Microsoft KB Archive/936181

= Description of the security update for Microsoft XML Core Services 4.0: August 14, 2007 =

Article ID: 936181

Article Last Modified on 9/27/2007

-

APPLIES TO


 * Microsoft XML Core Services 4.0

-



INTRODUCTION
Microsoft has released security bulletin MS07-042. The security bulletin contains all the relevant information about the security update. This information includes file manifest information and deployment options. To view the complete security bulletin, visit one of the following Microsoft Web sites:  Home users:

http://www.microsoft.com/protect/computer/updates/bulletins/200708.mspx

 IT professionals:

http://www.microsoft.com/technet/security/bulletin/ms07-042.mspx





Known issues with this security update
 941833 An update is available that improves the compatibility and the reliability of Microsoft XML Core Service 4.0 Service Pack 2 on a Windows Vista-based computer Security update 936181 for Microsoft XML Core Services (MSXML) 4.0, for MSXML 4.0 Service Pack 1 (SP1) and for MSXML 4.0 Service Pack 2 (SP2) does not support the complete removal of MSXML 4.0. This situation occurs because this version of MSXML is installed in side-by-side mode. To work around this issue, follow these steps:  Remove security update 936181 by using the Add or Remove Programs item in Control Panel. Delete the Msxml4.dll file from the %SystemRoot%\System32 folder.</li> Repair the previous installation of MSXML 4.0 by using the Add or Remove Programs item in Control Panel.</li></ol>

The earlier versions of the Msxml4.dll file and of the Msxml4r.dll file are restored to the side-by-side folder and to the %SystemRoot%\System32 folder.</li> You may receive the following error message when you install security update 936181 from Windows Update:

Could not register type library for file c:\Windows\system32\msxml4.dll. Contact your support personnel.

When this error occurs, you may also notice information that resembles the following in the log file:

Error 1911. Could not register type library for file c:\Windows\system32\msxml4.dll. Contact your support personnel.

MSI (s) (20:18) [17:52:31:612]: Product: MSXML 4.0 SP2 (KB936181) -- Error 1911. Could not register type library for file c:\Windows\system32\msxml4.dll. Contact your support personnel.

Logging stopped: 11/10/2006 17:53:07
MSI (c) (34:20) [17:53:07:252]: Note: 1: 1708

MSI (c) (34:20) [17:53:07:260]: Product: MSXML 4.0 SP2 (KB936181) -- Installation failed.

MSI (c) (34:20) [17:53:07:267]: Windows Installer installed the product. Product Name: MSXML 4.0 SP2 (KB936181). Product Version: 4.20.9839.0. Product Language: 1033. Installation success or error status: 1603.

MSI (c) (34:20) [17:53:07:313]: Grabbed execution mutex.

MSI (c) (34:20) [17:53:07:319]: Cleaning up uninstalled install packages, if any exist MSI (c) (34:20) [17:53:07:331]: MainEngineThread is returning 1603

Verbose logging stopped: 11/10/2006 17:53:07
To work around this problem, manually install the security update from the Microsoft Download Center, and then click Ignore when the error message is displayed. To confirm that the installation was successful, verify that the Msxml4.dll file in %systemroot%\System32 is version 4.20.9848.0.</li></ul>

<div class="moreinformation_section">

More information about this security update
 If you have multiple versions of MSXML installed, you may have to install multiple packages for this security update. Additionally, if you install a version of MSXML after you install this security update, you may have to install an additional package for this security update.

For more information about the different versions of MSXML that are available or that are included with various Microsoft products or software updates, click the following article number to view the article in the Microsoft Knowledge Base:

269238 List of Microsoft XML Parser (MSXML) versions

</li> Security update package 936181 is a complete installation package. You can use this package to install MSXML 4.0 SP2 on a computer that has no earlier versions of MSXML 4.0 installed. You can also use this package to update an existing installation of MSXML 4.0, of MSXML 4.0 SP1, or of MSXML 4.0 SP2.</li> Windows Update and Microsoft Update offer security update package 936181 only if an earlier version of MSXML 4.0, of MSXML 4.0 SP1, or of MSXML 4.0 SP2 is already installed on the computer.</li> MSXML 4.0 does not include a 64-bit parser and is supported only in Microsoft Windows on Windows 64 (WOW) mode on 64-bit operating systems. Therefore, 64-bit MSXML 4.0 packages are not available for this security update. To update the 32-bit MSXML 4.0 parser in WOW mode on a 64-bit operating system, install the 32-bit MSXML 4.0 package. For example, to update a 64-bit English-language operating system, install the Msxml4-KB936181-enu.exe package.</li> To install this security update in quiet mode together with verbose logging and without having to restart the computer, use a command that resembles the following:

msxml4-kb936181-enu.exe /q reboot=reallysuppress /l*v c:\kb936181.log

A detailed log of the installation process will be located in the file that you specify in the command. In this example, the file is C:\KB936181.log.</li> If the Msxml4.dll file is locked, the file may not be updated when you apply security update 936181. To work around this issue, use the following commands to uninstall Msxml4.dll:  MsiExec.exe /uninstall {37477865-A3F1-4772-AD43-AAFC6BCFF99F} /passive</li> Del %windir%\system32\msxml4.dll</li></ul> </li></ul>

Additional query words: update security_patch security_update security bug flaw vulnerability malicious attacker exploit registry unauthenticated buffer overrun overflow specially-formed scope specially-crafted denial of service DoS TSE WinNT Win2000

Keywords: atdownload kbexpertisebeginner kbqfe kbsecurity kbsecbulletin kbsecvulnerability kbbug kbfix kbpubtypekc KB936181

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.