Vista and SP1

[Guest RIKI]

Patch applied (MS07-032 KB931213) in which it updates the 'wmi.dll' to a

newer version. After installing Vista SP1 it changes the 'wmi.dll' back to

and older version, which is vulnerable. Try to reapply the above patch and

it say that this patch does not apply to this system.

[Guest Susan Bradley]

RIKI wrote:<span style="color:blue">

> Patch applied (MS07-032 KB931213) in which it updates the 'wmi.dll' to a

> newer version. After installing Vista SP1 it changes the 'wmi.dll' back to

> and older version, which is vulnerable. Try to reapply the above patch and

> it say that this patch does not apply to this system. </span>

Most service packs know to pick up the right bits.

 

How do you know it's the older vulnerable version?

[Guest RIKI]

Testing multiple systems and checking version before and after the SP1

install. Also vulnerability scanning using PatchLink scanned clean before

installing SP1 and vulnerable after installing SP1, and notes this 'wmi.dll'

and dates/version are changed.

 

"Susan Bradley" wrote:

<span style="color:blue">

> RIKI wrote:<span style="color:green">

> > Patch applied (MS07-032 KB931213) in which it updates the 'wmi.dll' to a

> > newer version. After installing Vista SP1 it changes the 'wmi.dll' back to

> > and older version, which is vulnerable. Try to reapply the above patch and

> > it say that this patch does not apply to this system. </span>

> Most service packs know to pick up the right bits.

>

> How do you know it's the older vulnerable version?

> </span>

[Guest Susan Bradley]

RIKI wrote:<span style="color:blue">

> Testing multiple systems and checking version before and after the SP1

> install. Also vulnerability scanning using PatchLink scanned clean before

> installing SP1 and vulnerable after installing SP1, and notes this 'wmi.dll'

> and dates/version are changed.

>

> "Susan Bradley" wrote:

> <span style="color:green">

>> RIKI wrote:<span style="color:darkred">

>>> Patch applied (MS07-032 KB931213) in which it updates the 'wmi.dll' to a

>>> newer version. After installing Vista SP1 it changes the 'wmi.dll' back to

>>> and older version, which is vulnerable. Try to reapply the above patch and

>>> it say that this patch does not apply to this system. </span>

>> Most service packs know to pick up the right bits.

>>

>> How do you know it's the older vulnerable version?

>></span></span>

Can you give the date version file details?

[Guest RIKI]

Yes, prior to the update (MS07-032 KB931213) 'wmi.dll' has date 2006/11/02

and version 6.0.6000.16386 after the update 'wmi.dll' has date 06/20/2007 and

version 6.0.6000.16470, then installing Vista SP1 this file is replaced with

'wmi.dll' has date 2006/11/02 and version 6.0.6000.16386 again. This was

tested on Several production systems as well as serveral VMware test systems

and Virtual PC Vista systems.

 

"Susan Bradley" wrote:

<span style="color:blue">

> RIKI wrote:<span style="color:green">

> > Testing multiple systems and checking version before and after the SP1

> > install. Also vulnerability scanning using PatchLink scanned clean before

> > installing SP1 and vulnerable after installing SP1, and notes this 'wmi.dll'

> > and dates/version are changed.

> >

> > "Susan Bradley" wrote:

> > <span style="color:darkred">

> >> RIKI wrote:

> >>> Patch applied (MS07-032 KB931213) in which it updates the 'wmi.dll' to a

> >>> newer version. After installing Vista SP1 it changes the 'wmi.dll' back to

> >>> and older version, which is vulnerable. Try to reapply the above patch and

> >>> it say that this patch does not apply to this system.

> >> Most service packs know to pick up the right bits.

> >>

> >> How do you know it's the older vulnerable version?

> >></span></span>

> Can you give the date version file details?

> </span>

[Guest Susan Bradley]

Thanks.

Kicking this up the ladder, will keep you posted.

 

RIKI wrote:<span style="color:blue">

> Yes, prior to the update (MS07-032 KB931213) 'wmi.dll' has date 2006/11/02

> and version 6.0.6000.16386 after the update 'wmi.dll' has date 06/20/2007 and

> version 6.0.6000.16470, then installing Vista SP1 this file is replaced with

> 'wmi.dll' has date 2006/11/02 and version 6.0.6000.16386 again. This was

> tested on Several production systems as well as serveral VMware test systems

> and Virtual PC Vista systems.

>

> "Susan Bradley" wrote:

> <span style="color:green">

>> RIKI wrote:<span style="color:darkred">

>>> Testing multiple systems and checking version before and after the SP1

>>> install. Also vulnerability scanning using PatchLink scanned clean before

>>> installing SP1 and vulnerable after installing SP1, and notes this 'wmi.dll'

>>> and dates/version are changed.

>>>

>>> "Susan Bradley" wrote:

>>>

>>>> RIKI wrote:

>>>>> Patch applied (MS07-032 KB931213) in which it updates the 'wmi.dll' to a

>>>>> newer version. After installing Vista SP1 it changes the 'wmi.dll' back to

>>>>> and older version, which is vulnerable. Try to reapply the above patch and

>>>>> it say that this patch does not apply to this system.

>>>> Most service packs know to pick up the right bits.

>>>>

>>>> How do you know it's the older vulnerable version?

>>>></span>

>> Can you give the date version file details?

>></span></span>