Forum Thread: MSXML 4 on Windows 8.1

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Microsoft
And, this specific program:
Microsoft XML Core Services (MSXML) 4.x

This thread has been marked as locked.
henry8th MSXML 4 on Windows 8.1
Member 9th Oct, 2014 00:08
Ranking: 15
Posts: 19
User Since: 23rd May, 2013
System Score: N/A
Location: US
I was helped previously on this issue with my Windows Vista computer and had MSXML4 version
4.30.2117.0 installed, which the forum deemed the version of this to have and that I needed to do or could do nothing further.

Yesterday,I was updating things on my sister's Windows 8.1 computer (all MS windows updates done) and noticed that she has MSXML 4.0 SP3 Parser 4.30.2100.0. I read a lot about this on the forum until my eyes hurt and I am unsure what to do, if anything, on her computer. On Windows 8.1 should this or can this be updated also to version 4.30.2117.0. On Maurice's long and much appreciated discussion of this issue the only Microsoft update link that he refers to, that I saw, was not applicable to Windows 8.1. Is her computer vulnerable?

If I missed something in the discussions, just attribute to information overload.

Any guidance from the forum's experts would be appreciated.

Thanks!

--
Mister P

Maurice Joyce RE: MSXML 4 on Windows 8.1
Handling Contributor 9th Oct, 2014 01:18
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
The short answer is yes. MSXML 4 is not native to Windows 7,8 or 8.1.

Your sister must have installed an old programme that is reliant on MSXML4 for it to be present after a PSI scan.

If version 4.30.2100.0 is currently installed then that PC is vulnerable.

If it is updated to version 4.30.2117.0 it will be EOL as at April 2014 & on that basis no one with it installed can be absolutely sure it is not vulnerable because there is no support for it & Secunia does not track it any more.

Hope this helps.



--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
henry8th RE: MSXML 4 on Windows 8.1
Member 9th Oct, 2014 01:29
Score: 15
Posts: 19
User Since: 23rd May 2013
System Score: N/A
Location: US
Last edited on 9th Oct, 2014 01:39
Thanks Maurice.

Is there, to your knowledge, a Microsoft link, so I can at least install the 4.30.2117.0 version for Windows 8.1 or does "not native" mean no update links? If I uninstall MSXML 4 completely, is there a way to re install if a dependent program is found later.



--
Mister P
Was this reply relevant?
+0
-0
Maurice Joyce RE: MSXML 4 on Windows 8.1
Handling Contributor 9th Oct, 2014 01:50
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
1.The link is here:

http://www.microsoft.com/en-us/download/details.as...

*** The MSXML.MSI 2.3MB is the actual installation file reqd.

Once installed you should run a manual Windows Update scan - there could be additional updates.

Once the job is done correctly a full Secunia scan should give this result:

https://43fckq.bn1301.livefilestore.com/y2pHcRE_V2...

2. Rather than uninstall it you could rename the offending file giving it an extension of .OLD - that is easily reversible if required later.

Hope this helps a bit more.

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
henry8th RE: MSXML 4 on Windows 8.1
Member 9th Oct, 2014 02:45
Score: 15
Posts: 19
User Since: 23rd May 2013
System Score: N/A
Location: US
No change. Still have 4.30.2100.0 on my sister's 8.1 computer. It did not add 4.30.2117.0.
I noticed that Windows 8.1 was not on system requirements. I choose the MSXML.MSI 2.3 to download and install as you indicated. It gave me two options, repair or redistribute. I choose the repair option. Rebooted and checked for Windows Updates when finished to see if that was the problem but did not change anything. I didn't know what "redistribute to the internet" option meant so I was afraid to try.

Also the link to see how it should look took me to a Microsoft account log in screen.

Any thoughts.

--
Mister P
Was this reply relevant?
+0
-0
ddmarshall RE: MSXML 4 on Windows 8.1
Dedicated Contributor 10th Oct, 2014 14:35
Score: 1250
Posts: 992
User Since: 8th Nov 2008
System Score: N/A
Location: UK
Try installing the update manually from http://www.microsoft.com/en-us/download/details.as...

--
Was this reply relevant?
+0
-0
henry8th RE: MSXML 4 on Windows 8.1
Member 12th Oct, 2014 15:44
Score: 15
Posts: 19
User Since: 23rd May 2013
System Score: N/A
Location: US
Downloaded, but could not install. A pop up box appeared with the heading " Windows Installer".
Message as follows: "Error opening installation log file. Verify that the specified log file location exists and is writable."



--
Mister P
Was this reply relevant?
+0
-0
ddmarshall RE: MSXML 4 on Windows 8.1
Dedicated Contributor 13th Oct, 2014 22:59
Score: 1250
Posts: 992
User Since: 8th Nov 2008
System Score: N/A
Location: UK
The error message would usually indicate that there is some corruption causing the installer to try to write its log file to the wrong location.

Things you can try:
Restart Windows (not Shutdown).
Run Disk Clean-up and select Temporary files and Log files to clean up.
Enter %temp% in the Search box, press Enter and delete any log files in the folder that opens.

--
Was this reply relevant?
+0
-0
sueskaPSI RE: MSXML 4 on Windows 8.1
Member 14th Oct, 2014 20:19
Score: 1
Posts: 1
User Since: 14th Oct 2014
System Score: N/A
Location: US
Like the original poster, Secunia PSI detected MSXML4 on my Windows 8.1. In my case the MSXML4 turned out to be included in a trial version of NTI Media Maker 9 that was added by the PC vendor. Since this was a program that I did not intend to use, uninstalling the program was the solution for me. Hope my example may be helpful to others.
I am a new user to PSI and wish I would have read your posts sooner. I would have known to just right click on the icon in the report to find the path instead of searching the whole drive for the MSXML4 dll.
Thanks for all your research and input. Regards
Was this reply relevant?
+1
-0

This thread has been marked as locked.