Article ID: 936181
Article Last Modified on 9/27/2007
APPLIES TO
- Microsoft XML Core Services 4.0
INTRODUCTION
Microsoft has released security bulletin MS07-042. The security bulletin contains all the relevant information about the security update. This information includes file manifest information and deployment options. To view the complete security bulletin, visit one of the following Microsoft Web sites:
- Home users:
- IT professionals:
Known issues with this security update
- 941833 An update is available that improves the compatibility and the reliability of Microsoft XML Core Service 4.0 Service Pack 2 on a Windows Vista-based computer
- Security update 936181 for Microsoft XML Core Services (MSXML) 4.0, for MSXML 4.0 Service Pack 1 (SP1) and for MSXML 4.0 Service Pack 2 (SP2) does not support the complete removal of MSXML 4.0. This situation occurs because this version of MSXML is installed in side-by-side mode. To work around this issue, follow these steps:
- Remove security update 936181 by using the Add or Remove Programs item in Control Panel.
- Delete the Msxml4.dll file from the %SystemRoot%\System32 folder.
- Repair the previous installation of MSXML 4.0 by using the Add or Remove Programs item in Control Panel.
- You may receive the following error message when you install security update 936181 from Windows Update:
When this error occurs, you may also notice information that resembles the following in the log file:
To work around this problem, manually install the security update from the Microsoft Download Center, and then click Ignore when the error message is displayed. To confirm that the installation was successful, verify that the Msxml4.dll file in %systemroot%\System32 is version 4.20.9848.0.
More information about this security update
- If you have multiple versions of MSXML installed, you may have to install multiple packages for this security update. Additionally, if you install a version of MSXML after you install this security update, you may have to install an additional package for this security update.
For more information about the different versions of MSXML that are available or that are included with various Microsoft products or software updates, click the following article number to view the article in the Microsoft Knowledge Base:269238 List of Microsoft XML Parser (MSXML) versions
- Security update package 936181 is a complete installation package. You can use this package to install MSXML 4.0 SP2 on a computer that has no earlier versions of MSXML 4.0 installed. You can also use this package to update an existing installation of MSXML 4.0, of MSXML 4.0 SP1, or of MSXML 4.0 SP2.
- Windows Update and Microsoft Update offer security update package 936181 only if an earlier version of MSXML 4.0, of MSXML 4.0 SP1, or of MSXML 4.0 SP2 is already installed on the computer.
- MSXML 4.0 does not include a 64-bit parser and is supported only in Microsoft Windows on Windows 64 (WOW) mode on 64-bit operating systems. Therefore, 64-bit MSXML 4.0 packages are not available for this security update. To update the 32-bit MSXML 4.0 parser in WOW mode on a 64-bit operating system, install the 32-bit MSXML 4.0 package. For example, to update a 64-bit English-language operating system, install the Msxml4-KB936181-enu.exe package.
- To install this security update in quiet mode together with verbose logging and without having to restart the computer, use a command that resembles the following:
A detailed log of the installation process will be located in the file that you specify in the command. In this example, the file is C:\KB936181.log.
msxml4-kb936181-enu.exe /q reboot=reallysuppress /l*v c:\kb936181.log
- If the Msxml4.dll file is locked, the file may not be updated when you apply security update 936181. To work around this issue, use the following commands to uninstall Msxml4.dll:
- MsiExec.exe /uninstall {37477865-A3F1-4772-AD43-AAFC6BCFF99F} /passive
- Del %windir%\system32\msxml4.dll
Additional query words: update security_patch security_update security bug flaw vulnerability malicious attacker exploit registry unauthenticated buffer overrun overflow specially-formed scope specially-crafted denial of service DoS TSE WinNT Win2000
Keywords: atdownload kbexpertisebeginner kbqfe kbsecurity kbsecbulletin kbsecvulnerability kbbug kbfix kbpubtypekc KB936181
