How to determine the Service Pack level of Microsoft Visual C++

[PrashantPrashant]

Hi All,



MS11-025 vulnerability has been identified in one of our Operating Systems. Currently trying to find out the KB articles to remediate the same. Please find the details below:

OS: Windows Server 2008 R2

Installed Packages:

Microsoft Visual C++ 2005 Redistributable Package
Microsoft Visual C++ 2008 Redistributable Package
Microsoft Visual C++ 2010 Redistributable Package



But in MS11-025 bulletin affected softwares list, below are mentioned:

Microsoft Visual C++ 2005 Service Pack 1 Redistributable Package
Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package
Microsoft Visual C++ 2010 Redistributable Package

Microsoft Visual C++ 2010 Service Pack 1 Redistributable Package



I am new to this vulnerability remediation process. I would be greatful if someone clear my below doubts:

1) as per the above, do I need to consider that the installed packages are affected by MS11-025 as they have not been mentioned as Service Pack

2) If I consider the installed packages are affected, are the patches mentioned for Service Packs remediate the vulnerability.

3) Is there anyway that I can find the Service Pack level of the Installed Packages

4) Is there anyway that I can find if the Installed Package is x86 or x64 when it is not mentioned in the package name



I am looking forward to here some solution soon.



Thanks in advance.

Continue reading...