1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

JPEG Processing (GDI+) Security Update

Discussion in 'Security and Privacy' started by Christer, 2004/09/23.

Thread Status:
Not open for further replies.
Page 3 of 3
  1. 2004/10/14
    Christer

    Christer Geek Member Staff Thread Starter

    Joined:
    2002/12/17
    Messages:
    6,585
    Likes Received:
    74
    I have juggled my Ghost Images and installed the updates a few times. I have come to the conclusion that both the client versions and fullfile versions can now be installed in any order.

    With Office XP completely updated, including KB832332v2, Windows Update still prompts for installation of KB885884 which makes my assumption, that it is a "patch" for v1, wrong.

    I still don't know exactly what KB885884 does, it is some 4.33 MB but installs in "a flash ".

    Anyway, to satisfy both Office Update and Windows Update, both KB832332v2 and KB885884 are needed.

    Christer
     
    Christer,
    #41
  2. 2004/10/14
    Welshjim

    Welshjim Inactive

    Joined:
    2002/01/07
    Messages:
    5,643
    Likes Received:
    0
    Just an update on whether non-MS programs developers recommend using the new gdiplus.dll file. I have three such programs. One said to use it. Another said it probably would work (and that the company's site would probably post something soon) and the third said do not use it, but offered no substitute. The last person was Taiwanese. I hope he understood the question.
     
    Welshjim,
    #42


  3. to hide this advert.

  4. 2004/10/14
    Christer

    Christer Geek Member Staff Thread Starter

    Joined:
    2002/12/17
    Messages:
    6,585
    Likes Received:
    74
    Jim,

    That must have been Symantec Support ...... :D ...... !

    Christer
     
    Christer,
    #43
  5. 2004/10/20
    Christer

    Christer Geek Member Staff Thread Starter

    Joined:
    2002/12/17
    Messages:
    6,585
    Likes Received:
    74
    I checked the $NtUninstallKB885884$ folder and there is not a single file to be restored if this hotfix should be uninstalled.

    spuninst.txt is empty.

    spuninst.inf indicates that the only item that has been installed is C:/WINDOWS/system32/CatRoot/%7BF750E6C3-38EE-11D1-85E5-00C04FC295EE%7D/KB885884.cat

    Does anyone know what the significance is?

    Thanks for Your time,
    Christer
     
    Christer,
    #44
  6. 2004/10/21
    Christer

    Christer Geek Member Staff Thread Starter

    Joined:
    2002/12/17
    Messages:
    6,585
    Likes Received:
    74
    I juggled a few more Images and found that:

    1- KB885884 is useful only if KB832332v1 has been installed. Then the mso.dll is changed from 6626 to 6714. The $NtUninstallKB885884$ folder actually contains the old mso.dll.

    2- KB885884 is useless if KB832332v2 has been installed. It runs and checks something (?) but does nothing. Nothing in the $NtUninstallKB885884$ folder.

    3- KB885884 is useless if neither version of KB832332 has been installed. It runs and checks something (?) but does nothing. Nothing in the $NtUninstallKB885884$ folder.

    This indicates that Windows Update prompts to install KB885884 under all circumstances. KB885884 looks for KB832332v1 and if it is found, it installs mso.dll version 6714.
    Conclusion: KB885884 is a fix for KB832332v1 and is useless in all other cases and the fact that it is forced upon the user when it is not needed or does nothing must be regarded as a bug in Windows Update.

    4- Windows Update checks for mso.dll version 6714. If it is installed, it does not prompt to install KB873374 (the GDI+ detection tool). It seems like it accepts the vulnerable GdiPlus.dll ...... :confused: ......

    Alright ...... :p ...... I'll quit now!

    Christer
     
    Last edited: 2004/10/21
    Christer,
    #45
Page 3 of 3
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...