Nessus :Microsoft XML Parser (MSXML) and XML Core Services Unsupported

Microsoft XML Parser (MSXML) and XML Core Services Unsupported

Description

The remote host contains one or more unsupported versions of the Microsoft XML Parser (MSXML) or XML Core Services.

Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities.

Note that support for MSXML 3.0 and 6.0 is based on the support policy of the operating system on which it is installed. Support for MSXML 5.0 is based on the Microsoft Office lifecycle policy.

Solution

Upgrade the software packages responsible for the unsupported DLL versions or upgrade to a supported version of Windows (Vista / 2008 or later). Alternatively, uninstall the outdated MSXML or XML Core Services.

See Also

https://support.microsoft.com/en-us/kb/269238
https://msdn.microsoft.com/en-us/library/jj152146(v=vs.85).aspx

Output

•     Path               : C:\Windows\SysWOW64\msxml4.dll
      File version       : 4.20.9818.0
      XML Core version   : 4.0 Post SP3 (KB2758694)
      EOL date           : 2014/04/12
      EOL announcement   : https://support.microsoft.com/en-us/lifecycle/search/7921
      Supported versions : 5.20.1076 (Office 2007) / 6.0 or later on a supported version of

•  Windows (Vista / 2008 or later).
  

Resolution:

 In most cases these are unnecessary files and there are no good way to remove these . Browse to the C:\Windows\SysWOW64\msxml4.dll location .Copy the Msml14.dll to another location ( not necessary but as an insurance against eventualities ) and then delete the file or rename it.  Your next Nessus scan would show the issue as resolved . MSXML 4.0 is not needed for general OS usage and is no longer supported by Microsoft.

 

Further reading

https://altonblom.com/tag/msxml-4-0-sp3/https://altonblom.com/s34e03/

https://altonblom.com/s34e03/