Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: nsecure microsoft XML Core Services (MSXML)4.x

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Microsoft
And, this specific program:
Microsoft XML Core Services (MSXML) 4.x

This thread has been marked as resolved.
bigtrucks nsecure microsoft XML Core Services (MSXML)4.x
Member 6th Dec, 2010 20:17
Ranking: 0
Posts: 6
User Since: 16th Jul, 2010
System Score: N/A
Location: US
OK! So I download the Update for Microsoft XML Core Services 4.0 Service Pack 3 (KB973685) as recommended and yet after rescanning Secunia I still have an Insecure with the Microsoft XML 4.x . The file is C:\Program Files\Magellan\Magellan POI file Editor\msxml4.dll which is a GPS that I own and do an update on this computer when needed. I checked the site and there are no new updates.
Could someone please explain why Secunia keeps showing as an insecure?

Regards
BT

--
A Question Is One Step To Learning And I Am Learning One Step At A Time.

Post "RE: nsecure microsoft XML Core Services (MSXML)4.x " has been selected as an answer.
ddmarshall RE: nsecure microsoft XML Core Services (MSXML)4.x
Dedicated Contributor 6th Dec, 2010 20:27
Score: 1210
Posts: 961
User Since: 8th Nov 2008
System Score: 98%
Location: UK
The manufacturer of your GPS software has included a copy of MSXML 4.0 with their program. This is not best practice.

Try renaming msxml4.dll to msxml4.dll_old in the Magellan folder. Check that the program still works. The program should find the version of msxml4.dll you downloaded in a system file.

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+1
-0
bigtrucks RE: nsecure microsoft XML Core Services (MSXML)4.x
Member 7th Dec, 2010 05:46
Score: 0
Posts: 6
User Since: 16th Jul 2010
System Score: N/A
Location: US
Hey ddmarshall, Thanks for the quick reply and help.

"Try renaming msxml4.dll to msxml4.dll_old in the Magellan folder."
OK! I have 3 app.exe with the name msxml4.dll . two of them have the letter "a" and/or "r' after the 4 . I'm Assuming, (which is bad to do) that I would just change the one with no letters after it.

Once again thanks for the help.
Regards
BT

--
A Question Is One Step To Learning And I Am Learning One Step At A Time.
Was this reply relevant?
+0
-0
bigtrucks RE: nsecure microsoft XML Core Services (MSXML)4.x
Member 7th Dec, 2010 05:55
Score: 0
Posts: 6
User Since: 16th Jul 2010
System Score: N/A
Location: US
Just changed it and the threat disappeared. So far the GPS program doesn't seem to be affected by the name change. I'll find out on the next updating of the system itself. Thanks for the info.
Regards
BT

--
A Question Is One Step To Learning And I Am Learning One Step At A Time.
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer