gdiplus.dll updates for Microsoft Works 2003

[richrf]

Hi,

This is my first time here.

I was notified to perform some updates on my system from the Office Updates
page. I followed the instructions but it wasn't clear whether the updates
were in fact completed.

I followed up by doing a gdiscan on my computer and it came back with
messages which seem to indicate that I am still vulnerable. Can someone tell
me whether I am still vulnerable and if so, how I should perform the
necessary updates for Micorosft Works 2003. Thanks for the help.

Rich

Scanning Drive C:...
C:\Program Files\Common Files\Microsoft Shared\Office10\MSO.DLL
Version: 10.0.2625.0 <-- Possibly vulnerable (Under OfficeXP only)
C:\Program Files\Common Files\Microsoft Shared\VGX\vgx.dll
Version: 6.0.2900.2180
C:\Program Files\ewido\security suite\gdiplus.dll
Version: 5.1.3102.2180
C:\Program Files\Microsoft Works\gdiplus.dll
Version: 5.1.3079.3 <-- Vulnerable version
C:\WINDOWS\$NtServicePackUninstall$\sxs.dll
Version: 5.1.2600.1106 <-- Vulnerable version
C:\WINDOWS\$NtServicePackUninstall$\vgx.dll
Version: 6.0.2800.1106 <-- Possibly vulnerable (Win2K SP2 and SP3 w/IE6
SP1 only)
C:\WINDOWS\ServicePackFiles\i386\sxs.dll
Version: 5.1.2600.2180
C:\WINDOWS\ServicePackFiles\i386\vgx.dll
Version: 6.0.2900.2180
C:\WINDOWS\system32\sxs.dll
Version: 5.1.2600.218
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13\GdiPlus.dll
Version: 5.1.3097.0 <-- Possibly vulnerable (Windows Side-By-Side DLL
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.10.0_x-ww_712befd8\GdiPlus.dll
Version: 5.1.3101.0 <-- Possibly vulnerable (Windows Side-By-Side DLL
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\GdiPlus.dll
Version: 5.1.3102.2180

 

[DL]

MS Works is not part of the Office Family, though it may have eg Word
included
http://www.microsoft.com/products/works/default.mspx
I assume you have also visited Winupdate?

 

[DL]

I meant also to say there is a specific works ng at;
microsoft.public.works.win

 

[richrf]

Hi DL,

Thanks for responding.

Yes, I ran Windows Update but nothing seems to happen to the vulnerable
gdiplus.dlls.

I am not sure yet whether there are any specific updates for Works Suite
2003. There are definitely gdiplus.dlls on my system that are being tagged as
vulnerable. MS doesn't have any mention of Works Suites updates in any of its
technical bulletins yet I definitely have Word. I am concerned tha Microsoft
has dropped the ball on Works Suie 2003 and has left us users vulnerable. Do
you know if anyway to get a firm reply on this issue. I sent any email to the
Microsoft Security group but so far I have not received any replies. Thanks
for the help.'

Rich

 

[DL]

I would suggest you post to the works ng, for a more informed response.

 

[Bob Buckland ?:-\)]

Hi Rich,

The only part of MS Works suite that is MS Office
is MS Word and the http://officeupdate.com updates
should help with that one. There are non MS apps
that use their own versions of gdiplus.dll that
may be on your computer and the MS updates may
not update those.

==========
Hi DL,

Thanks for responding.

Yes, I ran Windows Update but nothing seems to happen to the vulnerable
gdiplus.dlls.

I am not sure yet whether there are any specific updates for Works Suite
2003. There are definitely gdiplus.dlls on my system that are being tagged as
vulnerable. MS doesn't have any mention of Works Suites updates in any of its
technical bulletins yet I definitely have Word. I am concerned tha Microsoft
has dropped the ball on Works Suie 2003 and has left us users vulnerable. Do
you know if anyway to get a firm reply on this issue. I sent any email to the
Microsoft Security group but so far I have not received any replies. Thanks
for the help.'

Rich>>
--
Let us know if this helped you,

Bob Buckland ?
MS Office System Products MVP

*Courtesy is not expensive and can pay big dividends*

Office 2003 Editions explained
http://www.microsoft.com/uk/office/editions.mspx