MS12-027 MSCOMCTL security update

[dcox]

http://support.microsoft.com/kb/2641426

https://www.microsoft.com/download/en/details.aspx?id=29326

Inside the msi file there is mscomctl.cab. This contains mscomctl.ocx
version 6.1.98.33. I assume this is the file that should now be
redistributed and not the one in VB60SP6-KB957924-v2-x86-ENU which contains
mscomctl.ocx version 6.01.98.16.
More info about in on the podcast https://www.grc.com/securitynow.htm
episode 348 about 17 minutes in.

[Deanna Earley]

Post by dcox
http://support.microsoft.com/kb/2641426
https://www.microsoft.com/download/en/details.aspx?id=29326
Inside the msi file there is mscomctl.cab. This contains mscomctl.ocx
version 6.1.98.33. I assume this is the file that should now be
redistributed and not the one in VB60SP6-KB957924-v2-x86-ENU which contains
mscomctl.ocx version 6.01.98.16.
More info about in on the podcast https://www.grc.com/securitynow.htm
episode 348 about 17 minutes in.

Normal practice (as with the security updates to the VB runtimes) is to
distribute the latest from the service pack and leave the updates to
Windows Updates.
As long as your installer correctly handles the version number, you
shouldn't have a problem.

[dcox]

Post by Deanna Earley

Post by dcox
http://support.microsoft.com/kb/2641426
https://www.microsoft.com/download/en/details.aspx?id=29326
Inside the msi file there is mscomctl.cab. This contains mscomctl.ocx
version 6.1.98.33. I assume this is the file that should now be
redistributed and not the one in VB60SP6-KB957924-v2-x86-ENU which contains
mscomctl.ocx version 6.01.98.16.
More info about in on the podcast https://www.grc.com/securitynow.htm
episode 348 about 17 minutes in.

Normal practice (as with the security updates to the VB runtimes) is to
distribute the latest from the service pack and leave the updates to
Windows Updates.
As long as your installer correctly handles the version number, you
shouldn't have a problem.
--
i-Catcher Development Team
http://www.icode.co.uk/icatcher/
iCode Systems
(Replies direct to my email address will be ignored.
Please reply to the group.)

Ok, thanks.

[Clive Lumb]

Post by dcox
http://support.microsoft.com/kb/2641426
https://www.microsoft.com/download/en/details.aspx?id=29326
Inside the msi file there is mscomctl.cab. This contains mscomctl.ocx
version 6.1.98.33. I assume this is the file that should now be
redistributed and not the one in VB60SP6-KB957924-v2-x86-ENU which contains
mscomctl.ocx version 6.01.98.16.
More info about in on the podcast https://www.grc.com/securitynow.htm
episode 348 about 17 minutes in.

Note!
I have just had this update break Excel 2007 when using the progress bar.
It would appear to be a combination of the new mscomctl and a recent
security update for Office 2007.
If you suddenly start getting "object library invalid or contains references
to object definitions that could not be found", then it could be due to
this.

The fix is easy, search for *.exd files under C:\documents and
settings\username\... and delete them.