navigation bar left navigation bar right

Secunia CSI7
navigation left tab Advisories navigation right tab
navigation left tab Research navigation right tab
navigation left tab Forums navigation right tab
navigation left tab Create Profile navigation right tab
navigation left tab Our Commitment navigation right tab
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Microsoft Visual C++ 2005 2008 Redistributable (x86)

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Microsoft
And, this specific program:
Microsoft Visual C++ 2005 Redistributable Package (x86)

This thread has been marked as locked.
reglis Microsoft Visual C++ 2005 2008 Redistributable (x86)
Member 21st Dec, 2010 17:33
Ranking: 0
Posts: 4
User Since: 15th Jul, 2008
System Score: 100%
Location: FR
Last edited on 21st Dec, 2010 17:36

Hi,

I installed,
Microsoft Visual C++ 2005 Redistributable - x86 8.0.50727.762
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.1

and Microsoft Update,
Microsoft Visual C++ 2005 ATL Update KB973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2008 ATL Update KB973924 - x86 9.0.30729.4148

PSI Scan Results:

Microsoft Visual C++ 2005 Redistributable - x86 8.0.50727.762 (Microsoft Update)
Latest Version - patching one or more vulnerabilities:
8.0.50727.4053
1- False I updated but True msdia80.dll version is not modified...

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.1 (Up-to-date)
2- False it exists an update but True msdia90.dll version is not modified...

I am the only one?

Best regards.

Anthony Wells RE: Microsoft Visual C++ 2005 2008 Redistributable (x86)
Expert Contributor 21st Dec, 2010 22:54
Score: 2463
Posts: 3,348
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hi ,

There are two or three other threads where posters have your problem . This one was resolved in similar cicumstances to yours by an uninstall/reinstall ; be sure you get the right version x 86 for your system from M$ downloads ,if your system is 32bit (as it appears) :-

http://secunia.com/community/forum/thread/show/676...

Hope this helps .

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
reglis RE: Microsoft Visual C++ 2005 2008 Redistributable (x86)
Member 22nd Dec, 2010 12:26
Score: 0
Posts: 4
User Since: 15th Jul 2008
System Score: 100%
Location: FR
Last edited on 22nd Dec, 2010 12:32
Hi,

I uninstalled all versions.

1.1. I installed Microsoft Visual C++ 2005 SP1 Redistributable Package (x86) 8.0.50727.762
http://www.microsoft.com/downloads/en/details.aspx...

1.2. Microsoft Update detected and installed Microsoft Visual C++ 2005 ATL Update KB973923 (x86) 8.0.50727.4053

In the currently installed programs box I have,
- Microsoft Visual C++ 2005 Redistributable - x86 8.0.50727.762
- Microsoft Visual C++ 2005 ATL Update KB973923 - x86 8.0.50727.4053

Microsoft Update do not detect updates anymore.

Why Senunia PSI only detected Microsoft Visual C++ 2005 Redistributable Package (x86) 8.0.50727.762 ?

2.1. I installed Microsoft Visual C++ 2008 SP1 Redistributable Package (x86) 9.0.30729.1
http://www.microsoft.com/downloads/en/details.aspx...

2.2. Microsoft Update detected and installed Microsoft Visual C++ 2008 ATL Update KB973924 (x86) 9.0.30729.4148

In the currently installed programs box I have,
- Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.1
- Microsoft Visual C++ 2008 ATL Update KB973924 - x86 9.0.30729.4148

Why Senunia PSI only detected Microsoft Visual C++ 2008 Redistributable Package (x86) 9.0.30729.1 ?

This time it is dangerous because Microsoft Visual C++ 2008 Redistributable Package (x86) is not Up-to-date.

Best regards.
Was this reply relevant?
+0
-0
ddmarshall RE: Microsoft Visual C++ 2005 2008 Redistributable (x86)
Dedicated Contributor 22nd Dec, 2010 19:40
Score: 1219
Posts: 971
User Since: 8th Nov 2008
System Score: 98%
Location: UK
Try downloading the required installation from these locations

2005 http://www.microsoft.com/downloads/en/details.aspx...

2008 http://www.microsoft.com/downloads/en/details.aspx...

I think you are secure if you have all the Microsoft Updates installed. Secunia PSI has a problem determining what is installed unless the full package is downloaded. The updates from Windows Update do not replace the DLLs that PSI uses to identify the version.

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+2
-0
This user no longer exists RE: Microsoft Visual C++ 2005 2008 Redistributable (x86)
Member 22nd Dec, 2010 19:49
Hi,

Please see my reply at the end of this thread (The end as of 19:49 CET 22/12/2010): http://secunia.com/community/forum/thread/show/677...

Has this information helped you resolve the problem?
Was this reply relevant?
+0
-0
reglis RE: Microsoft Visual C++ 2005 2008 Redistributable (x86)
Member 23rd Dec, 2010 14:53
Score: 0
Posts: 4
User Since: 15th Jul 2008
System Score: 100%
Location: FR
Last edited on 23rd Dec, 2010 14:55
ddmarshall +1

My way,
http://www.microsoft.com/downloads/en/default.aspx
[Downloads A-Z] http://www.microsoft.com/downloads/en/A2ZPage.aspx
[V] http://www.microsoft.com/downloads/en/A2ZPage.aspx...
[Visual C++] http://www.microsoft.com/downloads/en/resultsForPr...
[Released]
[Released]

I downloaded and installed,
Microsoft Visual C++ 2005 SP1 Redistributable Package (x86) 8.0.50727.762
http://www.microsoft.com/downloads/en/details.aspx...
Microsoft Visual C++ 2008 SP1 Redistributable Package (x86) 9.0.30729.1
http://www.microsoft.com/downloads/en/details.aspx...

