What's going to happen with Microsoft XML Core Services (MSXML) 4.x ??

I'm glad I saw this thread, this was also driving me crazy, and still does...

In A Guy's last post there he states version 4.30.2117 (4 sp3) which I have, is the latest and greatest, so I believe I'm up-to-date, and I understand everything, but this:

If there is an updated file, you will receive it via Windows Update. But don't expect one as MS are the ones marking it EOL.

I understand if it is EOL, its EOL, but has anyone heard (hint, Noel, hint, hint) what direction Microsoft is going to take as far as plugging this security hole or isn't it that big a hole to worry about?

~~~ ~~~~ ~~~

As an afterthought I went here and found how to determine my MSXML version: Description of updates for MSXML Core Services 3.0 and MSXML Core Services 6.0 and I found that I do have MSXML3, and 6 on my machine, actually 4 versions.
Attachment 326660Attachment 326661

Attachment 326662Attachment 326663



Do we just sit and wait until something shows up to upgrade MSXML 4.x on a patch Tuesday to whatever or do we wait for supercedence?

MSXML was already upgraded in Win 7 - the other versions may only be needed for compatibility purposes.
You could always try uninstalling them and seeing what falls over?

So you're saying there isn't a security hole if MSXML4 isn't upgraded anymore?

Come to think of it the "other" versions just sit on the HDD waiting to work and security seems okay.

As far as "seeing what falls over" I'm going to let sleeping dogs lie.

I've been reading a very informative Secunia thread here: Secunia | MSXML 4.0 Thread

The one respondent (Maurice Joyce, that name sounds familiar) seems very knowledgeable on what is going on with this situation.

It is a good read especially when you get to the 17th post (his). I wish the Secunia forum had a way to copy the thread link like SevenForums has.

As I said earlier I'm good to go with the version I already have, I set PSI to ignore the file and I'm going to check and see what exactly needs MSXML4.x If I'm not using it it will be uninstalled.

I'm also going to check into Joyce's suggestion of trying: https://heimdalsecurity.com/en/products that he mentions in post #28. There is a free version that would do the same as PSI.

Thanks Noel for your input. Thread is marked solved for me.