Vulnerable versions of gdiplus.dll after fresh install with XP SP2 & office 2003

Scanning Drive C:...

C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSO.DLL

Version: 11.0.6360.0

C:\Program Files\Common Files\Microsoft Shared\VGX\vgx.dll

Version: 6.0.2900.2180

C:\Program Files\Microsoft Office\OFFICE11\GDIPLUS.DLL

Version: 6.0.3264.0

C:\WINDOWS\$NtServicePackUninstall$\sxs.dll

Version: 5.1.2600.1579

C:\WINDOWS\$NtServicePackUninstall$\vgx.dll

Version: 6.0.2800.1106 <-- Possibly vulnerable (Win2K SP2 and SP3 w/IE6 SP1 only)

C:\WINDOWS\$NtUninstallKB839645$\sxs.dll

Version: 6.0.2800.1106 <-- Possibly vulnerable (Win2K SP2 and SP3 w/IE6 SP1 only)

C:\WINDOWS\$NtUninstallKB841356$\sxs.dll

Version: 5.1.2600.1515

C:\WINDOWS\I386\ASMS\1000\MSFT\WINDOWS\GDIPLUS\GDI PLUS.DLL

Version: 5.1.3097.0 <-- Vulnerable version

C:\WINDOWS\ServicePackFiles\i386\sxs.dll

Version: 5.1.2600.2180

C:\WINDOWS\ServicePackFiles\i386\vgx.dll

Version: 6.0.2900.2180

C:\WINDOWS\SoftwareDistribution\Download\6ca7b3a8e fd5a9b6f87fff395a2eb989\asms\10\msft\windows\gdipl us\gdiplus.dll

Version: 5.1.3102.2180

C:\WINDOWS\SoftwareDistribution\Download\6ca7b3a8e fd5a9b6f87fff395a2eb989\sxs.dll

Version: 5.1.2600.2180

C:\WINDOWS\SoftwareDistribution\Download\6ca7b3a8e fd5a9b6f87fff395a2eb989\vgx.dll

Version: 6.0.2900.2180

C:\WINDOWS\SoftwareDistribution\Download\b175fc253 e841325299dd51ebc274d60\sp1qfe\sxs.dll

Version: 5.1.2600.1579

C:\WINDOWS\system32\sxs.dll

Version: 5.1.2600.2180

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_65 95b64144ccf1df_1.0.0.0_x-ww_8d353f13\GdiPlus.dll

Version: 5.1.3097.0 <-- Possibly vulnerable (Windows Side-By-Side DLL)

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_65 95b64144ccf1df_1.0.10.0_x-ww_712befd8\GdiPlus.dll

Version: 5.1.3101.0 <-- Possibly vulnerable (Windows Side-By-Side DLL)

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_65 95b64144ccf1df_1.0.2600.1360_x-ww_24a2ed47\GdiPlus.dll

Version: 5.1.3102.1360

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_65 95b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\GdiPlus.dll

Version: 5.1.3102.2180

Scan Complete.

Hi

None of the ones that are candidates for "activation" (loaded
into memory) are detected as vulnerable, so you should be safe.


Beamguy wrote:

> Scanning Drive C:...
>
> C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSO.DLL
>
> Version: 11.0.6360.0
>
> C:\Program Files\Common Files\Microsoft Shared\VGX\vgx.dll
>
> Version: 6.0.2900.2180
>
> C:\Program Files\Microsoft Office\OFFICE11\GDIPLUS.DLL
>
> Version: 6.0.3264.0
>
> C:\WINDOWS\$NtServicePackUninstall$\sxs.dll
>
> Version: 5.1.2600.1579
>
> C:\WINDOWS\$NtServicePackUninstall$\vgx.dll
>
> Version: 6.0.2800.1106 <-- Possibly vulnerable (Win2K SP2 and SP3 w/IE6 SP1 only)
>
> C:\WINDOWS\$NtUninstallKB839645$\sxs.dll
>
> Version: 6.0.2800.1106 <-- Possibly vulnerable (Win2K SP2 and SP3 w/IE6 SP1 only)
>
> C:\WINDOWS\$NtUninstallKB841356$\sxs.dll
>
> Version: 5.1.2600.1515
>
> C:\WINDOWS\I386\ASMS\1000\MSFT\WINDOWS\GDIPLUS\GDI PLUS.DLL
>
> Version: 5.1.3097.0 <-- Vulnerable version
>
> C:\WINDOWS\ServicePackFiles\i386\sxs.dll
>
> Version: 5.1.2600.2180
>
> C:\WINDOWS\ServicePackFiles\i386\vgx.dll
>
> Version: 6.0.2900.2180
>
> C:\WINDOWS\SoftwareDistribution\Download\6ca7b3a8e fd5a9b6f87fff395a2eb989\asms\10\msft\windows\gdipl us\gdiplus.dll
>
> Version: 5.1.3102.2180
>
> C:\WINDOWS\SoftwareDistribution\Download\6ca7b3a8e fd5a9b6f87fff395a2eb989\sxs.dll
>
> Version: 5.1.2600.2180
>
> C:\WINDOWS\SoftwareDistribution\Download\6ca7b3a8e fd5a9b6f87fff395a2eb989\vgx.dll
>
> Version: 6.0.2900.2180
>
> C:\WINDOWS\SoftwareDistribution\Download\b175fc253 e841325299dd51ebc274d60\sp1qfe\sxs.dll
>
> Version: 5.1.2600.1579
>
> C:\WINDOWS\system32\sxs.dll
>
> Version: 5.1.2600.2180
>
> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_65 95b64144ccf1df_1.0.0.0_x-ww_8d353f13\GdiPlus.dll
>
> Version: 5.1.3097.0 <-- Possibly vulnerable (Windows Side-By-Side DLL)
>
> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_65 95b64144ccf1df_1.0.10.0_x-ww_712befd8\GdiPlus.dll
>
> Version: 5.1.3101.0 <-- Possibly vulnerable (Windows Side-By-Side DLL)
>
> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_65 95b64144ccf1df_1.0.2600.1360_x-ww_24a2ed47\GdiPlus.dll
>
> Version: 5.1.3102.1360
>
> C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_65 95b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\GdiPlus.dll
>
> Version: 5.1.3102.2180
>
> Scan Complete.
>
>


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scr...r/default.mspx