Re: OCX and Digital Certificates question ( Problems with PKCS7 after Q328145 in Win2K)

From: Alex K. Angelopoulos \(MVP\) (aka@mvps.org)
Date: 09/29/02


From: "Alex K. Angelopoulos \(MVP\)" <aka@mvps.org>
Date: Sun, 29 Sep 2002 02:54:14 -0500


Mauricio,

Does the same thing happen if you use the following code instead of an object
tag?

Set CEnroll = CreateObject("CEnroll.CEnroll")
CEnroll.installPKCS7(Str)

There do appear to be some changes in how this works. I'm including the main
security groups in this response since they may have a good idea of what is
actually happening here.

In news:9e7801c2665d$ef5bfcd0$36ef2ecf@tkmsftngxa12,
Mauricio Reveco typed:
> I install in my win2k the Q328145 security update,
> described in Microsoft Security Bulletin MS02-
> 050 "Certificate Validation Flaw Could Enable Identity
> Spoofing (Q328145)"
>
> After the installation the next code didn't work anymore
> _______________________________________
> <OBJECT classid="clsid:43F8F289-7A20-11D0-8F06-
> 00C04FC295E1" codebase="xenroll.dll#Version=5,131,2146,1"
> id="control"></OBJECT>
> <script language="vbscript">
> control.installPKCS7 <String parameter>
> </script>
> _____________________________________________________
> the script throw an error message about nonexistent
> method called "installPKCS".
>
> I replace the <OBJECT> Tag by the next sentence:
> _________________________________________________
> <OBJECT classid="clsid:5B9169C0-DB65-42AA-A38A-
> 0726846AAEB3" codebase="xenroll.dll#Version=5,131,3659,0"
> id="control"></OBJECT>
> _________________________________________________
>
> but it didn't work, I get the Class ID and Version from
> the new xenroll.dll installed in my Windows/system32
> directory.
>
> Can you help with this?
>
> Thanks!

--
Please respond in the newsgroup so everyone may benefit.
 http://dev.remotenetworktechnology.com
 ----------
 Subscribe to Microsoft's Security Bulletins:
 http://www.microsoft.com/technet/security/bulletin/notify.asp


Relevant Pages

  • Re: Critical Upd. DirectX 9, W2000, KB904706, Error: 0x800706BE
    ... > Your computer may not be updated when you install one of the DirectX ... > The article ends with a link to the relevant TechNet Security Bulletin. ... in particular Windows Media Player which I think is the ... > what the log is showing. ...
    (microsoft.public.windowsupdate)
  • Re: Updates from the future?
    ... malware infestations. ... those 5 updates did have 12/25/08 for the install date. ... I saw to a security bulletin, probably because this update wasn't a security ... Then go to the KB article of said updates and check the Registry subkey ...
    (microsoft.public.windowsupdate)
  • Re: Updates from the future?
    ... I found the file info for KB951072 and realized that the tzchange file I had ... those 5 updates did have 12/25/08 for the install date. ... I saw to a security bulletin, probably because this update wasn't a security ... Then go to the KB article of said updates and check the Registry subkey ...
    (microsoft.public.windowsupdate)
  • [security bulletin] HPSBUX01137 SSRT5954 rev.10 - HP-UX Running TCP/IP (IPv4), Remote Unauth
    ... The information in this Security Bulletin should be acted upon as soon as possible. ... A potential security vulnerability has been identified with HP-UX running TCP/IP. ... install preliminary binary files per Security Bulletin HPSBUX01164 ... IPSec revision A.01.07.02 and PHNE_33159 or subsequent ...
    (Bugtraq)
  • Re: acrobat Reader 2.0
    ... > Control Panel - Remove or add prgramms) and your PocketPC before you can ... > install AA V2.0. ... You might want to soft reset, ... >> Mauricio Freitas, Microsoft MVP Mobile Devices ...
    (microsoft.public.pocketpc)