Forum Thread: Visual C still reported as insecure after updating

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Microsoft
And, this specific program:
Microsoft Visual C++ 2005 Redistributable Package (x86)

This thread has been marked as locked.
alanwilm1 Visual C still reported as insecure after updating
Member 3rd Sep, 2009 13:18
Ranking: 0
Posts: 1
User Since: 3rd Sep, 2009
System Score: N/A
Location: UK
I have updated Visual C++ 2005 and 2008, but Secunia continues to report them as insecure even after re-scanning and re-booting. I am using Windows XP (Prof)

--
miller46

OS1946 RE: Visual C still reported as insecure after updating
Member 3rd Sep, 2009 15:22
Score: 0
Posts: 11
User Since: 8th Dec 2008
System Score: N/A
Location: US
Same here. Don't know what to do next. Help??

--
Dell Vostro 200
Intel Core 2 Duo
Windows XP Home SP3
IE8

"A lie can travel halfway round the world while the truth is putting on its shoes." MARK TWAIN (?)
Was this reply relevant?
+0
-0
Alouette RE: Visual C still reported as insecure after updating
Member 3rd Sep, 2009 15:41
Score: 0
Posts: 3
User Since: 1st Jun 2008
System Score: N/A
Location: Weinheim, DE
I have a similar problem. The ATL versions 8.0.50727.91 and 8.0.50727.762 of Visual C++ 2005 and the ATL version 9.0.30729.1 of Visual C++ 2008 Redistributable Package are indicated as unsecure. It is recommended either to update to the current versions or to uninstall the "program".

After updating the unsecure versions still persist in installations such as
C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a 1e18e3b_8.0.50727.91_x-ww_6e85597b\ATL80.dll

It is not possible to uninstall the old versions, only the updated onces. How can I get rid of the old stuff? Just delete the installation path or what?

Any answer is highly appreciated.

Was this reply relevant?
+0
-0
Agapanthus RE: Visual C still reported as insecure after updating
Member 3rd Sep, 2009 18:58
Score: 0
Posts: 11
User Since: 11th Jun 2009
System Score: N/A
Location: N/A
Yes, same here. I tried opening the MS update files using 7-zip but could not identify the updated DLL files (this method has worked in the past when Microsoft updates fail to bring a system up to date). Let's hope either Secunia or Microsoft sort this one out soon...
Was this reply relevant?
+0
-0
thebigeast RE: Visual C still reported as insecure after updating
Member 3rd Sep, 2009 19:44
Score: -1
Posts: 4
User Since: 3rd Sep 2009
System Score: N/A
Location: US
I'm in the same boat. Back on 07/21/09, Malwarebytes reported a false positive regarding this program. I sent them a note about it just yesterday after having a false positive on something else. Back on 07/21 I did not realize it had been a false positive and deleted it. I restored the file last night (which was the install.exe file).

I thought the new PSI warning had something to do with that. Turns out based on this forum posting, others are having the same problem and what happened to me was a coincidence. I did as others have done - I went to Windows update and nothing was showing out of date. I also downloaded all 4 updates showing in PSI for my 4 vulnerabilities having to do with both 2005 and 2008 Visual C++ Redistributable Packages. I installed them to no effect.

Apparently this has happened before. I guess we'll see how PSI responds.
Was this reply relevant?
+0
-0
Viking RE: Visual C still reported as insecure after updating
Member 3rd Sep, 2009 19:46
Score: 3
Posts: 4
User Since: 18th Dec 2007
System Score: N/A
Location: N/A
Same here. Installed, rebooted, rescanned, insecure version still present.

