Sk09 MSXML 4.0 SP2 Security Update (KB927978)
Дата последней публикации: 14/11/2006
Размер файла: 5.4 МБ
A vulnerability exists in the XMLHTTP ActiveX control within Microsoft XML Core Services that could allow for remote code execution
http://support.microsoft.com/kb/927978 [more]MS06-071: Security update for Microsoft XML Core Services 4.0
View products that this article applies to. INTRODUCTION
Known issues with this security update
INTRODUCTION
Microsoft has released security bulletin MS06-071. The security bulletin contains all the relevant information about the security update. This information includes file manifest information and deployment options. To view the complete security bulletin, visit one of the following Microsoft Web sites: • Home users:
http://www.microsoft.com/athome/security/update/bulletins/200611.mspx (http://www.microsoft.com/athome/security/update/bulletins/200611.mspx)
• IT professionals:
http://www.microsoft.com/technet/security/bulletin/MS06-071.mspx (http://www.microsoft.com/technet/security/bulletin/MS06-071.mspx)
Back to the top
Known issues with this security update
• If you have multiple versions of Microsoft XML Core Services (MSXML) installed, you may have to install multiple packages for this security update. Additionally, if you install a version of MSXML after you install this security update, you may have to install an additional package for this security update. For more information about the different MSXML versions that are available or included with various Microsoft products or software updates, click the following article number to view the article in the Microsoft Knowledge Base:
269238 (http://support.microsoft.com/kb/269238/) List of Microsoft XML Core Services (XML Parser) versions
• Security update package 927978 for MSXML 4.0 is a complete installation package. You can use this package to install MSXML 4.0 Service Pack 2 (SP2) on a computer that has no earlier versions of MSXML 4.0 installed. You can also use this package to update an existing installation of MSXML 4.0, of MSXML 4.0 Service Pack 1 (SP1), or of MSXML 4.0 SP2.
• Windows Update and Microsoft Update only offer security update package 927978 if an earlier version of MSXML 4.0, of MSXML 4.0 SP1, or of MSXML 4.0 SP2 is already installed on the computer.
• The file that security update package 927978 for MSXML 4.0 installs is listed in the following table.File Name Version Date Time Size
Msxml4.dll 4.20.9841.0 11/4/2006 2:14 1.18 MB
Note This security update is installed in both side-by-side mode and in the %SystemRoot%\System32 folder.
• Security update 927978 for MSXML 4.0, for MSXML 4.0 SP1, and for MSXML 4.0 SP2 does not support the complete removal of MSXML 4.0 because this version of MSXML is installed in side-by-side mode. To work around this issue, follow these steps:1. Remove security update 927978 by using the Add or Remove Programs item in Control Panel.
2. Delete the MSXML4.dll file from the %SystemRoot%\System32 folder.
3. Repair the previous installation of MSXML 4.0 by using the Add or Remove Programs item in Control Panel.
The earlier versions of the Msxml4.dll and Msxml4r.dll files are restored to both the side-by-side folder and the %SystemRoot%\System32 folder.
• To install this security update in quiet mode with verbose logging, and without restarting the computer, use a command-line command that resembles the following:
msxml4-kb927978-enu.exe /q reboot=reallysuppress /l*v c:\kb927978.log A detailed log of the installation process will be located in the file that you specify in the command. In this example, the file is C:\KB927978.log.
• You may receive the following error message when you install this security update:
Could not register type library for file c:\Windows\system32\msxml4.dll. Contact your support personnel. When this error occurs, you may also note information that resembles the following in the log file:
Error 1911. Could not register type library for file c:\Windows\system32\msxml4.dll. Contact your support personnel.
MSI (s) (20:18) [17:52:31:612]: Product: MSXML 4.0 SP2 (KB925672) -- Error 1911. Could not register type library for file c:\Windows\system32\msxml4.dll. Contact your support personnel.
=== Logging stopped: 11/10/2006 17:53:07 ===
MSI (c) (34:20) [17:53:07:252]: Note: 1: 1708
MSI (c) (34:20) [17:53:07:260]: Product: MSXML 4.0 SP2 (KB925672) -- Installation failed.
MSI (c) (34:20) [17:53:07:267]: Windows Installer installed the product. Product Name: MSXML 4.0 SP2 (KB925672). Product Version: 4.20.9839.0. Product Language: 1033. Installation success or error status: 1603.
MSI (c) (34:20) [17:53:07:313]: Grabbed execution mutex.
MSI (c) (34:20) [17:53:07:319]: Cleaning up uninstalled install packages, if any exist
MSI (c) (34:20) [17:53:07:331]: MainEngineThread is returning 1603
=== Verbose logging stopped: 11/10/2006 17:53:07 ===
To work around this problem, manually install the security update and click Ignore when the error message is displayed.
[/more]
. А так, можно и порусски почитать у МС. 
Хотя датирован аж 2005-м годом