|
|
Forum Thread: No updates available.
You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.
This thread was submitted in the following forum:
Problems and Questions Regarding 3rd Party Programs
| straddarts
| No updates available.
|
|
|
by straddarts on 26th Nov, 2008 02:07
|
Posts: 1
User Since: 26th Nov, 2008
Secunia System Score: N/A
Location: N/A |
Sirs:
I have tried repeatedly to update the Microsoft XML Core Services (MSXML) 6.x. The website says there is no update for this file. |
|
|
| TLis01
| RE: No updates available.
|
|
|
by TLis01 on 26th Nov, 2008 09:52
|
Posts: 5
User Since: 26th Nov, 2008
Secunia System Score: N/A
Location: N/A |
Sometimes it is a particular software having the msxml6.dll library insecure in its folder. PSI detects such a library as insecure even though the library version in Windows folder is secure enough ... I am not sure, though, if you can just replace the library or even delete the library from the reported folder, relying on Windows to find the library in Windows folder |
|
|
| webweweave
| RE: No updates available.
|
|
|
by webweweave on 26th Nov, 2008 19:02
|
Posts: 2
User Since: 20th Nov, 2008
Secunia System Score: N/A
Location: N/A |
I also received a warning from PSI that my XML software is insecure and recommending MSXML 6.0 be downloaded from microsoft. But I've checked this out and Microsoft does not indicate that MSXML 6.0 system requirements include VISTA. To the contrary (or at least given the usual obfuscatory information so typical of Microsoft information), it MIGHT be the case that XML 6.0 is for non-Vista versions of Windows, including several server versions and XP -- but again, NOT Vista.
Could anyone else confirm this?
Steve (webweweave) |
|
|
| antipodes
| RE: No updates available.
|
|
|
by antipodes on 26th Nov, 2008 22:22
|
Posts: 4
User Since: 22nd Oct, 2008
Secunia System Score: N/A
Location: N/A |
Windows automatic updates installed msmxl 4 service pack 2(KB954430) but I also have msxml 6 installed in the windows system32 folder however when I try to download the update manually I receive advice that the download does not apply to my system. I was advised by Mr Jeppson to run the scan again but the result was the same.
I am a computer illiterate but from what I have been able to glean from the microsoft bulletins msmxl 6 is not all that relevant if you have another msxl version installed (see MS08-069) |
|
|
| TLis01
| RE: No updates available.
|
|
|
by TLis01 on 26th Nov, 2008 22:22, last edited on 26th Nov, 2008 22:22
|
Posts: 5
User Since: 26th Nov, 2008
Secunia System Score: N/A
Location: N/A |
> it MIGHT be the case that XML 6.0 is for non-Vista versions of Windows, including several server versions and XP -- but again, NOT Vista.
> Could anyone else confirm this?
Not necessarily. I would rather think that Windows Update sees the latest DLL in Windows system folder, so it does not report it as a candidate for an update. Unfortunately, various applications can have their own copies of this library in their own folders, as by default the application searches its own folder first when looking for a given DLL. Windows Update, of course, does not care about these redundant copies of the DLL. In fact, the application's installer could see, if the library is available in Windows folder and then not install its own copy, but many installers don't do this ... |
|
|
| BigDave_39
| RE: No updates available.
|
|
|
by BigDave_39 on 26th Nov, 2008 22:31
|
Posts: 175
User Since: 26th Nov, 2008
Secunia System Score: N/A
Location: Washington, DC, US |
on 26th Nov, 2008 22:22, TLis01 wrote:
Not necessarily. I would rather think that Windows Update sees the latest DLL in Windows system folder, so it does not report it as a candidate for an update. Unfortunately, various applications can have their own copies of this library in their own folders, as by default the application searches its own folder first when looking for a given DLL. Windows Update, of course, does not care about these redundant copies of the DLL. In fact, the application's installer could see, if the library is available in Windows folder and then not install its own copy, but many installers don't do this ...
