December Security Update woes continue

I see there is another attempt to release a Security Update to VB6 SP6: Microsoft Visual Basic 6.0 Service Pack 6 Cumulative Update dated 5/4/2009.  See KB957924 for details.

I have not tested it myself yet to determine whether it fixes the problems the earlier attempts have (breaking MSChart20.ocx for one thing, Winsock control for another).  However but I see that other users say it has not fixed the Winsock control that was also broken in earlier attempts.

So far all of the problems I've seen look like bonehead "off by one" errors in the code.

Thus I still recommend this "critical update" be avoided - almost 6 months later.  I hope people who find and can reproduce these problems report them to Microsoft.  It seems to be a free support call since the update is security related.

Customers in the U.S. and Canada can receive technical support from Microsoft Product Support Services at 1-866-PCSAFETY. There is no charge for support calls that are associated with security updates.

Indeed, by searching the MSKB, I found another later hotfix:
http://support.microsoft.com/kb/974899
Download at:
http://support.microsoft.com/hotfix/KBHotfix.aspx?kbnum=974899

Posted by Yuhong Bao on Monday, December 14, 2009 10:53 PM

Indeed, by searching the MSKB, I found another later hotfix that brings the version of Mscomctl.ocx up to 6.1.98.18, as well as including the Winsock hotfix:
http://support.microsoft.com/kb/974899
Download at:
http://support.microsoft.com/hotfix/KBHotfix.aspx?kbnum=974899

Posted by Yuhong Bao on Monday, December 14, 2009 10:56 PM

MS has a hotfix that fixes a problem with the Winsock control and bring it's version up to 6.1.98.17:
http://support.microsoft.com/kb/972877
Download at:
http://support.microsoft.com/hotfix/KBHotfix.aspx?kbnum=972877

Posted by Yuhong Bao on Tuesday, October 13, 2009 07:32 PM

Thanks for that update, it may help those who have fallen into the trap of installing the MS08-070 patch rollup package.

There are still other problems with the Winsock control, and with other controls from this package though. I'm still not ready to recommend that any of the "fixes" including and since MS08-070 yet.

Posted by BVOCS on Friday, October 16, 2009 06:44 AM

Post a comment

  • Name:
  • E-Mail Address (optional):
  • URL (nofollow, optional):
  • Remember personal info
  • Comments (text only):