GDIPLUS.DLL security updates for VFP 8.0 and VFP 9.0
MS security bulletin Vulnerabilities in GDI+ Could Allow Remote Code Execution (957488) lists MS products affected including VFP 8.0 and VFP 9.0. It supersedes MS security bulletin MS08-052 - Vulnerabilities in GDI+ Could Allow Remote Code Execution (954593). I blogged about it at GDI+ security updates for VFP 8.0 and VFP 9.0
- Visual FoxPro 8.0 Service Pack 1 GDIPLUS.DLL Security Update
- Visual FoxPro 9.0 Service Pack 2 GDIPLUS.DLL Security Update
File name | File version | File size | Date | Time |
---|---|---|---|---|
Gdiplus.dll | 5.2.6001.22319 | 1,748,992 | 13-Aug-2009 | 09:55 EST |
Comments
Merge Module
does this hold the VFP_GDIPlus.msm as well?
Agnes
Merge Module for GdiPlus
I don't know for sure.
RE: Merge Module
Can you also check for the version of gdiplus.dll itself? I have two comps here running W2K and XP but there is no new version of GDIPlus.dll installed.
TIA
RE: Merge Module
The update will not install new version of GDIPlus.dll if original VFP installation didn't install it. It could happen when GDIPlus.dll version on PC where never than one that comes with VFP.
RE MSM GDIPlus.dll
I can recreate the msm but I hate this.
RE MSM GDIPlus.dll
Inno Setup
But I have those old ISD license and all the work in it's scripts. (And no time left for learning the odds of inno setup).
Looks like I fake the msm, it's not that much work with ISD. (^.^)
Agnes
Merge module for GDIplus
I've created a <a href="/files/VFP_GDIPlus_dll.zip">modified merge module</a> with the updated version. It contains the GDIPlus.dll Version 5.2.6001.22319. All properties exposed to the installer are untouched , except the file version. The new file is 1.010.176 2010/11/05 09.08.18.
It's renamed from "VFP_GDIPlus.msm" to "VFP_GDIPlus_dll.msm". One needs to replace the original "VFP_GDIPlus_dll.msm".
Agnes
How to install?
Re: How to install?
There're a few ways to install updates
<ul>
<li>Direct download from Microsoft <a href="http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=6a63ab9c-df12-4d41-933c-be590feaa05a#tm">Platform SDK Redistributable: GDI+</a>
<li><a href="/files/VFP_GDIPlus_dll.zip">Modified merge module</a> created by Agnes
<li>Copy the right version of Gdiplus.dll into your application folder during installation
<li>The runtime installers for VFP 8.0 - VFP 9.0 SP2 from wOOdy's page at http://code.msdn.microsoft.com/FoxPro/Release/ProjectReleases.aspx?ReleaseId=125 that include security fixes and hotfixes.
</ul>
Sergey
GDIPlus.dll update for VFP9 SP1