Forum Thread: Updating MSXML6

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Microsoft
And, this specific program:
Microsoft XML Core Services (MSXML) 6.x

This thread has been marked as locked.
JudithBuck Updating MSXML6
Member 17th Nov, 2009 08:55
Ranking: 0
Posts: 7
User Since: 3rd Dec, 2008
System Score: N/A
Location: UK
Secunia PSI reporting MSXML6 version 6.10.1200.0 as insecure.
Install directory/file is C:|WINDOWS\msxml6.dll.
I am running Windows XP SP3 fully patched.
MS Update scan provides no additional critical updates.
The security bulletin MS08-069 provides an update KB954459 which I installed on 15/11/08.
Can anybody advise why I have received the PSI warning a year after I apparently patched the program?
Many thanks
Judith

Maurice Joyce RE: Updating MSXML6
Handling Contributor 17th Nov, 2009 09:46
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Judith,
Can U confirm:
1. That the version showing in the Insecure tab is 6.20.1099.0?

2. Navigate to C:\Windows\System32\msxml6.dll - are the details showing

msxml6.dll 1277KB Application Extention 10/9/2008 01.14

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
JudithBuck RE: Updating MSXML6
Member 17th Nov, 2009 10:50
Score: 0
Posts: 7
User Since: 3rd Dec 2008
System Score: N/A
Location: UK
Hi Maurice,
Thanks for your prompt reply
The version showing on the 'Insecure' tab is 6.10.1200.0. and the location is C:\WINDOWS\msxml6.dll

There is also a file msxml6.dll in C:\WINDOWS\system32 with version 6.20.1099.0 and date stamp 10/9/2008 01.14.

Can I 'unregister' the old version using Regsvr32 and delete the dll?

Thanks again
Judith
Was this reply relevant?
+0
-0
Maurice Joyce RE: Updating MSXML6
Handling Contributor 17th Nov, 2009 11:06
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
How odd. Total reversal of what I have showing which is secure.

I would try an overwrite install using this link.

http://www.microsoft.com/downloads/details.aspx?fa...

Once there use this download option:

msxml6-KB954459-enu-x86.exe 931 KB

Reboot & then run a full PSI scan


10:05 17/11/2009




--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
JudithBuck RE: Updating MSXML6
Member 17th Nov, 2009 21:17
Score: 0
Posts: 7
User Since: 3rd Dec 2008
System Score: N/A
Location: UK
Thanks for the suggestion.

I've downloaded msxml6-KB954459-enu-x86.exe but unfortunately it doesn't/won't install. I get 'MSXML 6 Service Pack 2 ... Setup Interrupted'. I have not interrupted it at all - it has unpacked and then popped up the message. The only option provided on the pop-up is a 'Finish' button.

So I uninstalled the update from Add/Remove Programs and re-installed from Win Update. But no overall change to the version in C:\WINDOWS\.

In desperation I've unregistered the dll in C:\WINDOWS and renamed the file as msxml6.dll.old. Not very satisfactory but it has got it off the Secunia 'Insecure' tab.

I didn't mention in my earlier reply that the 'Patched' Secunia tab reports an install of MSXML 6 at version 6.20.1099.0 installed in C:\WINDOWS\system32.

Thanks again
Judith
Was this reply relevant?
+0
-0
Maurice Joyce RE: Updating MSXML6
Handling Contributor 18th Nov, 2009 00:37
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Judith,
That looks correct but U should not have to rename it old.

Be interesting to see if that solution works correctly.

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
daddycat gamer RE: Updating MSXML6
Member 28th Dec, 2009 10:35
Score: 0
Posts: 1
User Since: 5th Oct 2009
System Score: N/A
Location: N/A
Hi Maurice, you seem to know what you are doing, good advice on other issues. Getting the MSXML insecure warning re 6.20.1076.0 but I am running Vista and all downloads relate to XP and other operating systems, but not Vista. Any clues? I am running Advanced Secunia.
Was this reply relevant?
+0
-0
Mcd73165 RE: Updating MSXML6
Member 28th Dec, 2009 14:07
Score: 8
Posts: 74
User Since: 13th May 2009
System Score: N/A
Location: US
Hi all. I found the latest MSXML6 version is 6.30.7600 (SP3). It can be downloaded here: http://www.ssw.com.au/ssw/diagnostics/ProductDetai...
Mark
Was this reply relevant?
+0
-0
Maurice Joyce RE: Updating MSXML6
Handling Contributor 28th Dec, 2009 21:02
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
The link provided above may help. I have never used Vista but there is an interesting thread here with a solution:

http://secunia.com/community/forum/thread/show/135...

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
JudithBuck RE: Updating MSXML6
Member 31st Dec, 2009 16:59
Score: 0
Posts: 7
User Since: 3rd Dec 2008
System Score: N/A
Location: UK
Hi Mark,

Many thanks for the link to the product information on MSXML6. Interesting that the 'latest version' ie 'Microsoft(R) MSXML 6.0 SP3 6.30.7600' is shown as 'older', ie dated 17-08-2009, than older versions: SP2 and SP1.
It is hard to unravel Microsoft's strategy sometimes. I'm not alsways sure that they know the full picture. Perhaps that is why they try and refer customers back to OEMs, third parties, etc.

Rgds
Judith
Was this reply relevant?
+0
-0

This thread has been marked as locked.