Security Threat!

General Topics
1

Secunia scanner finds MS XML 6 core service to be of threat & recommends an update should be installed.

Where can I find an upgrade for it?

Hoping to hear fromm you geniuses,

Regards!

2

screenshot.

3

Hi Yezinki!

I think this message simply sais that an update is available and should be installed…
First I’d try to get it via Microsoft Update (~Windows Update with all Microsoft products) as it is a Microsoft “product”…

If there is no update avaliable via Microsoft Update, you should use the option Secunia gives you…
The instruction is in the lower part of your screenshot (between the two toolboxes…)

yours
onlysomeone

4

Thanks but no update is available.

Secunia option gives an error displaying URL unable to open.

I manually installed 3 patches don’t know which fixed it…

  1. msxml6-KB925673-enu-x86

  2. msxml6_SDK

  3. msxml

Regards.

Secunia displayed a message that it’s been patched & no more a threat…but don’t know which fixed it.

5

I never used Secunia and don’t know how it exactly works…
But nice to hear that it is solved now! :wink:

yours
onlysomeone

6

Try it you’ll like it but you need Java:
http://secunia.com/vulnerability_scanning/online

I even have the Personal Software Inspector:
http://secunia.com/vulnerability_scanning/personal

7

I’ve found that the Secunia PSI is pretty much on to it, regarding newly reported vulnerabilities or out of date software. The database of software the company monitors is very large, and covers all of the common ones.
A useful aid to security.

8

I also use Secunia PSI and it does a very good job.

9

I did an online scan and it said that I have no “insecure versions” :slight_smile:

Really nice program!
I think I will take this scan again!

yours
onlysomeone

10

Yezinki, under TOOLBOX select IGNORE THIS PROGRAM. The file in question is part of PerfectDisk and NOT MS XML Services as PSI seems to think.

11

[b]My security software indicates that msxml6.dll is insecure.
The installation package for PerfectDisk 2008 includes a distrubution of msxml6.dll (Raxco has permission from Microsoft allowing us to re-distrubute msxml6.dll as it is not “protected” - found in Windows dllcache).

When you run the web-download installation of PerfectDisk 2008, it extracts the installation package contents into the Program Files\Raxco\PerfectDisk2008Install folder and then starts the installation process. During installation, msxml6.dll is only installed into Program Files\Raxco\PerfectDisk\PerfectDisk2008 if PerfectDisk 2008 for Exchange is installed. msxml6.dll is only used by PerfectDisk for Exchange. msxml6.dll is not used by PerfectDisk 2008 Professional, PerfectDisk 2008 Server, PerfectDisk for Windows Home Server, or PerfectDisk for VMware.

If you like, you can delete the Program Files\Raxco\PerfectDisk2008Install folder and contents. For the next update to PerfectDisk 2008, the full installs of PerfectDisk 2008 will have the most recent msxml6.dll file.
[/b]
Raxco’s reply!!