C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a 1e18e3b_8.0.50727.42_x-ww_6e805841\ATL80.dll
C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a 1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.dll
Was this reply relevant?
+0
-0
Mikee7 RE: Visual C still reported as insecure after updating
Member 3rd Sep, 2009 20:06
Score: 0
Posts: 3
User Since: 3rd Sep 2009
System Score: N/A
Location: N/A
Chatted with Microsoft online about this subject this morning and he stated that it must be a false positive on Secunia's end...there was only one that could be updated out of 12 insecure. I have a Vista 64 Bit OS. He suggested to check Windows Updates and if nothing comes up, your good!
Was this reply relevant?
+0
-0
Mrosen7542 RE: Visual C still reported as insecure after updating
Member 3rd Sep, 2009 20:55
Score: 0
Posts: 2
User Since: 26th Nov 2008
System Score: N/A
Location: N/A
Hi. I didn't try to update these programs because the downloads for these I think are the same versions. Also, both programs are also listed under Patched so I think this may be a psi error.
Mark
Was this reply relevant?
+0
-0
joe53 RE: Visual C still reported as insecure after updating
Member 3rd Sep, 2009 21:57
Score: 4
Posts: 8
User Since: 19th Dec 2008
System Score: N/A
Location: CA
This advisory was released by Secunia on July 28, and updated August 12. Why is PSI only informing me now? Looks like a definite Secunia error to me.
Was this reply relevant?
+0
-0
winged RE: Visual C still reported as insecure after updating
Member 3rd Sep, 2009 22:59
Score: 0
Posts: 1
User Since: 10th Aug 2009
System Score: N/A
Location: SE
Isn't it just a case of having both the old and new versions present at once? Apparently the installer for VC++ 2008 SP1 does NOT uninstall old files. At least that was the case for me, whereas the update for VC++ 2005 DID uninstall the old files. I have one patched version of VC++ 2005, and two versions of VC++ 2008 - one updated + the old insecure install - present on my computer after updating those.

regards,
w
Was this reply relevant?
+0
-0
lfletch RE: Visual C still reported as insecure after updating
Member 3rd Sep, 2009 23:55
Score: 0
Posts: 1
User Since: 16th Feb 2009
System Score: N/A
Location: N/A
Same here.
Tried updating from Microsoft but updates came down
with 0 bytes in them.
What next?

Is Secunia wrong on this?
I haven't updated any Microsoft stuff since last Tuesday.
How would MS updates have gotten in?
Was this reply relevant?
+0
-0
CSGalloway RE: Visual C still reported as insecure after updating
Member 4th Sep, 2009 00:42
Score: 3
Posts: 22
User Since: 12th Sep 2008
System Score: N/A
Location: US
Could it be that it works if you restart the computer after every download?
Was this reply relevant?
+0
-0
Maurice Joyce RE: Visual C still reported as insecure after updating
Handling Contributor 4th Sep, 2009 00:54
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
I have just updated them fairly easily.

1. Download & save this to desktop.

http://www.microsoft.com/downloads/details.aspx?fa...

2. Open the folder on each of the insecuries PSI is showing U - delete the offending dll's (one is a folder)

3. Rerun PSI - if done correctly it will give U a clean bill of health - if not return to item 2. & finish the job & rerun PSI.

4. Once there are no insecurities run the saved download from the desktop. When asked select the repair option. Reboot when asked.

U should now be secure again.

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
LazerFX RE: Visual C still reported as insecure after updating
Member 4th Sep, 2009 01:01
Score: 0
Posts: 2
User Since: 17th Sep 2008
System Score: N/A
Location: UK
Actually, the WinSXS folder is designed so that applications that expect different versions of DLL's to be available can use them - it's the application cache, similar to the Global Assembly Cache for .NET applications.

It's Microsoft's attempt to prevent DLL-Hell, by permitting multiple strongly-signed DLL's to be made available under the same name.

For instance, C:\Windows\winsxs\x86_microsoft.vc80.atl_1fc8b3 b9a1e18e3b_8.0.50727.762_none_11ecb0ab9b2caf3c\ATL 80.dll is reference the Visual C++ 2008 redistributable (vc80) named ATL80.dll, with the signatures of 1fc8b3b9a1e18e3b and 11ecb0ab9b2caf3c, and the file version of 8.0.50727.762.

Removing these from the system can, and most likely will cause problems - because applications will expect a specific version, and when that is not available, they will fail to work.

This is something Secunia needs to stop detecting - as it has only just started to detect this folder, it should be removed - these are false-positives.
Was this reply relevant?
+0
-0
Maurice Joyce RE: Visual C still reported as insecure after updating
Handling Contributor 4th Sep, 2009 01:51
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 4th Sep, 2009 02:21
@LazerFX

Happy to retract my post above but my tinkering in the registry reveals a slightly different outcome.

I believe the security update by Microsoft is attempting to update ATL.

