
Posts: 14
User Since: 3rd Apr, 2010
System Score: N/A
Location: N/A
I have searched the numerous threads on this subject, but it seems that there still remains no clear answer.

I am getting a security warning about msxml6.dll

I am using Windows XP.


Technical details
Technical details about this installation of Microsoft XML Core Services (MSXML) 6.x, you can use this information to determine why the Secunia PSI detected the program and the security state of it.

Version Detected:
6.20.1076.0

Installation Path:
C:\WINDOWS\system32\msxml6.dll

Last Inspection of Program:
4th Apr. 2010, 13:45 CET

System details
Operating System: Windows XP Home Edition
Version: 2002
Service Pack 3


I have run windows updates, but no updates required.

So, O wise ones - is it really a problem, or has PSI just got its self needlessly worried?



Post "RE: (MSXML) 6.x - is it really a problem?" has been selected as an answer.
TiMow RE: (MSXML) 6.x - is it really a problem?
Dedicated Contributor 4th Apr, 2010 17:13
Score: 737
Posts: 728
User Since: 26th Jun 2009
System Score: N/A
Location: CH
For information:

Running XP ProSP3, I am showing the following version (under patched tab):

Microsoft XML Core Services (MSXML) 6.x 6.20.1103.0

Installation Path:
C:\WINDOWS\system32\msxml6.dll

As this version number is different (higher) than that which you have listed, it would suggest that an update may be available.

Ran a fresh PSI scan with no insecurities showing.

Unfortunately, I can find no KB ref. no. - I am only showing these for MSXML 4.0 SP2 (4 entries) in add/remove.

Have you checked for updates directly using M$ update, or download solution link on PSI?

Can offer no further advice - sorry.

TiMow

--
Computing is not yet a perfect science - it still requires humans.
Was this reply relevant?
+0
-0
dehawkinz RE: (MSXML) 6.x - is it really a problem?
Member 4th Apr, 2010 18:04
Score: -2
Posts: 14
User Since: 3rd Apr 2010
System Score: N/A
Location: N/A
Last edited on 4th Apr, 2010 18:32
I ran microsoft updates direct from
http://update.microsoft.com/microsoftupdate/
as advised by psi download link.

It lists no updates available.

However I managed a swings and round-abouts result :)

I did a search and managed to fix it by downloading KB973687 which had the updated version in.
(it now shows under Patched although still with Cat 4 security rating)

However now psi is listing SP3 as being insecure !!
no files mentioned

I re-did updates, and it is now showing SP3 as CAT 2 insecurity - so thats progress I guess :)



Was this reply relevant?
+0
-0
TiMow RE: (MSXML) 6.x - is it really a problem?
Dedicated Contributor 4th Apr, 2010 18:39
Score: 737
Posts: 728
User Since: 26th Jun 2009
System Score: N/A
Location: CH
Glad you've been able to find solution.

If the cat.4 threat rating you're referring to, is what you seeing on the patched page of PSI, then that is the threat you would have if the program wasn't patched.

If you go to the top of the patched page and hover the curser over the blue [?], it will give an explanation.

Re. threat with XP - this appears to be more with XP Home than XP Pro, although both have been effected in the recent past - fortunately I've had no problems with mine.

You may have to search the forum to see what the latest outcome is, unless someone else posts here with further info. If I remember rightly, it also concerns a missing KB update.

TiMow

--
Computing is not yet a perfect science - it still requires humans.
Was this reply relevant?
+0
-0
mogs RE: (MSXML) 6.x - is it really a problem?
Expert Contributor 4th Apr, 2010 19:40
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
http://www.microsoft.com/downloads/details.aspx?Fa...

Not an XP user, but the above link may be of help. Regards





--
Was this reply relevant?
+0
-0
dehawkinz RE: (MSXML) 6.x - is it really a problem?
Member 4th Apr, 2010 20:24
Score: -2
Posts: 14
User Since: 3rd Apr 2010
System Score: N/A
Location: N/A
Last edited on 4th Apr, 2010 23:27
I tried that fix, but still getting SP3 issue.

Well, I guess since the only outstanding issue is that psi is complaining that Service Pack 3 is insecure - and the linked forum thread relates to Windows Movie Maker, which I don't use anyway, I guess this is a case of ignore the warning as not applicable - just a shame I cant add it to an ignore rule.

Since this is now effectively a new issue, I am going to close this thread and continue it in a more appropriate thread.
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer