MSXML Service Packs

From: Joe Dance (dancejoe_at_MOORE.SC.EDU)
Date: 10/15/04

  • Next message: Steve Boyce: "Re: How to Break Windows XP SP2 + Internet Explorer 6 SP2"
    Date:         Fri, 15 Oct 2004 16:36:15 -0400
    To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM
    
    

    MBSA today reported that one NT server was running MSXML2.6 SP2, while SP3
    was the most current SP available. On that system and others, it also
    reported that MSXML 3 SP4 was installed, while SP5 was the most current SP
    available. Admittedly, I had not run MBSA against these particular machines
    in a while. I keep up with patches, but MSXML and MDAC updates do not seem
    to get distributed by way of Windows Update, nor does it detect needed
    updates to MSXML or MDAC - but MBSA checks them both.

    The problem is that no trace of SP3 for MSXML 2.6, or of SP5 for MSXML 3,
    can be found anywhere on any Microsoft websites, or other sites. There is
    currently NO published information available, on the Microsoft XML websites
    or elsewhere, about MSXML2.6, and the latest version of MSXML 3 available is
    SP4.

    Resolution:
    MSXML 3 SP4 and MSXML4 SP2 are available online. Get current versions of
    MSXML 3 and 4 at msdn.microsoft.com/XMLDownloads

    For MSXML2.6, go to knowledgebase article 823490; download and install the
    msxml file. Although the article does not mention MSXML 2.6 SP3, that is
    what you are getting.

    If anyone knows of a proper way to remove or uninstall old versions of
    MSXML, I think a lot of folks would like to hear it. At least one Microsoft
    rep has publicly stated that old versions of MSXML cannot be removed. They
    are not listed in Add/Remove Programs. It might be as simple as
    unregistering the dll files, and deleting them, but I'm not certain of that,
    or of what other effects such action would trigger. As I stated, I'm open
    to suggestion.

    Joe Dance
    University of South Carolina

    ---
    [This E-mail scanned for viruses by Declude Virus]
    --
    NTBugtraq Editor's Note:
    Want to reply to the person who sent this message? This list is configured such that just hitting reply is going to result in the message coming to the list, not to the individual who sent the message. This was done to help reduce the number of Out of Office messages posters received. So if you want to send a reply just to the poster, you'll have to copy their email address out of the message and place it in your TO: field.
    --
    

  • Next message: Steve Boyce: "Re: How to Break Windows XP SP2 + Internet Explorer 6 SP2"

    Relevant Pages

    • Windows Update not working? MSXML issues not going away
      ... MBSA still indicates a problem with MSXML (in two places it ... apparently the update for it ran successfully from the Windows Update Web ... The latest service pack for this product is not installed. ...
      (microsoft.public.windowsupdate)
    • MSXML issues after Security Updates (MBSA indication?)
      ... MBSA still indicates a problem with MSXML (in two places it ... apparently the update for it ran successfully from the Windows Update Web ... The latest service pack for this product is not installed. ...
      (microsoft.public.windowsupdate)
    • New MSSecure.XML Version 2005.05.10.0 Now Available
      ... MSSECURE.XML Data Version 2005.05.10.0 (for use by MBSA 1.2 and SMS SUS ... Feature Pack) was last modified today, May 10, 2005, and is now available ... Today's release enables MBSA support for the following bulletins and new ... version of MSXML 3.0 to SP7 only on the Windows 2000 platform. ...
      (microsoft.public.security)
    • Re: MSXML Service Packs
      ... The download location for MSXML 3.0 SP5 is available here: ... The nuances of MSXML 2.6 SP3 are available from this snippet from the ... Customers are concerned that MBSA indicates users running MSXML 2.6 are ...
      (NT-Bugtraq)
    • MBSA and MSXML 2.6
      ... MBSA is saying that I currently have MSXML 2.6 SP2, ... When I did a search on the net, not only is SP3 not ... it is also included in MS SQL 2000 SP3 that I ... Is there a way to manually check my version of MSXML 2.6? ...
      (microsoft.public.sqlserver.security)