Description
The remote host contains one or more unsupported versions of the Microsoft XML Parser (MSXML) or XML Core Services.
Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities.
Note that support for MSXML 3.0 and 6.0 is based on the support policy of the operating system on which it is installed. Support for MSXML 5.0 is based on the Microsoft Office lifecycle policy.
Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities.
Note that support for MSXML 3.0 and 6.0 is based on the support policy of the operating system on which it is installed. Support for MSXML 5.0 is based on the Microsoft Office lifecycle policy.
Solution
Upgrade the software
packages responsible for the unsupported DLL versions or upgrade to a
supported version of Windows (Vista / 2008 or later). Alternatively,
uninstall the outdated MSXML or XML Core Services.
See Also
Output
-
Path : C:\Windows\SysWOW64\msxml4.dll File version : 4.20.9818.0 XML Core version : 4.0 Post SP3 (KB2758694) EOL date : 2014/04/12 EOL announcement : https://support.microsoft.com/en-us/lifecycle/search/7921 Supported versions : 5.20.1076 (Office 2007) / 6.0 or later on a supported version of
Windows (Vista / 2008 or later).
Resolution:
In most cases these are unnecessary files and there are no good way to remove these . Browse to the C:\Windows\SysWOW64\msxml4.dll location .Copy the Msml14.dll to another location ( not necessary but as an insurance against eventualities ) and then delete the file or rename it. Your next Nessus scan would show the issue as resolved . MSXML 4.0 is not needed for general OS usage and is no longer supported by Microsoft.
Further reading
No comments:
Post a Comment