Agreed, the best way to troubleshoot this issue is to know the path of where the PSI discovered this DLL file. Can you get that for us?
--
Big Dave |
|
|
| TLis01
| RE: No updates available.
|
|
|
by TLis01 on 26th Nov, 2008 22:46
|
Posts: 5
User Since: 26th Nov, 2008
Secunia System Score: N/A
Location: N/A |
on 26th Nov, 2008 22:31, BigDave_39 wrote:
Agreed, the best way to troubleshoot this issue is to know the path of where the PSI discovered this DLL file. Can you get that for us?
In my case, this library was found in the installation folder of PerfectDisk 2008 by Raxco, and in the windows\system32 folder, but not in the current Windows installation, but on the Dell recovery partition (I should probably hide it from the current OS!).
As you can see, these locations were not within the current Windows installation, but elsewhere ... |
|
|
| antipodes
| RE: No updates available.
|
|
|
by antipodes on 26th Nov, 2008 23:37
|
Posts: 4
User Since: 22nd Oct, 2008
Secunia System Score: N/A
Location: N/A |
further to my previous reply I have spoken with a microsoft technician
who advised that this security alert in my case can be ignored and that msxml6 was used to manage internet explorer and did not require updating.His words were "trust Windows automatic updates"
Hope this helps |
|
|
| TLis01
| RE: No updates available.
|
|
|
by TLis01 on 27th Nov, 2008 08:55, last edited on 27th Nov, 2008 08:55
|
Posts: 5
User Since: 26th Nov, 2008
Secunia System Score: N/A
Location: N/A |
on 26th Nov, 2008 23:37, antipodes wrote:
further to my previous reply I have spoken with a microsoft technician
who advised that this security alert in my case can be ignored and that msxml6 was used to manage internet explorer and did not require updating.His words were "trust Windows automatic updates"
Hope this helps
I would not rather trust such statements from any vendor's representative, not only Microsoft's :-)
But to be honest, in my case it turned out to be true too, as Raxco responded that the occurence of an insecure version of this library was stored on my disk as a result of running a web-downloaded executable, which first unzipped ALL installation files to disk. This library would be used only if PerfectDisk would have to cooperate with Microsoft Exchange. As I don't have it installed, it is just an inactive file and can be safely deleted. Any future update should bring the latest version of this library.
What isn't true is the Microsoft technician's statement that "Windows automatic updates" will take care of such outdated library in a third-party application's installation. It is the application's vendor responsibility ...
I have got a worse case. My Dell notebook is equipped with Media Direct installation, which uses an insecure version of PowerPoint 2003 Viewer. It is detected as insecure, but on my system this application is not installed separately, but as a part of Media Direct. Therefore, when I try to update it using a downloaded update file from Microsoft, it says, that nothing has been found to update. Of course, as I have the entire Microsoft Office 2007 installed on my system, which is up-to-date. Unfortunately, by default the .ppt files are linked to this PowerPoint 2003 Viewer instead of the 2007 version. I had to change this assignment ... How difficult it is to get rid of the entire MediaDirect feature, you can read some stories on the web ... ;-) |
|
|
| txwizard
| RE: No updates available.
|
|
|
by txwizard on 2nd Dec, 2008 05:56
|
Posts: 2
User Since: 2nd Dec, 2008
Secunia System Score: N/A
Location: N/A |
From time to time, Microsoft publishes security bulletins that cover components that may be installed by other applications, such as, for example, Paint Shop Pro, Corel Draw, WinZip, or even some of their own products, such as Microsoft Visual Studio 6.
When they do so, the security bulletin warns that there may be copies of the relevant file(s) installed on your system that are not covered by the Microsoft updates. The bulletins always recommend that you contact your vendor for an update.
For instance, I was recently notified of such an update for my licensed copy of WinZip, which contained an insecure version of GDI+, which Microsoft had patched a few months earlier. After reviewing further information on the WinZip Web site, I determined that the simplest thing for me to do was delete the affected file, even though my installation would never have actually used it.