The update indicates to me that the file in your post
C:\Windows\winsxs\x86_microsoft.vc80.atl_1fc8b3 b9a1e18e3b_8.0.50727.762_none_11ecb0ab9b2ca f3c\ATL 80.dll

was replaced by

C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a 1e18e3b_8.0.50727.4053_x-ww_473666fd\ATL80. dll

Am I reading it incorrectly?

This update also appears to replace the 2008 version.
C:\WINDOWS\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a 1e18e3b_9.0.30729.4148_x-ww_353599c2\atl90.dll

I also believe VC80 is version 2005 & VC90 is version 2008.

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
Confused Computer User RE: Visual C still reported as insecure after updating
Member 4th Sep, 2009 02:06
Score: 0
Posts: 11
User Since: 21st Apr 2009
System Score: N/A
Location: CA
I know that for me the C++ 2005 was instaled by a program called eraser. Now I unistalled that and installed a newer verion that uses MV C++ 2008. So I uninstalled C++ 2005 from add/remove yet SECUNIA is still piking it up.

I did the Update recomended above for the 2008 version But I'm not up for messing with the registry.

Any sugestions. I want to get rid of the 2005 version And I thought I did.


Help...

--
The answer is 42
Was this reply relevant?
+0
-0
thebigeast RE: Visual C still reported as insecure after updating
Member 4th Sep, 2009 06:54
Score: -1
Posts: 4
User Since: 3rd Sep 2009
System Score: N/A
Location: US
Anyone know how Visual C is usually downloaded onto your system? I did not know I even had the program until this problem and the one with Malwarebytes.

I assume it must come attached to a number of other programs. Which may stop behaving correctly if I remove this program and its various components. I know two of the programs on my system are using older versions of other programs underlying them such as an older version of Java. They will not work with the newer version - I have to wait for the program provider to update their program.

For now I do not plan to do anything regarding this. I tried updating everything and rebooting each time but nothing worked. I agree with those who think this is a false positive and it's up to Secunia to fix it.
Was this reply relevant?
+0
-0
CSGalloway RE: Visual C still reported as insecure after updating
Member 4th Sep, 2009 07:00
Score: 3
Posts: 22
User Since: 12th Sep 2008
System Score: N/A
Location: US
Microsoft Visual C++ 2005 Redistributable Package (x86) 8.0.50727.762
Microsoft Visual C++ 2005 Redistributable Package (x86) 8.0.50727.42
Microsoft Visual C++ 2008 Redistributable Package 9.0.30729.1

Using WinXP Pro sp3, IE 7.

Any ideas?

Is this a false positive ?
Was this reply relevant?
+0
-0
Alan_Baxter RE: Visual C still reported as insecure after updating
Member 4th Sep, 2009 08:48
Score: 0
Posts: 61
User Since: 1st Mar 2009
System Score: N/A
Location: US
Last edited on 4th Sep, 2009 08:52
on 3rd Sep, 2009 20:06, Mikee7 wrote:
Chatted with Microsoft online about this subject this morning and he stated that it must be a false positive on Secunia's end...there was only one that could be updated out of 12 insecure. I have a Vista 64 Bit OS. He suggested to check Windows Updates and if nothing comes up, your good!

I'll have to agree with Mikee7. Nothing comes up in Windows Update and the following article indicates that any vulnerabilities we may be exposed to are addressed in IE updates.

http://www.microsoft.com/technet/security/advisory...
(unknown source)
Home User Guidance: To help better protect customers while developers update their components and controls, Microsoft has developed a new defense-in-depth technology. This new defense-in-depth technology built into Internet Explorer with the new update helps to protect customers from future attacks using the Microsoft Active Template Library vulnerabilities described in this Advisory and Microsoft Security Bulletin MS09-035. Home users signed up for Automatic Updates will receive the new Internet Explorer update automatically and do not have to take any further action. Home Users will automatically be better protected from future attacks against the vulnerabilities addressed in this Security Advisory and in Microsoft Security Bulletin MS09-035.
Was this reply relevant?
+0
-0
swstein RE: Visual C still reported as insecure after updating
Member 4th Sep, 2009 11:07
Score: 0
Posts: 2
User Since: 3rd Jul 2009
System Score: N/A
Location: N/A
My secunia is listing Visual C++ 7 times now.

2 of them are 64-bit versions. This computer isn't even a 64 bit machine.

C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a 1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.dll - version 8.0.50727.762

C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a 1e18e3b_8.0.50727.42_x-ww_6e805841\ATL80.dll - version 8.0.50727.42

C:\WINDOWS\WinSxS\amd64_Microsoft.VC80.ATL_1fc8b3b 9a1e18e3b_8.0.50727.42_x-ww_a08a3e21\ATL80.dll - version 8.0.50727.42

C:\WINDOWS\WinSxS\ia64_Microsoft.VC80.ATL_1fc8b3b9 a1e18e3b_8.0.50727.42_x-ww_9ddb3ee1\ATL80.dll - version 8.0.50727.42

C:\WINDOWS\WinSxS\amd64_Microsoft.VC80.ATL_1fc8b3b 9a1e18e3b_8.0.50727.762_x-ww_fdbc5a54\ATL80.dll - version 8.0.50727.762

C:\WINDOWS\WinSxS\ia64_Microsoft.VC80.ATL_1fc8b3b9 a1e18e3b_8.0.50727.762_x-ww_fb0d5b14\ATL80.dll - version 8.0.50727.762

C:\WINDOWS\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a 1e18e3b_9.0.21022.8_x-ww_312cf0e9\atl90.dll - version 9.0.21022.8
Was this reply relevant?
+0
-0
oldyorkie RE: Visual C still reported as insecure after updating
Member 4th Sep, 2009 12:14
Score: 6
Posts: 32
User Since: 7th Aug 2008
System Score: N/A
Location: UK
Last edited on 4th Sep, 2009 12:20
Have looked at Microsoft info on this ...and seen this....

Security Update Deployment

Inclusion in Future Service Packs

The update for this issue will be included in Visual Studio 2005 Service Pack 2


Suggest we all stop panicking and wait for update from vendor ;-)

--

HP dv7
3.00GB RAM
Win 7 Home Premium 64 bit
AMD Phenom P820 II Triple Core
IE 9
Was this reply relevant?
+0
-0
Maurice Joyce RE: Visual C still reported as insecure after updating
Handling Contributor 4th Sep, 2009 12:31
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Not sure that anyone is panicing. As far as I am concern the problem is fixed & I have a secure environment from Secunia & Microsoft without the aid of SP2.

This is a very informative thread & people are rightly concerned that either Microsoft have not patched correctly (my thought hence SP2 is on the way)) or Secunia is giving a false positive (unlikely).

What is a fact is people who are not familiar with the folder sxs (side by side) should not tinker unless they are absolutely sure they know the outcome as @LazerFX correctly points out. This includes trying to remove version 2005.



--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
OS1946 RE: Visual C still reported as insecure after updating
Member 4th Sep, 2009 13:07
Score: 0
Posts: 11
User Since: 8th Dec 2008
System Score: N/A
Location: US
Last edited on 4th Sep, 2009 13:21
on 4th Sep, 2009 00:54, Maurice Joyce wrote:
I have just updated them fairly easily.

1. Download & save this to desktop.

http://www.microsoft.com/downloads/details.aspx?fa...

2. Open the folder on each of the insecuries PSI is showing U - delete the offending dll's (one is a folder)

3. Rerun PSI - if done correctly it will give U a clean bill of health - if not return to item 2. & finish the job & rerun PSI.

4. Once there are no insecurities run the saved download from the desktop. When asked select the repair option. Reboot when asked.

U should now be secure again.


Seems to have worked for me. Installs a different version of -- atl90.dll -- 9.0.30729.1 is changed to 9.0.30729.4148. Re-scanned with PSI and came out clean.

If everything continues to function properly all will be well!

Now, if only I knew what these programs (Microsoft Visual C++) actually do? :)


--
Dell Vostro 200
Intel Core 2 Duo
Windows XP Home SP3
IE8

"A lie can travel halfway round the world while the truth is putting on its shoes." MARK TWAIN (?)
Was this reply relevant?
+0
-0
OS1946 RE: Visual C still reported as insecure after updating
Member 4th Sep, 2009 13:28
Score: 0
Posts: 11
User Since: 8th Dec 2008
System Score: N/A
Location: US
Last edited on 4th Sep, 2009 13:30
Just scanned again and PSI has stopped picking up the Microsoft Visual C++ files (programs)???

