I have two patches for Visio 2002 that just will not go away.
MS06-038 917284 917150 (English/MUI) Vulnerabilities in Microsoft Visio 2002
(SEE NOTES) (Rev 2)
MS06-062 922581 923273 (English/MUI) Vulnerabilities in Visio (SEE NOTES)
(Rev 2)
These two are on my vulnerability list. I run the deployment from PatchLink
and I ran them from Microsoft Update.
And they still keep showing up.
Any ideas?
________________________________________
Delon E. Weuve
Senior Network Engineer
Office of Auditor of State
State of Iowa
United States of America
first one requires
Mso.dll with file version >= 10.0.6804 in directory office10 under the path found in HKLM\SOFTWARE\Microsoft\Shared Tools,SharedFilesDir
and the registry keys
HKLM\SOFTWARE\Classes\Installer\Patches\3BEC146DB3943C44F90A6B57300230BF
HKLM\SOFTWARE\Classes\Installer\Patches\348987614E84F0D449866C584E0C9FE5
The second is looking for
Mso.dll with version (not file version) >= 10.0.6817 in directory Microsoft Shared\Office10 under the path found in HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion,CommonFilesDir
and the registry key
HKLM\SOFTWARE\Classes\Installer\Patches\0D3DF6A41CFE92149ADFA0C0FE8A3A9C
--
Shaun Pond
I need some more information, if you have it.
I was looking over the first patch and its requirements. everything seems OK
except the second registry key you have listed. Any idea what is suppose to
be under that? My system doesn't have that registry key at all.
Thanks.
________________________________________
Delon E. Weuve
Senior Network Engineer
Office of Auditor of State
State of Iowa
United States of America
>>> Shaun Pond<sp...@no-mx.forums.novell.com> 1/23/2010 9:22 AM >>>
no idea, all that's listed in the patch signature is the key
--
Shaun Pond
Thanks Shaun...
I'll keep you posted.
________________________________________
Delon E. Weuve
Senior Network Engineer
Office of Auditor of State
State of Iowa
United States of America
>>> Shaun Pond<sp...@no-mx.forums.novell.com> 1/26/2010 11:53 PM >>>
ok
--
Shaun Pond
I have some more information on the Visio 2002 patches:
On the first one (MS06-038 917284 917150):
The Mso.dll meets the requirement and the first registry key, starting with
3BE, is there. The other one, starting with 348 is not there. I tested this
by adding the registry key. I didn't create any keys under that one and the
patch dropped off the list.
On the second one (MS06-062 922581 923273):
The Mso.dll meets the requirement but the registry key is not there. When I
added the one you mentioned, it dropped from the patch list.
Any chance that Novell/Patchlink will modify these patch definitions to take
this into account?
ticket 100201-000011 raised to get these checked...
--
Shaun Pond
can you take a look at http://support.lumension.com/scripts/rightnow.cfg/php.exe/enduser/std_adp.php?p_faqid=161
and tell me if that applies?
--
Shaun Pond
if I don't hear back pretty soon, Lumension will close this ticket
--
Shaun Pond
Lumension have closed the ticket. If this is a problem, I need to know
in the next few days
--
Shaun Pond