I arrived at this thread because a copy of MSXML Core Services was installed into my copy of Visual Studio 6, which is end of life. After comparing the version information on that copy, which is part of a directory that is used to construct new Visual Basic 6 applications, with the production copy installed in my Windows directory, I decided that I could safely copy the newer DLL from my Windows directory. |
|
|
| TLis01
| RE: No updates available.
|
|
|
by TLis01 on 2nd Dec, 2008 09:05
|
Posts: 5
User Since: 26th Nov, 2008
Secunia System Score: N/A
Location: N/A |
True, sometimes this is present in Microsoft's bulletins, but not everyone gets them, right? Moreover, when the vendor does not publish a patch, replacing a file with a newer version should be always done with caution, as the backwards compatibility cannot be always guaranteed. Be sure to keep a copy of the original DLL in a safe place until you test the vulnerable application on some less important data ... |
|
|
| dlsm5c
| RE: No updates available.
|
|
|
by dlsm5c on 3rd Dec, 2008 00:33, last edited on 3rd Dec, 2008 00:33
|
Posts: 1
User Since: 2nd Dec, 2008
Secunia System Score: N/A
Location: N/A |
Ok guys and girls I not that computer literate to begin with. PSI is saqying that my MSXML 6.x version 6.10.1129.0 is insure also and I found the same as above on the thread. I don't know where to look for these things. Also I too have PowerPoint viewer 2003 which PSI says that its insecure which I did a update download and rescan and PSI still says it is insecure. Plus I had two things from Adobe. I recently updated from Adobe 8 to Adobe 9. When 9 was installed I guess AdobeAir 1.x version 1.0.8.4990 came with it. Anyway PSI said both were insecure. So I did a update on the AdobeAir first. When it was done the Adobe 9 went off thew PSI insecure list but the AdobeAir still showed insecure. Yes I typed that right. I updated the AdobeAir first and the Adobe 9 went off the list of insecure. So I updated the AdobeAir two more times and it still shows insecure. No I don't know where to look for what path. Pertaining to Windows updates: I've had this computer for almost two yrs. Windows Vista the auto update was on and doing updates the only thing that I did download from the net, everything was fine until about two months ago when I did a Windows update everything went south. My graphics card, resolution on the screen, among other things quit working right. I called a tech not from windows but from where I got the computer, Circuit city, He told how to find the restore points and to go back to the date before all the trouble. Well the only updates that was on the list was the one the one when everything messed up. He then told me I would have to Restore which I don't want to do unless I HAVE TO. He also told me that he has his auto update turned off. But I thought that would'nt be a good idea. But happening lead to PSI, Driver Detective, and RegCure, Hopeing that I could fix rather restore. If anybody has any suggestions on how to cure, find, fix, repair, or even restore I would greatly appreciate it. Thank you |
|
|
| andyrich
| RE: No updates available.
|
|
|
by andyrich on 7th Dec, 2008 21:28
|
Posts: 1
User Since: 7th Dec, 2008
Secunia System Score: N/A
Location: N/A |
i think the only way around this is to reinstall windows again
as there are no updates for this problem and watch what we download
|
|
|
| Patrick.B
| RE: No updates available.
|
|
|
by Patrick.B on 8th Dec, 2008 03:58
|
Posts: 11
User Since: 8th Dec, 2008
Secunia System Score: N/A
Location: N/A |
This appears to be a false positive by PSI for MSXML6.dll on Vista computers. I can find no update to my MSXML6.dll v6.20.1099.0 by searching for [msxml] in Microsoft Downloads. I tried a couple and was told they did not apply to my system. Others are for Windows XP, not Vista.
Of course, Vista Windows Update finds no update.
The path is the only one that it should be:
"[Drive letter]:\WINDOWS\system32"
Other than this unacknowledged issue, I have found PSI to be great and have recommended it to several friends.
