Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Microsoft Net Framework insecure, missing KB2446704

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Microsoft
And, this specific program:
Microsoft .NET Framework 4.x

This thread has been marked as locked.
PaulHand Microsoft Net Framework insecure, missing KB2446704
Member 14th Apr, 2011 17:49
Ranking: 0
Posts: 4
User Since: 26th Dec, 2007
System Score: N/A
Location: US
Have installed KB2446704 repeatedly, and each time MS update site reports successful install. However, Secunia, and rerun of Microsoft Update report the update has not been installed.

Secunia instances:
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspn et_wp.exe, version 2.0.50727.3618
C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe, version 3.0.4506.2152
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSv cHost.exe, version 4.0.30319.1

Have tried turning off Microsoft Security Essentials during install and rebooting after install, but this didn't help. Running XP Pro, SP3. Thanks for any help.


Maurice Joyce RE: Microsoft Net Framework insecure, missing KB2446704
Handling Contributor 14th Apr, 2011 18:23
Score: 11736
Posts: 8,985
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Your file versions look to be correct.

Have U tried an install from here:

http://support.microsoft.com/?kbid=2446704

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
PaulHand RE: Microsoft Net Framework insecure, missing KB2446704
Member 14th Apr, 2011 21:17
Score: 0
Posts: 4
User Since: 26th Dec 2007
System Score: N/A
Location: US
Thanks for the suggestion. Tried the file from the site you suggested, but got the same result. Appeared to install, but didn't.
Was this reply relevant?
+0
-0
PaulHand RE: Microsoft Net Framework insecure, missing KB2446704
Member 14th Apr, 2011 21:41
Score: 0
Posts: 4
User Since: 26th Dec 2007
System Score: N/A
Location: US
An interesting addendum, checked my control panel and found KB2446704 installed, but only under netframework 4 client profile ???
Was this reply relevant?
+0
-0
Maurice Joyce RE: Microsoft Net Framework insecure, missing KB2446704
Handling Contributor 14th Apr, 2011 22:56
Score: 11736
Posts: 8,985
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Have U tried a manual Custom update using Microsoft Update?

Some .NET downloads are optional - have U got some missing?

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
StephenGames RE: Microsoft Net Framework insecure, missing KB2446704
Member 15th Apr, 2011 10:54
Score: 0
Posts: 1
User Since: 15th Apr 2011
System Score: N/A
Location: UK
Last edited on 15th Apr, 2011 10:57
I'm getting exactly the same problem. Every half hour, I get the little yellow shield ikon, telling me that an update is ready to install. I install it, it tells me that the installation is complete, and then half an hour later, the ikon returns, and I go through the process all over again. I've done this about six or seven times now. I've also tried uploading KB2446704 from Microsoft's upload site, and it doesn't make any difference. The upload apparently completes, and then the ikon returns 30 minutes later and offers to upload KB2446704 again. There must be a conflict somewhere that MS hasn't yet observed. It would be great if someone from MS read this site and got it sorted.

By the way, I'm using a Compaq nx6325 laptop, running XP Pro, version 2002, SP3.
Was this reply relevant?
+0
-0
jj1two3 RE: Microsoft Net Framework insecure, missing KB2446704
Member 17th Apr, 2011 20:03
Score: 0
Posts: 1
User Since: 9th Apr 2010
System Score: 100%
Location: US
I am having the same problem with kb 2446704. It says its installed and 3 minutes later the Windows update shield is back on my task bar with the same exact update. I went to the Microsoft Update site and it tells me Kb 2446704 needs to be installed. But it says the size of the file is 0 Kb. and the install time is 0 minutes. It looks like to me that we are trying to install a empty file. But this is really driving me crazy. I have never had any problems getting my Windows updates.

JJ
Was this reply relevant?
+0
-0
PaulHand RE: Microsoft Net Framework insecure, missing KB2446704
Member 18th Apr, 2011 06:08
Score: 0
Posts: 4
User Since: 26th Dec 2007
System Score: N/A
Location: US
I found a comment from Microsoft that the order of installation could prevent some of the update from working. Something about version 4 having been installed and waiting for a reboot could prevent 2 and 3.5 from updating. Ater trying every install combination I could think of to no avail and wasting most of an afternoon, I finally gave up and uninstalled the whole mess.

Net framework takes a lot of space, seems very complicated with multiple versions being updated, and overall seems more trouble than it's worth to me. An illustration of its complexity is the amount of time it took to uninstall!!!

Only if I run into an application that's really important to me and requires net framework will I look at this again. I also saw a non-Microsoft comment that recommended that a person keep only the latest version and uninstall the others, but don't know is this would work for people.

Thanks for the replies and efforts to help.
Was this reply relevant?
+0
-0
Maurice Joyce RE: Microsoft Net Framework insecure, missing KB2446704
Handling Contributor 18th Apr, 2011 09:32
Score: 11736
Posts: 8,985
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 18th Apr, 2011 09:33
Paul,
Nice to hear U have sorted it out yourself. I have reproduced a much longer post I created some time ago which explains in more detail the actions necessary to keep .NET "in order" in the future.

As the creator of this thread U now have the option to lock it or I can do it for U.

This will prevent any more "tag on" posts & protect your mail box.

.NET FRAMEWORK PROBLEMS


A bit of background information worth knowing before trying to fix .NET issues with Windows XP,Vista & Windows 7

Microsoft created .NET Framework to provide building blocks for applications. .NET is not a component of Windows itself. I strongly recommend that you avoid downloading .NET until you install an application that requires one, at which time the programme will likely install the necessary version for you or notify U that .NET version xxx is required in which case U get it from MS.


1. .NET Framework 1.0, 1.1 and 2.0 are all side-by-side versions that can be installed and uninstalled without affecting the others. This means that if you are running into an issue in .NET Framework 2.0, for example, you do not necessarily need to remove .NET Framework 1.0 and 1.1 in addition to removing 2.0.

2. .NET Framework 3.0 is an add-on that requires .NET Framework 2.0 to be present as a prerequisite. If you have .NET Framework 3.0 installed, you will not be allowed to uninstall .NET Framework 2.0 until you first uninstall .NET Framework 3.0.

3. .NET Framework 3.5 is an add-on that requires .NET Framework 2.0 SP1 and .NET Framework 3.0 SP1 to be present as prerequisites. If you have .NET Framework 3.5 installed, you will not be allowed to uninstall .NET Framework 3.0 SP1 or 2.0 SP1 until you first uninstall .NET Framework 3.5.

4. .NET Framework 3.5 SP1 is an add-on that requires .NET Framework 2.0 SP2 and .NET Framework 3.0 SP2 to be present as prerequisites. If you have .NET Framework 3.5 SP1 installed, you will not be allowed to uninstall .NET Framework 3.0 SP2 or 2.0 SP2 until you first uninstall .NET Framework 3.5 SP1.

5. .NET Framework 4 was released on 12th April 2010. The Read Me notes are here:
http://download.microsoft.com/download/B/5/7/B57D2...

.Net Framework 4 is a Microsoft OPTIONAL install.

++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++

If you are having trouble installing .NET Framework 2.0, 3.0 or 3.5, I recommend trying to install .NET Framework 3.5 SP1. It will install .NET Framework 2.0 SP2 and 3.0 SP2 behind the scenes, and these versions contain additional fixes not in the original 2.0, 3.0 or 3.5 releases. Plus, 3.5 SP1 will automatically uninstall any older versions of 2.0, 3.0 or 3.5 that are on your system, so you can save some time by not trying to install a version of .NET Framework that 3.5 SP1 is going to uninstall during its install process.

Link is here:

http://www.microsoft.com/downloads/details.aspx?fa...


There is a last resort but read ALL the details before embarking on the action described. Members of this Forum have successfully used this tool.

NET FRAMEWORK CLEANUP TOOL FOR XP & VISTA

The link to a .Net Framework Clean Up Tool is here:

http://www.raymond.cc/blog/archives/2008/12/02/uni...



Update 6 20:50 12/10/2010





--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-0
ddmarshall RE: Microsoft Net Framework insecure, missing KB2446704
Dedicated Contributor 18th Apr, 2011 13:11
Score: 1209
Posts: 961
User Since: 8th Nov 2008
System Score: 98%
Location: UK
The latest advice from Microsoft on .NET Framework update problems is http://support.microsoft.com/kb/KB976982#top

It includes a 'Fix it' which may allow you to avoid uninstalling all the .NET Frameworks.

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+0
-0
Anthony Wells RE: Microsoft Net Framework insecure, missing KB2446704
Expert Contributor 18th Apr, 2011 15:45
Score: 2437
Posts: 3,330
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 18th Apr, 2011 15:46
Hello Maurice ,

Your link to the Raymond Blog does not work for me ; however , the M$ link posted by ddm does now include a link direct to Aaron Stebner's Clean up Tool , plus info on using it in Vista and later OS :-

http://blogs.msdn.com/b/astebner/archive/2008/08/2...

Take care

Anthony



--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
Maurice Joyce RE: Microsoft Net Framework insecure, missing KB2446704
Handling Contributor 18th Apr, 2011 16:32
Score: 11736
Posts: 8,985
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Anthony - thank you - will take a look.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability