Security Update 936181- Known Issues

July 21, 2008

My Toshiba Satellite Pro M70 laptop is running on Win XP SP3.

When I checked Windows Update today, there was one high priority update listed -

"Security Update for Microsoft Core Services Service Pack 2 (KB936181)", with the following info given on it :

"A security issue has been identified in Microsoft XML Core Services (MSXML) that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer. Once you have installed this item, it cannot be removed."

The last sentence - "Once you have installed this item, it cannot be removed" raised a red flag, and I decided to click on "Details", and up popped a small window containing 2 links:

1. Get Help and Support : http://support.microsoft.com/ - Microsoft Help and Support

2. More Information: http://go.microsoft.com/fwlink/?LinkId=88350 - Microsoft TechNet -Microsoft Security Bulletin MS07.042 - Critical

On the Microsoft Help and Support web page I did a site search with the keywords "kb936181 known issues", and clicked on the relevant link that was listed in search results - http://support.microsoft.com/kb/936181/en-us, which brought up a webpage entitled :

Description of the security update for Microsoft XML Core Services 4.0: August 14, 2007

This web page lists 4 known issues, 3 of which seem to apply to Windows XP. A detailed description and procedure for dealing with each issue is given. Here is the 1st part of the statements concerning these 3 issues:

1. This security update may repeatedly appear in the update list on Microsoft Update or on Windows Update if one of the system files is corrupted or if it has not been updated correctly ....etc.

2. Security update 936181 for Microsoft XML Core Services (MSXML) 4.0, for MSXML 4.0 Service Pack 1 (SP1) and for MSXML 4.0 Service Pack 2 (SP2) does not support the complete removal of MSXML 4.0........etc.

3. You may receive the following error message when you install security update 936181 from Windows Update:

Could not register type library for file c:\Windows\system32\msxml4.dll. Contact your support personnel.....etc

My question is, I recently installed Win XP Pro SP2 and then upgraded to Win XP Pro SP3.

- Am I likely to experience any of the problems listed ?

- Are the remedies given for these 3 issues guaranted to work ?

- Are there any other Win XP related issues that are not covered in this document ?

The 2nd linked webpage "Microsoft TechNet -Microsoft Security Bulletin MS07.042 - Critical" includes a download link to the KB936181 file - "msxml4-KB936181-enu Hotfix Package Microsoft Corporation", which is presumably a "download & save for later execution" alternative to the Windows live update of KB936181.

Questions:

What is the reason for giving this download & save alternative ?

Does the computer to be connected to the internet to install it ?

Is it advisable to use it rather than the live update alternative ?

Thank you

Alan C. Brown

July 21, 2008

Re: Security Update 936181- Known Issues

Start a free Windows Update support incident request:

https://support.microsoft.com/oas/default.aspx?gprid=6527

Support for Windows Update:

http://support.microsoft.com/gp/wusupport

For home users, no-charge support is available by calling 1-866-PCSAFETY in the United States and in Canada or by contacting your local Microsoft subsidiary. There is no-charge for support calls that are associated with security updates.

For more information about how to contact your local Microsoft subsidiary for security update support issues, visit the International Support Web site: http://support.microsoft.com/common/international.aspx

For enterprise customers, support for security updates is available through your usual support contacts.

--

~Robear Dyer (PA Bear)

MS MVP-Windows (IE, OE, Security, Shell/User)

AumHa VSOP & Admin; DTS-L.net

"Alan C. Brown" <acbrown@intnet.mu> wrote in message news:eh51Nnu6IHA.5048@TK2MSFTNGP06.phx.gbl...