Patrick B.
|
|
|
| DonChamp
| RE: No updates available.
|
|
|
by DonChamp on 8th Dec, 2008 18:22
|
Posts: 2
User Since: 31st Mar, 2008
Secunia System Score: N/A
Location: N/A |
I have no complicating factors as other outdated programs and am using WinXP with all updates. I get the same hassle in all areas on MSXML6. I was not even able to delete it from the noted folder!
There must be some circular argument here. MS offers no upgrade or update, as noted by others.
In my Add/Remove Programs in Control Panel MSXML is not even listed as something to take out. Further, there are two MSXML dll files for version 8!
This is really confusing.
Regards
Don Champ
|
|
|
| turbobent
| RE: No updates available.
|
|
|
by turbobent on 8th Dec, 2008 19:04, last edited on 8th Dec, 2008 19:04
|
Posts: 10
User Since: 7th Dec, 2008
Secunia System Score: N/A
Location: N/A |
I have had the same message.
But as you write : no updates.
The strange thing is that Secunia " claims " the path
to be d:\windows\system32\msxml6.dll, !!!!!! but that is wrong.
the path is c:\windows\system32\msxml6.dll
So Secunia are reading my pc in a wrong way |
|
|
| Hendrik91
| RE: No updates available.
|
|
|
by Hendrik91 on 9th Dec, 2008 01:43
|
Posts: 16
User Since: 25th Sep, 2008
Secunia System Score: 100%
Location: DE |
Sometimes the file can also be on a CD/DVD, for example a installation CD for a program which uses that files. If that is true, PSI detects the program on the CD/DVD/USB-Device or whatever and, if it is not the latest version, shows it as insecure. Simpliy add it to the exceptions then. |
|
|
| oly2c
| RE: No updates available.
|
|
|
by oly2c on 11th Dec, 2008 14:44
|
Posts: 6
User Since: 26th Nov, 2008
Secunia System Score: N/A
Location: N/A |
Secunia detects an unpatched version of msxml6.dll in my Recovery partition. The main OS is up to date.
Is there any security risk from an as yet unused partition or should I set Secunia to ignore this program. If I do that will it ignore the correct version in Vista when checking future updates? It is an integral part of Vista so presumably Windows Updates will take care of future patches. Only version 4 shows in Control Panel and Belarc. |
|
|
| Patrick.B
| RE: No updates available.
|
|
|
by Patrick.B on 13th Dec, 2008 19:27
|
Posts: 11
User Since: 8th Dec, 2008
Secunia System Score: N/A
Location: N/A |
@oly2c
>> Secunia detects an unpatched version of msxml6.dll in my Recovery partition. The main OS is up to date. Is there any security risk from an as yet unused partition or should I set Secunia to ignore this program.
Ignore it. It is benign as long as you do not perform a recovery operation that would bring the old version back to be used again.
>> If I do that will it ignore the correct version in Vista when checking future updates?
No. The current version in Vista will still be checked. PSI only ignore the specific location that you choose to ignore.
-- Patrick B.
|
|
|
| oly2c
| RE: No updates available.
|
|
|
by oly2c on 13th Dec, 2008 21:30
|
Posts: 6
User Since: 26th Nov, 2008
Secunia System Score: N/A
Location: N/A |
Thanks Patrick. Better safe than sorry. |
|
|
| thesun
| RE: No updates available.
|
|
|
by thesun on 14th Dec, 2008 04:38
|
Posts: 2
User Since: 9th Dec, 2008
Secunia System Score: N/A
Location: N/A |
i think this problem is only with vista and secunia does not differnciate between xp and vista yet for system components. my vista came with the laptop and i dont think the xml thing is in vista at all |
|
|
| oly2c
| RE: No updates available.
|
|
|
by oly2c on 14th Dec, 2008 13:17
|
Posts: 6
User Since: 26th Nov, 2008
Secunia System Score: N/A
Location: N/A |
on 14th Dec, 2008 04:38, thesun wrote:
i think this problem is only with vista and secunia does not differnciate between xp and vista yet for system components. my vista came with the laptop and i dont think the xml thing is in vista at all
I understand that MSXML6 is included in Vista by default.
