Forum Thread: Please simplify and clarify this MSXML 4.0 item

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Microsoft
And, this specific program:
Microsoft XML Core Services (MSXML) 4.x

This thread has been marked as locked.
Nikilet Please simplify and clarify this MSXML 4.0 item
Member 24th Jul, 2014 00:48
Ranking: 7
Posts: 334
User Since: 15th Jul, 2008
System Score: N/A
Location: N/A
Maurice -- in a previous, very long thread I was reading you wrote the following:

"There are 3 possible solutions - to give you precise details I need to know the path PSI gives you to the version you have installed now."

That thread totally lost me so I'm starting my own.

My installed version is shown as 4.30.2117.0.
It is located at: C:\Windows\System32\msxml4.dll

What do I need to do with this, if anything?

Thank you.

Maurice Joyce RE: Please simplify and clarify this MSXML 4.0 item
Handling Contributor 24th Jul, 2014 01:07
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Nothing - you are OK - That solution is for those who are not at 4.30.2117.0



--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
Nikilet RE: Please simplify and clarify this MSXML 4.0 item
Member 24th Jul, 2014 20:34
Score: 7
Posts: 334
User Since: 15th Jul 2008
System Score: N/A
Location: N/A
That's great news.

Is there some way for me to have psi ignore this, then, so it shows me with a green icon and up to date?
Was this reply relevant?
+0
-0
Maurice Joyce RE: Please simplify and clarify this MSXML 4.0 item
Handling Contributor 24th Jul, 2014 23:30
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
PSI VERSION 2

Open PSI>Scan results>expand any programme by clicking the "+" to the left of the programme entry.

This will reveal DETECTED INSTANCES and below it two Yellow Folders. Click the folder with the RED dot which will create an Ignore Rule for that item.

PSI VERSION 3

Open PSI>Activate "Show Programs">From the list of Programme Icons that appear right click on the programme(s) you wish to ignore & select "Ignore Updates To This Program"

The icon will be moved from the main list & recreated at the bottom of the page under the heading "Programs That Do Not Receive Updates".

Any programme in this category can be returned the the main Program List with a right click & selection of "Don't Ignore Updates To This Program".

Hope this helps.

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
Nikilet RE: Please simplify and clarify this MSXML 4.0 item
Member 25th Jul, 2014 21:14
Score: 7
Posts: 334
User Since: 15th Jul 2008
System Score: N/A
Location: N/A
You always offer such clear help and I appreciate that.

I happened to think of something. If I check to ignore updates, then if there truly is an update I'll not receive it. Would you recommend marking this item that way or leaving it alone?
Was this reply relevant?
+0
-0
steffens RE: Please simplify and clarify this MSXML 4.0 item
Member 25th Jul, 2014 22:07
Score: 53
Posts: 80
User Since: 25th Jul 2009
System Score: N/A
Location: US
That would be true if the software in question were a third-party program. However, MSXML is a MS software package that is managed (and updated) by MS Update. Therefore, IF MS Update is properly configured and working, then you will receive any and all updates to any version of MSXML in future, no matter what you do with the MSXML entry in PSI.
HTH...
-- EstherD
Was this reply relevant?
+0
-0
Maurice Joyce RE: Please simplify and clarify this MSXML 4.0 item
Handling Contributor 26th Jul, 2014 00:00
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK

Microsoft have confirmed to me by email today that MSXML4 SP3 (4.30.2117.0) is no longer supported & the information I was given earlier by them was not clear. THE DOWNLOAD LINK TO VERSION 4.30.2117.0 REMAINS LIVE AS DOES WINDOWS UPDATE UP TO & INCLUDING THIS VERSION.

On that basis I assume that this version is secure at the moment.

MS will not enhance version 4.30.4117.0 in the future nor will they issue any security patches via Windows Update. It is dead/discontinued/call it what you want.

As I have stated elsewhere I am going to ignore the EOL notice but it really is a user choice after a Risk Assessment.

If anyone else wants to check with Microsoft my information came from here:

Security Newsletter Pro Feedback - email - secnlfb@microsoft.com - the base document they refer to is here:

http://support.microsoft.com/kb/269238/en-us

Hope this helps.

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+1
-0
Maurice Joyce RE: Please simplify and clarify this MSXML 4.0 item
Handling Contributor 29th Jul, 2014 00:12
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
There has been & continues to be a lot written about MSXML 4.

Are you now happy that you have enough information to make a balanced judgement on what to do?

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0

This thread has been marked as locked.