Mailbag: How to detect the presence of the Visual C++ 2010 redistributable package

re: Mailbag: How to detect the presence of the Visual C++ 2010 redistributable package

Aaron Stebner — Thu, 18 Oct 2012 20:10:31 GMT

Hi Mjocasio23 - Have you confirmed that this computer has this security update package installed, and if so, can you double-check the version of that file manually (as opposed to letting the scanner check for you)? If the version is 40219.1, can you try to uninstall + re-install this security update package to see if it installs the correct version of mfc100.dll?

re: Mailbag: How to detect the presence of the Visual C++ 2010 redistributable package

mjocasio23 — Thu, 18 Oct 2012 18:14:20 GMT

This is the outcome of the scanner

- e:\Program Files\Microsoft Visual Studio 10.0\VC\redist\x86\Microsoft.VC100.MFC\mfc100.dll has not been patched

Remote version : 10.0.40219.1

Should be : 10.0.40219.325

re: Mailbag: How to detect the presence of the Visual C++ 2010 redistributable package

mjocasio23 — Thu, 18 Oct 2012 18:09:42 GMT

Yes the scanner is specting version 40219.325 for mfc100.dll

re: Mailbag: How to detect the presence of the Visual C++ 2010 redistributable package

Aaron Stebner — Thu, 18 Oct 2012 17:59:55 GMT

Hi Mjocasio23 - Do you know exactly what the scanning software is looking for when it determines that you have version 40219.1 instead of 40219.325? Is it a registry key, a version of a specific file (if so, which one), etc?

re: Mailbag: How to detect the presence of the Visual C++ 2010 redistributable package

mjocasio23 — Thu, 18 Oct 2012 17:36:44 GMT

I take that back..... Yes that is the KB article and the version is suggesting for file mfc100.dll is 40219.325..... I under hand the software associated with the installtion of software is Microsoft Visual C++ 2010 Runtime version 10.0.40219.To my understanding the article is pointing to software Microaoft Visual C++ 2010 Redistributable x86 in a Winodws Server 2003 Machine. Is it possible the machine does not have the correct security update patch for this file.

re: Mailbag: How to detect the presence of the Visual C++ 2010 redistributable package

mjocasio23 — Thu, 18 Oct 2012 17:26:30 GMT

I see what you saying; they confirm that is the version they expecting to be used for that dll...

Kind of stuck.... Do not know what to do....

re: Mailbag: How to detect the presence of the Visual C++ 2010 redistributable package

Aaron Stebner — Thu, 18 Oct 2012 16:53:00 GMT

Hi Mjocasio23 - Are you referring to this update - support.microsoft.com/.../2565063 If so, and if you've already installed it, then it is possible that there is a problem with the detection logic in the scanning software you're using. If that's the case, you'll likely need to contact the manufacturer to see if they have any known issues related to detection of VC++ redistributable updates.

re: Mailbag: How to detect the presence of the Visual C++ 2010 redistributable package

mjocasio23 — Thu, 18 Oct 2012 16:00:53 GMT

It should be Version 40219.325 but the security patch install version 40219.1. The scanner is Nessus

re: Mailbag: How to detect the presence of the Visual C++ 2010 redistributable package

Aaron Stebner — Thu, 18 Oct 2012 13:56:56 GMT

Hi Mjocasio23 - I'm not sure I understand your scenario. Version 40219.325 is a higher version than 40219.1, so it sounds like the updated version of that file is already installed. Is your scanning software telling you that you still need to install a patch when it is already installed? If so, what exact scanning software are you using?

re: Mailbag: How to detect the presence of the Visual C++ 2010 redistributable package

mjocasio23 — Thu, 18 Oct 2012 12:26:02 GMT

I'm having an issue while scanning a Windows Server 2003 x86 and detects the following vulnerability in reference to Microsoft Foundation Class (mfc100.dll) FOR Visual C++ 2010. It is detecting the wrong version 10.0.40219.325 and it should be 10.0.40219.1. I do see Visual C++ 2008 Redistributable Package for mfc90 VERSION 9.030729.6161. I do not see anything that indicates Visual C++ 2010 Redistributable Package 1, but I do see Microsoft Visual C++ x86 Runtime 10.0.40219 which is not version number the security software is expecting. Any ideas?