They are still listed as installed when I check "Add or Remove Programs."

Curious!

--
Dell Vostro 200
Intel Core 2 Duo
Windows XP Home SP3
IE8

"A lie can travel halfway round the world while the truth is putting on its shoes." MARK TWAIN (?)
Was this reply relevant?
+0
-0
oldyorkie RE: Visual C still reported as insecure after updating
Member 4th Sep, 2009 13:35
Score: 6
Posts: 32
User Since: 7th Aug 2008
System Score: N/A
Location: UK
on 4th Sep, 2009 12:31, Maurice Joyce wrote:
Not sure that anyone is panicing. As far as I am concern the problem is fixed & I have a secure environment from Secunia & Microsoft without the aid of SP2.

This is a very informative thread & people are rightly concerned that either Microsoft have not patched correctly (my thought hence SP2 is on the way)) or Secunia is giving a false positive (unlikely).

What is a fact is people who are not familiar with the folder sxs (side by side) should not tinker unless they are absolutely sure they know the outcome as @LazerFX correctly points out. This includes trying to remove version 2005.


Hi Maurice...
you seem to have taken offence to my post.....it was not an attack in any way shape or form....merely a pointer to the fact that folks can rest easy (to a degree) due to the fact that a MS fix is on the cards in the very near future.

The problem with people posting their own "how to's" is that the methods are often taken as "read" and mistakes are easily made.

Therefore (in my humble opinion) it is often better to wait for the fix.

oldyorkie

--

HP dv7
3.00GB RAM
Win 7 Home Premium 64 bit
AMD Phenom P820 II Triple Core
IE 9
Was this reply relevant?
+0
-0
Mcd73165 RE: Visual C still reported as insecure after updating
Member 4th Sep, 2009 15:00
Score: 8
Posts: 74
User Since: 13th May 2009
System Score: N/A
Location: US
OS1946, same here. Says that those programs were removed but of course they're not. (Microsoft Visual C++)
Was this reply relevant?
+0
-0
Mike_70 RE: Visual C still reported as insecure after updating
Member 4th Sep, 2009 15:23
Score: 0
Posts: 1
User Since: 4th Sep 2009
System Score: N/A
Location: N/A
Last edited on 4th Sep, 2009 15:24
Folks

I just reran PSI and the three MSXML programs, the multiple MS C++ programs, and 28 mentions of an unsecure IE release 7 (I run IE 8, not 7) are no longer mentioned.

Without any Windows updates, no strange moves on my side, the PSI indicated problems went away.

Thank you, someone, for fixing these errors.
Was this reply relevant?
+0
-0
Alan_Baxter RE: Visual C still reported as insecure after updating
Member 4th Sep, 2009 16:19
Score: 0
Posts: 61
User Since: 1st Mar 2009
System Score: N/A
Location: US
Me too. I rescanned this morning. No mention of those programs for me anymore either. Thank you, Secunia, for such a quick fix.
Was this reply relevant?
+0
-0
oldyorkie RE: Visual C still reported as insecure after updating
Member 4th Sep, 2009 16:57
Score: 6
Posts: 32
User Since: 7th Aug 2008
System Score: N/A
Location: UK
if you take a closer look, you will see they have been removed from Secunia scan base!

--

HP dv7
3.00GB RAM
Win 7 Home Premium 64 bit
AMD Phenom P820 II Triple Core
IE 9
Was this reply relevant?
+0
-0
bjm__ RE: Visual C still reported as insecure after updating
Member 4th Sep, 2009 19:59
Score: 64
Posts: 374
User Since: 9th Mar 2009
System Score: N/A
Location: US
Last edited on 6th Sep, 2009 08:16
Question I would like answered ...
Why were they in the Scan Base and then Removed from the Scan Base

Secunia had a reason to include Visual C in Scan Base and then...
what changed that Visual C was removed from Scan Base

Was there a real vulnerability as Maurice Joyce understood and because of his dedication to this Forum tried to help us with a step by step procedural fix.

Or, was there no real vulnerability ?
Or, has Secunia just responded to upset users and backed away from the lesser known and more difficult to fix programs ?