Microsoft Update detected and installed,
Microsoft Visual C++ 2005 ATL Update KB973923 (x86) 8.0.50727.4053
Microsoft Visual C++ 2008 ATL Update KB973924 (x86) 9.0.30729.4148

Problem, msdia80.dll and msdia90.dll versions are not changed !

ddmarshall, how you found the "ATL Update" versions in Microsoft Download Center ?

E.Petersen,

OKKKKK I had not understood that Secunia PSI offered me to install,
Microsoft Visual C++ 2005 SP1 Redistributable Package ATL Security Update (x86) 8.0.50727.4053
http://www.microsoft.com/downloads/en/details.aspx...

There remains a problem, Secunia PSI detected Microsoft Visual C++ 2008 SP1 Redistributable Package (x86) 9.0.30729.1 Up-to-date and it is wrong...

Thanks to you two and Happy Holidays.
Was this reply relevant?
+0
-0
ddmarshall RE: Microsoft Visual C++ 2005 2008 Redistributable (x86)
Dedicated Contributor 23rd Dec, 2010 15:36
Score: 1219
Posts: 971
User Since: 8th Nov 2008
System Score: 98%
Location: UK
I just searched the Download Center for Visual C++ Redistributable. Sometimes you get different results on different days.

The vulnerability is not in the msdiaxx.dll files. They are just used for debugging. The Microsoft updates download the minimum needed to fix the problem, so those are not altered. In most circumstances this should be enough to make your system safe. But PSI is using those files to check which version of the redistributable is installed and the only way to satisfy it is to download the whole package.

Joyeuses fêtes.

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+1
-0
LindaClaudine RE: Microsoft Visual C++ 2005 2008 Redistributable (x86)
Member 24th Dec, 2010 06:14
Score: -2
Posts: 4
User Since: 25th Mar 2010
System Score: N/A
Location: US
I got the vulnerable, etc., and downloaded fix - all seems fine. BUT, what do I even have this program for? I don't program on this old PC with Windows XP Prof., SP3. In fact, I am getting ready to upgrade to newer PC but will keep this one so I may as well have it work correctly w/o unnecessary stuff on it (which I know there is). Thanks and happy holidays to all.

--
Ms. Linda Claudine
Was this reply relevant?
+0
-0
reglis RE: Microsoft Visual C++ 2005 2008 Redistributable (x86)
Member 24th Dec, 2010 15:17
Score: 0
Posts: 4
User Since: 15th Jul 2008
System Score: 100%
Location: FR
ddmarshall,

Thank you for explanation.

LindaClaudine,

Microsoft Visual C++ is installed by other programs.
Example : Avira AntiVir Personal installs and uses Microsoft Visual C++ 2008 SP1 Redistributable Package ATL Security Update (x86) 9.0.30729.4148

Happy Holidays.
Was this reply relevant?
+0
-0
crackers RE: Microsoft Visual C++ 2005 2008 Redistributable (x86)
Member 24th Dec, 2010 20:31
Score: 6
Posts: 17
User Since: 1st Mar 2009
System Score: 100%
Location: US
I've read & re-read these posts in hopes of understanding it enough so I wouldn't have to write & expose my stupidity but am still pretty much lost so.....
I don't have the foggiest idea what this Visual C++ stuff is or why I have it but PSI flagged my 2005 as Insecure. I also have 2008 which is listed as Patched.

So am I to understand that I should just click on that "Fix it" button, follow those instructions & be in good graces?

Thank you

Windows XP SP3
IE 8
Avast
MBAM
Windows Firewall
don't know what else might be relevant?
Was this reply relevant?
+0
-0
ddmarshall RE: Microsoft Visual C++ 2005 2008 Redistributable (x86)
Dedicated Contributor 25th Dec, 2010 01:42
Score: 1219
Posts: 971
User Since: 8th Nov 2008
System Score: 98%
Location: UK
Visual C++ is a programming language. When you install a program that has been written in that language, the redistributable package has to be installed as well. It contains libraries that the programmer can use to avoid having to write common functions themself. There are three versions 2005, 2008 and 2010. You may require any combination of them.

As you can see, people have problems updating this. Download from here:
http://www.microsoft.com/downloads/en/details.aspx...
Choose vcredist_x64.exe if you are running a 64-bit system; vcredist_x86.exe if you are running a 32-bit system.
Download and run, and hope for the best.

PS. If you have XP SP3, it will be 32-bit.

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+1
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


Secunia is a member of FIRST Secunia is a member of EDUcause Secunia is a member of The Open Group Secunia is a member of FS-ISAC
 
Secunia © 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer
follow Secunia on Facebook follow Secunia on Twitter follow Secunia on LinkedIn follow Secunia on YouTube follow Secunia Xing follow Secunias RSS feed follow Secunia on Google+