Have a look in windows/system32.
|
|
|
| kd4pdy
| RE: No updates available.
|
|
|
by kd4pdy on 16th Dec, 2008 09:49, last edited on 16th Dec, 2008 09:49
|
Posts: 1
User Since: 11th Jan, 2008
Secunia System Score: N/A
Location: Somewhere just East of the middle of nowhere, US |
on 26th Nov, 2008 22:46, TLis01 wrote:
In my case, this library was found in the installation folder of PerfectDisk 2008 by Raxco, and in the windows\system32 folder, but not in the current Windows installation, but on the Dell recovery partition (I should probably hide it from the current OS!).
As you can see, these locations were not within the current Windows installation, but elsewhere ...
I to had a 100% score before installing PerfectDisk 2008. I got two hits on the last scan. One is the x86 install and the other is the x64 install.
File locations returned from Secunia PSI:
c:\Program Files\Raxco\PerfectDisk2008Install\x86\program files\Raxco\PerfectDisk2008\msxml6.dll
c:\Program Files\Raxco\PerfectDisk2008Install\x64\Program Files 64\Raxco\PerfectDisk2008\msxml6.dll
I deleted the C:\Program Files\Raxco\PerfectDisk2008Install folder, did another scan and got another 100% secure score. After program is installed PerfectDisk still runs with out this folder
Jim
--
- - -
"No trees were killed in the sending of this message.
However, a large number of electrons were terribly inconvenienced". |
|
|
| Cocio21
| RE: No updates available.
|
|
|
by Cocio21 on 26th Dec, 2008 17:09, last edited on 26th Dec, 2008 17:09
|
Posts: 1
User Since: 26th Dec, 2008
Secunia System Score: N/A
Location: N/A |
on 16th Dec, 2008 09:49, kd4pdy wrote:
I to had a 100% score before installing PerfectDisk 2008. I got two hits on the last scan. One is the x86 install and the other is the x64 install.
File locations returned from Secunia PSI:
c:\Program Files\Raxco\PerfectDisk2008Install\x86\program files\Raxco\PerfectDisk2008\msxml6.dll
c:\Program Files\Raxco\PerfectDisk2008Install\x64\Program Files 64\Raxco\PerfectDisk2008\msxml6.dll
I deleted the C:\Program Files\Raxco\PerfectDisk2008Install folder, did another scan and got another 100% secure score. After program is installed PerfectDisk still runs with out this folder
Jim
Works fine for Perfect Disk 2008 (Build 64) for me aswell. thumbs up. can make a batch fix for it if anyone like.
Edit: checked that this "fix" does not effect the ability of the modify/repair/uninstall functions either. it does´nt though useing the repair selection might cause the files to be reinstalled. |
|
|
| irvinf
| RE: No updates available.
|
|
|
by irvinf on 28th Dec, 2008 15:41
|
Posts: 1
User Since: 18th Jan, 2008
Secunia System Score: N/A
Location: N/A |
Raxco suggests deleting ProgramFile\Raxco\PerfectDisk2008Install folder.
A newer version of MSXML will be used when updating. |
|
|
| chaser66
| RE: No updates available.
|
|
|
by chaser66 on 5th Jan, 2009 08:46
|
Posts: 2
User Since: 28th Jun, 2008
Secunia System Score: N/A
Location: N/A |
on 26th Nov, 2008 02:07, straddarts wrote:
Sirs:
I have tried repeatedly to update the Microsoft XML Core Services (MSXML) 6.x. The website says there is no update for this file.
|
|
|
| regquinton
| RE: No updates available.
|
|
|
by regquinton on 5th Jan, 2009 20:45
|
Posts: 1
User Since: 5th Aug, 2008
Secunia System Score: N/A
Location: N/A |
On my Dell laptop there's a D: recovery partition and that's what Secunia PSI is griping about.
