Re: MSXML & KB925672

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



Reply bottom posted

"Torgeir Bakken (MVP)" <Torgeir.Bakken-spam@xxxxxxxxx> wrote in message
news:%23lpJYJI8GHA.1248@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

925672 is /not/ a patch for those who installed 924191 and failed to
reboot.

925672 is the security update for MSXML 4 (msxml4.dll and msxml4r.dll),
while 924191 is the security update for MSXML 2 and 3 (msxml2.dll,
msxml2r.dll, msxml3.dll and msxml3r.dll)

Both updates fixes the vulnerability described in Microsoft Security
Bulletin MS06-061.

(For MSXML 6, the update is named 925673)

As you have MSXML 4 installed (based on your find of msxml4.dll), you
will need to install 925672 also.

KB article references:

MS06-061: Vulnerabilities in Microsoft XML Core Services could allow
remote code execution
http://support.microsoft.com/kb/924191/

MS06-061: Security update for Microsoft XML Core Services 4.0 SP2
http://support.microsoft.com/kb/925672/

MS06-061: Security update for Microsoft XML Core Services 6.0
http://support.microsoft.com/kb/925673/

The reason for having separate updates, is that MSXML 4 and MSXML 6 is
an optional component (they are not included in a clean OS
installation), while MSXML 2 and 3 comes included in the OS.

Note that the Revision 2.0 reference in KB924191 is not a revision to
the update, but to the text in the KB article only.

And by the way, the date in the download links (stating "Published:
10/6/2006") is wrong, they were published 10/10/2006 (at the same time
as the Security Bulletin MS06-061 was released).

--
torgeir, Microsoft MVP Software Distribution, Porsgrunn Norway


Hallo Torgeir
Thank you so much for your very clear explanation of the question I was
posing.
It is a relief to see that you understood my confusion over these two
updates.
I shall download and install KB925672, but not from WU Home as I think this
is where others, who have been unsuccessful, found there problems.
Are you getting as many update problems in Norway? as we are here.
If it is quieter in the Norwegian group, perhaps you could pop back here on
the next Black Tuesday :-)
Take care
Rgds
Antioch



.



Relevant Pages

  • Re: repetitive MS automatic update KB936181
    ... " To install this update in quiet mode together with verbose logging, ... my concern now is not about KB936181 is or has been repeatively installed on my PC....its about the my Security Software alerting me to a High Security issue and referring me to the Microsoft Article MS07-042 to correct the problem. ... There are a few scenarios that will cause MSXML update installation failures: ... Security Update for Microsoft XML Core Services 4.0 Service Pack 2 may repeatedly appear in the update list on Microsoft Update or on Windows Update ...
    (microsoft.public.windowsupdate)
  • Re: Security Update for MS XML Core Services 4.0 Service Pack 2(KB
    ... You assisted me with a problem with the Security Update KB936181. ... your assistance, it installed. ... updates are ready to install when you click on the Sheild you have no way to ... know if its a MSXML download.... ...
    (microsoft.public.windowsupdate)
  • Re: repetitive MS automatic update KB936181
    ... There are a few scenarios that will cause MSXML update installation failures: ... Security Update for Microsoft XML Core Services 4.0 Service Pack 2 may repeatedly appear in the update list on Microsoft Update or on Windows Update ... your security apps before starting the install phase. ...
    (microsoft.public.windowsupdate)
  • Re: repetitive MS automatic update KB936181
    ... Security issue and referring me to the Microsoft Article MS07-042 to correct ... There are a few scenarios that will cause MSXML update installation ... Description of the security update for Microsoft XML Core Services 4.0: ... your security apps before starting the install phase. ...
    (microsoft.public.windowsupdate)
  • Re: Security Update for MS XML Core Services 4.0 Service Pack 2(KB
    ... My Security Software identified a High Alert Security problem....it referred to it as MS07-042. ... updates are ready to install when you click on the Sheild you have no way to know if its a MSXML download.... ... when I go to Microsofts Windows Update Site and click on HISTORY....it shows KB936191 Sucessfully Installed 7 times......with the most recent sucessful install dated with the one I manually Installed today. ...
    (microsoft.public.windowsupdate)