Anyone care to offer a comment...

Regards
bjm-

My programs list went from 70 to 110 and back to 70 in one day. Why?
My insecure went from 1 (the ever present IE8) to 8 and back to 1 in one day. Why?
My browsers went from 2 (IE8 & FF) to 6 (multiple IE8) and back to 2 in one day. Why?

Was this reply relevant?
+0
-0
PHIL53 RE: Visual C still reported as insecure after updating
Member 5th Sep, 2009 11:44
Score: 0
Posts: 12
User Since: 23rd Feb 2009
System Score: N/A
Location: Tetbury, Gloucestershire, UK
O.K. days of trying to up-date the Visual C insecure bits and get back to 100%. This morning I decided to do a full scan, first thing. 100% secure.
I wonder who pushed who's buttons to get this sorted.
Many thanks who ever it was.
Was this reply relevant?
+0
-0
Jordan_ RE: Visual C still reported as insecure after updating
Member 5th Sep, 2009 14:54
Score: 0
Posts: 1
User Since: 5th Aug 2009
System Score: N/A
Location: N/A
on 5th Sep, 2009 11:44, PHIL53 wrote:
O.K. days of trying to up-date the Visual C insecure bits and get back to 100%. This morning I decided to do a full scan, first thing. 100% secure.
I wonder who pushed who's buttons to get this sorted.
Many thanks who ever it was.


Does Visual C++ appear in our updated programs list? In my Secunia PSI it doesn't appear, but I installed the latest version (from the link Secunia suggested me). From applications setting, I can see Microsoft Visual C++ 2008 Redistributable- x86 9.0.30729.4148 and I think it is the latest version, but Secunia PSI doesn't notice it, nor in insecure programs, nor in End-Of-Life programs, nor in updated programs.
Can you check if Visual C++ appears? Thanks and sorry for my lame English.
Was this reply relevant?
+0
-0
PHIL53 RE: Visual C still reported as insecure after updating
Member 5th Sep, 2009 15:18
Score: 0
Posts: 12
User Since: 23rd Feb 2009
System Score: N/A
Location: Tetbury, Gloucestershire, UK
Last edited on 5th Sep, 2009 15:47
on 5th Sep, 2009 14:54, Jordan_ wrote:
Does Visual C++ appear in our updated programs list? In my Secunia PSI it doesn't appear, but I installed the latest version (from the link Secunia suggested me). From applications setting, I can see Microsoft Visual C++ 2008 Redistributable- x86 9.0.30729.4148 and I think it is the latest version, but Secunia PSI doesn't notice it, nor in insecure programs, nor in End-Of-Life programs, nor in updated programs.
Can you check if Visual C++ appears? Thanks and sorry for my lame English.



All these number drive me nuts but I can see VisualC++ 2005 ATL update kb973923-x86 8.0.50727.4053
The only thing that happened this morning was when I switch on the computer, a windows update was waiting to be loaded and that did refer to Visual C++. ME been Me I just pressed the run button and the result was no more unpatched bits.
I've heard of "flying by the seat of your pants" but computing is just as much fun!

As for lame English, No, it's usually me who gets accused of that by Slamgeden
Was this reply relevant?
+0
-0
bjm__ RE: Visual C still reported as insecure after updating
Member 5th Sep, 2009 18:13
Score: 64
Posts: 374
User Since: 9th Mar 2009
System Score: N/A
Location: US
Another question I would like answered by Secunia.

I have Visual C++ 2005 installed on my system.
Why is Visual C++ 2005 not populating into PSI Patched programs list.

I have the Visual C++ 2005 AltUpdate X86 KB973923 installed 7/28/09.

If Visual C++ 2005 has a vulnerability or is end of life or needs to be updated to Visual C++ 2008. PSI would have to see it and have it in their Data Base.

How was Visual C++ listed with PSI Patched programs and Insecure one day and then not listed with PSI the next day.

Another question I would like answered by Secunia.

PSI does list Microsoft XML Core Services (MSXML) with Patched programs.
One day XML is Insecure and the next day XML is Not Insecure

Secunia...Please answer my questions.

Regards
bjm-

Was this reply relevant?
+0
-0

This thread has been marked as locked.