Results 1 to 6 of 6

Thread: 2 different versions of SP6?

  1. #1

    Thread Starter
    PowerPoster
    Join Date
    Jul 2010
    Location
    NYC
    Posts
    5,625

    2 different versions of SP6?

    Wanted to make a separate thread for this issue to see if anyone knew about this specifically... there appears to be 2 entirely different versions of SP6:

    https://www.microsoft.com/en-us/down...s.aspx?id=7030

    https://www.microsoft.com/en-us/down....aspx?id=50722

    I extracted the files from the MSIs (7zip can do this), and most of them are in fact different sizes, for example there's an 80 byte difference between the two versions of comctl32.ocx.

    What's going on here?

  2. #2

  3. #3
    PowerPoster
    Join Date
    Feb 2006
    Posts
    24,482

    Re: 2 different versions of SP6?

    The "security rollup" was issued, withdrawn, and reissued multiple times. I don't think they ever ironed out all of the bugs in them, mostly a lot of "off by one" coding errors that broke access to collection properties and truncated text properties.

    These were meant to address vulnerabilities that only apply to VBA-hosted and IE-hosted controls invading via the Internet. They don't apply to VB6 programs aside from exceedingly rare ones that download and run arbitrary scripts and also grant scripts access to members of these controls.

    This is also a source of typelib compatibility breaks, forcing your programs to be dependent on the broken versions of the controls in the rollup.

    We just had a thread on this here for the common control OCXs though the problems are much broader than that. You don't want to install any version of these rollup attempts on a development machine.

    It isn't related to SP6. At all.

  4. #4
    Hyperactive Member
    Join Date
    Nov 2011
    Posts
    498

    Re: 2 different versions of SP6?

    Quote Originally Posted by dilettante View Post
    The "security rollup" was issued, withdrawn, and reissued multiple times. I don't think they ever ironed out all of the bugs in them, mostly a lot of "off by one" coding errors that broke access to collection properties and truncated text properties.

    These were meant to address vulnerabilities that only apply to VBA-hosted and IE-hosted controls invading via the Internet. They don't apply to VB6 programs aside from exceedingly rare ones that download and run arbitrary scripts and also grant scripts access to members of these controls.

    This is also a source of typelib compatibility breaks, forcing your programs to be dependent on the broken versions of the controls in the rollup.

    We just had a thread on this here for the common control OCXs though the problems are much broader than that. You don't want to install any version of these rollup attempts on a development machine.

    It isn't related to SP6. At all.
    so what version in post #1 would be best to install.

  5. #5
    PowerPoster
    Join Date
    Feb 2006
    Posts
    24,482

    Re: 2 different versions of SP6?

    As far as I can tell, neither one.

    This seems to be a valid update though: https://www.microsoft.com/en-us/down....aspx?id=10019

  6. #6
    PowerPoster
    Join Date
    Feb 2017
    Posts
    4,987

    Re: 2 different versions of SP6?

    This is the SP6 for the IDE, the "good" one: https://web.archive.org/web/20200812...82/Vs6sp6B.exe

    This is the only one necessary to install.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  



Click Here to Expand Forum to Full Width