[German]I just made a strange observation in Windows 7 SP1. After installing the 10 June 2018 security only updates, I am offered old security updates for Microsoft XML Core Services 4.0 Service Pack 3 released in 2012/2013. Addendum: Explanation for this behavior added.
Advertising
A surprise in the morning
First, the security update for Microsoft XML Core Services 4.0 Service Pack 3 for x64 systems (KB2756145) was offered as important during the update search. But the release date, January 8, 2013, irritated me. So I hide this update.
Then the security update for Microsoft XML Core Services 4.0 Service Pack 3 (KB2721691) dated October 9, 2012 was displayed as Important from the update search. Microsoft writes that a vulnerability has been discovered in Microsoft XML Core Services (MSXML) that could allow an attacker to enter and take control of Windows systems.
So I'm facing the following situation: There were a number of Microsoft XML Core Services 4.0 Service Pack 3 patches, but these updates are all ancient. Hence the question: Has anyone else noticed this, or am I the only one again?
Probably an explanation …
Shortly after I've published the German edition of this blog post, I received some comments from reader Michael Py. First he wrote:
Advertising
Years ago I read an independent article that there was an update for XMLv4. However, Microsoft did not offer them via WU or WSUS. But at that time you could manually download and install the updates.
That explains, why I probably never installed these old patches. In a second comment Michael shed a bit more light to this 'issue' and pointed out:
The Secunia PSI tool informed all PSI users that there was an SP3 for XMLv4, but there was no automatic update of SP2.
SP3 itself had to be downloaded/installed or PSI muted to stop the warning from PSI. Here is an interesting link: https://altonblom.com/s34e03/ (deleted)
It seems Microsoft finally offers the SP3 in WU :-)
You may also be able to uninstall XLM4: https://altonblom.com/s34e10/
After reading that, it became transparent to me, what probably happened. So I'm going to uninstall that stuff.
