Vista and SP1

RIKI

Patch applied (MS07-032 KB931213) in which it updates the 'wmi.dll' to a
newer version. After installing Vista SP1 it changes the 'wmi.dll' back to
and older version, which is vulnerable. Try to reapply the above patch and
it say that this patch does not apply to this system.

Susan Bradley

RIKI wrote:
> Patch applied (MS07-032 KB931213) in which it updates the 'wmi.dll' to a
> newer version. After installing Vista SP1 it changes the 'wmi.dll' back to
> and older version, which is vulnerable. Try to reapply the above patch and
> it say that this patch does not apply to this system.
Most service packs know to pick up the right bits.

How do you know it's the older vulnerable version?

RIKI

Testing multiple systems and checking version before and after the SP1
install. Also vulnerability scanning using PatchLink scanned clean before
installing SP1 and vulnerable after installing SP1, and notes this 'wmi.dll'
and dates/version are changed.

"Susan Bradley" wrote:

> RIKI wrote:
> > Patch applied (MS07-032 KB931213) in which it updates the 'wmi.dll' to a
> > newer version. After installing Vista SP1 it changes the 'wmi.dll' back to
> > and older version, which is vulnerable. Try to reapply the above patch and
> > it say that this patch does not apply to this system.
> Most service packs know to pick up the right bits.
>
> How do you know it's the older vulnerable version?
>

Susan Bradley

RIKI wrote:
> Testing multiple systems and checking version before and after the SP1
> install. Also vulnerability scanning using PatchLink scanned clean before
> installing SP1 and vulnerable after installing SP1, and notes this 'wmi.dll'
> and dates/version are changed.
>
> "Susan Bradley" wrote:
>
>> RIKI wrote:
>>> Patch applied (MS07-032 KB931213) in which it updates the 'wmi.dll' to a
>>> newer version. After installing Vista SP1 it changes the 'wmi.dll' back to
>>> and older version, which is vulnerable. Try to reapply the above patch and
>>> it say that this patch does not apply to this system.
>> Most service packs know to pick up the right bits.
>>
>> How do you know it's the older vulnerable version?
>>
Can you give the date version file details?

RIKI

Yes, prior to the update (MS07-032 KB931213) 'wmi.dll' has date 2006/11/02
and version 6.0.6000.16386 after the update 'wmi.dll' has date 06/20/2007 and
version 6.0.6000.16470, then installing Vista SP1 this file is replaced with
'wmi.dll' has date 2006/11/02 and version 6.0.6000.16386 again. This was
tested on Several production systems as well as serveral VMware test systems
and Virtual PC Vista systems.

"Susan Bradley" wrote:

> RIKI wrote:
> > Testing multiple systems and checking version before and after the SP1
> > install. Also vulnerability scanning using PatchLink scanned clean before
> > installing SP1 and vulnerable after installing SP1, and notes this 'wmi.dll'
> > and dates/version are changed.
> >
> > "Susan Bradley" wrote:
> >
> >> RIKI wrote:
> >>> Patch applied (MS07-032 KB931213) in which it updates the 'wmi.dll' to a
> >>> newer version. After installing Vista SP1 it changes the 'wmi.dll' back to
> >>> and older version, which is vulnerable. Try to reapply the above patch and
> >>> it say that this patch does not apply to this system.
> >> Most service packs know to pick up the right bits.
> >>
> >> How do you know it's the older vulnerable version?
> >>
> Can you give the date version file details?
>

Susan Bradley

Thanks.
Kicking this up the ladder, will keep you posted.

RIKI wrote:
> Yes, prior to the update (MS07-032 KB931213) 'wmi.dll' has date 2006/11/02
> and version 6.0.6000.16386 after the update 'wmi.dll' has date 06/20/2007 and
> version 6.0.6000.16470, then installing Vista SP1 this file is replaced with
> 'wmi.dll' has date 2006/11/02 and version 6.0.6000.16386 again. This was
> tested on Several production systems as well as serveral VMware test systems
> and Virtual PC Vista systems.
>
> "Susan Bradley" wrote:
>
>> RIKI wrote:
>>> Testing multiple systems and checking version before and after the SP1
>>> install. Also vulnerability scanning using PatchLink scanned clean before
>>> installing SP1 and vulnerable after installing SP1, and notes this 'wmi.dll'
>>> and dates/version are changed.
>>>
>>> "Susan Bradley" wrote:
>>>
>>>> RIKI wrote:
>>>>> Patch applied (MS07-032 KB931213) in which it updates the 'wmi.dll' to a
>>>>> newer version. After installing Vista SP1 it changes the 'wmi.dll' back to
>>>>> and older version, which is vulnerable. Try to reapply the above patch and
>>>>> it say that this patch does not apply to this system.
>>>> Most service packs know to pick up the right bits.
>>>>
>>>> How do you know it's the older vulnerable version?
>>>>
>> Can you give the date version file details?
>>