Re: OCX and Digital Certificates question ( Problems with PKCS7 after Q328145 in Win2K)

From: Alex K. Angelopoulos \(MVP\) (aka@mvps.org)
Date: 09/29/02 

From: "Alex K. Angelopoulos \(MVP\)" <aka@mvps.org>
Date: Sun, 29 Sep 2002 02:54:14 -0500

Mauricio,

Does the same thing happen if you use the following code instead of an object
tag?

Set CEnroll = CreateObject("CEnroll.CEnroll")
CEnroll.installPKCS7(Str)

There do appear to be some changes in how this works. I'm including the main
security groups in this response since they may have a good idea of what is
actually happening here.

In news:9e7801c2665d$ef5bfcd0$36ef2ecf@tkmsftngxa12,
Mauricio Reveco typed:
> I install in my win2k the Q328145 security update,
> described in Microsoft Security Bulletin MS02-
> 050 "Certificate Validation Flaw Could Enable Identity
> Spoofing (Q328145)"
>
> After the installation the next code didn't work anymore
> _______________________________________
> <OBJECT classid="clsid:43F8F289-7A20-11D0-8F06-
> 00C04FC295E1" codebase="xenroll.dll#Version=5,131,2146,1"
> id="control"></OBJECT>
> <script language="vbscript">
> control.installPKCS7 <String parameter>
> </script>
> _____________________________________________________
> the script throw an error message about nonexistent
> method called "installPKCS".
>
> I replace the <OBJECT> Tag by the next sentence:
> _________________________________________________
> <OBJECT classid="clsid:5B9169C0-DB65-42AA-A38A-
> 0726846AAEB3" codebase="xenroll.dll#Version=5,131,3659,0"
> id="control"></OBJECT>
> _________________________________________________
>
> but it didn't work, I get the Class ID and Version from
> the new xenroll.dll installed in my Windows/system32
> directory.
>
> Can you help with this?
>
> Thanks! 

--
Please respond in the newsgroup so everyone may benefit.
 http://dev.remotenetworktechnology.com
 ----------
 Subscribe to Microsoft's Security Bulletins:
 http://www.microsoft.com/technet/security/bulletin/notify.asp

Relevant Pages

  • Re: Critical Upd. DirectX 9, W2000, KB904706, Error: 0x800706BE
    ... > Your computer may not be updated when you install one of the DirectX ... > The article ends with a link to the relevant TechNet Security Bulletin. ... in particular Windows Media Player which I think is the ... > what the log is showing. ...
    (microsoft.public.windowsupdate)
  • [security bulletin] HPSBUX01137 SSRT5954 rev.10 - HP-UX Running TCP/IP (IPv4), Remote Unauth
    ... The information in this Security Bulletin should be acted upon as soon as possible. ... A potential security vulnerability has been identified with HP-UX running TCP/IP. ... install preliminary binary files per Security Bulletin HPSBUX01164 ... IPSec revision A.01.07.02 and PHNE_33159 or subsequent ...
    (Bugtraq)
  • Re: Installing GDI Detection
    ... Do I need this on my computer if so how do I install this program. ... " As part of the September, 2004 Microsoft Security Bulletin release process, we have created the Microsoft GDI+ Detection Tool that detects if you have any one of the Microsoft programs installed on your computer that are listed in the "Applies To" section. ... It means that the download was cancelled by either you or someone using the system. ...
    (microsoft.public.windowsupdate)
  • Re: Critical Upd. DirectX 9, W2000, KB904706, Error: 0x800706BE
    ... SysInternals". ... > Your computer may not be updated when you install one of the DirectX ... > The article ends with a link to the relevant TechNet Security Bulletin. ... > E.g. both FileMon and RegMon could add insight. ...
    (microsoft.public.windowsupdate)
  • Re: acrobat Reader 2.0
    ... > Control Panel - Remove or add prgramms) and your PocketPC before you can ... > install AA V2.0. ... You might want to soft reset, ... >> Mauricio Freitas, Microsoft MVP Mobile Devices ...
    (microsoft.public.pocketpc)