D:\Windows\System32\msxml6.dll
My C: partition is fine and up to date. I've added an ignore rule for this one, I'd advise the same for others who are getting similar gripes on partions other similar partitions.
|
|
|
| actcons
| RE: No updates available.
|
|
|
by actcons on 25th Jan, 2009 15:39
|
Posts: 1
User Since: 6th Nov, 2008
Secunia System Score: N/A
Location: N/A |
I am having the same problem...Originally I had a problem with Java......the moment I updated it Secunia tells me I have 8 programs insecure.............several of the MS including IE (only used for MS downloads) and I use automatic updates. Checking with MS downloads I am fully up to date...............is this a secunia fault? |
|
|
| puget1
| RE: No updates available.
|
|
|
by puget1 on 1st Mar, 2009 16:44, last edited on 1st Mar, 2009 16:44
|
Posts: 187
User Since: 21st Dec, 2007
Secunia System Score: 100%
Location: WA State, US |
F.Y.I please check out all available forums regarding this issue. We found a fix 1. third party programs just use your ignore rule. I can't remember it all but there were numerous forums on the subject and if you wanted you could just delete the core package all together. Which I did with no adverse effect to date.
Forum Thread: MSXML 6.0 is the forum to which I refer. Hope it helps This forum title is "no updates available"
standbyhttp://secunia.com/community/forum/thread/show/114...
http://secunia.com/community/forum/thread/show/147...
The above two forums address this problem in some detail: the final solution is that if you are running Vista it is not needed at all as it is an outdated dll from Xp.
Here is the meat::
O.k. period (BINGO) that's it. Problem solved. msxml6.0 is for XP(PERIOD) and is re-numbered in Vista under msxml4.0 SP2 (KB954430)for Vista Obtained by reading down to what others are downloading. Therefore,why I am not having any problem by having deleting it. Microsoft then via automatic updating replaced it with msxml4.0 SP2 (KB954430) I cross referenced it with forum msxml6.0
This is how to locate the file ::
To locate the exact file that the Secunia PSI has detected, please follow there guidelines using the
advanced interface:
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
* Click on the entry of the programme to expand it.
* Click on Technical details to see the installation path of the detected file.
* Remember the installation path and close down the menu.
* Click Open Folder and locate the detected file.
Have U changed the folder option to show all hidden files?
Have U tried Windows search asking it to search hidden files? |
|
|
| Stolberg
| RE: No updates available.
|
|
|
by Stolberg on 26th Aug, 2009 02:23
|
Posts: 2
User Since: 27th Jul, 2009
Secunia System Score: N/A
Location: N/A |
on 26th Nov, 2008 02:07, straddarts wrote:
Sirs:
I have tried repeatedly to update the Microsoft XML Core Services (MSXML) 6.x. The website says there is no update for this file.
|
|
|
| Stolberg
| RE: No updates available.
|
|
|
by Stolberg on 26th Aug, 2009 02:23
|
Posts: 2
User Since: 27th Jul, 2009
Secunia System Score: N/A
Location: N/A |
on 26th Nov, 2008 02:07, straddarts wrote:
Sirs:
I have tried repeatedly to update the Microsoft XML Core Services (MSXML) 6.x. The website says there is no update for this file.
|
|
|
| Slamgeden
| RE: No updates available.
|
|
|
by Slamgeden on 26th Aug, 2009 09:22
|
Posts: 181
User Since: 17th Jul, 2009
Secunia System Score: N/A
Location: N/A |
Always reboot. Windows can apply the updates pr. auto, then not really install them before the next reboot. This is likely the problem.
--
Assorted Fnords. |
|
|
|
