Jump to content

GDI+ Detection Tool


leungda

Recommended Posts


I battled with that too. With Windows XP it seems to only take you to a website that tells you to run Windows & Office Updates.

The long and the short of it is, it's a registry entry. You don't need to install or "slipstream" this file.

Somewhere in your Registry Tweaks .reg file, you need to put...

;-----  tell windows I've already run the GDI+ detection tool (gdidettool.exe)
;-----  in references to http://support.microsoft.com/?kbid=873374
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\GdiDetectionTool]
"GDITool"=dword:00000001

Of course add "Windows Registry Editor Version 5.00" to the top if this is your first registry tweaking durring unattended install.

I discovered this using a registry compare program. (there are several referenced in the forums). Well The above tweak is probably also, but I felt like answering.

Also I included as a default bookmark in my

winnt.sif file:

[FavoritesEx]
Title1 = "Microsoft GDI+ Detection Tool - September 14, 2004 - KB873374.url"
URL1   = "http://support.microsoft.com/?kbid=873374"

To help reference the file since it doesn't install and the first time it's run it won't showup as a critical update again. note: (I found the quotes necessary or my winnt.sif file would bomb.)

Link to comment
Share on other sites

@JoeMSFN, very nice trick the bookmark thing, i thought the same a time ago and here is my

[FavoritesEx]
   BrandIEUsingUnattended = Yes
   Title1 = "Microsoft GDI+ Detection Tool - KB873374.url"
   URL1 = "http://www.microsoft.com/technet/security/bulletin/ms04-028.mspx"

Link to comment
Share on other sites

It is possible to install this update silently. This is how i did it:

1. Extract the hotfix

2. Open gdidet.xml with notepad.

3 Change all "PROMPT" an "YESNOPROMPT" in "NOPROMPT"

4. save the changes

5. Now we need to make an IExpress package

Click Here for information about making an IExpress package

If you follow this guide above, be sure to use the INF file in the "Install Program To Launch" phase.

6. Save this package as KB873374.exe and put in in your update folder.

7. Add this hotfix to svcpack.inf, no switches requierd

The hotfix will now be silently installed

Good Luck!!

Link to comment
Share on other sites

Guys,

Why do i need this update?

It shows me nothing and helps in no way...Just send You to this useless MS page informing to update office (though I slipstreamed all office updates and nothing to install for office anymore)

Why this s*** is critical?

Alex

Link to comment
Share on other sites

Why this s*** is critical?

Alex

haha that is a really good question LoL

technically it advices about a big (potential) flaw that let the "malicious" user to run code on most of m$ components. the thing is that it just leave you in a new page (?)

couldn't be more helpful if WU directly detected the programs affected and redirect/installs the necessary patches? (correct me if necessary :P )

Link to comment
Share on other sites

  • 4 weeks later...
It is possible to install this update silently. This is how i did it:

1. Extract the hotfix

2. Open gdidet.xml with notepad.

3 Change all "PROMPT" an "YESNOPROMPT" in "NOPROMPT"

4. save the changes

5. Now :

...

The hotfix will now be silently installed

Good Luck!!

step 5. changed to :

kb873374.cmd =

msiutil2.exe /cif gdidet.cif /extended gdidet.xml /log

and alls is fine now ;)

---thx all for the help :]

Link to comment
Share on other sites

Self Extraction Directive file to create an iexpress package.

KB873374.SED

[Version]
Class=IEXPRESS
SEDVersion=3
[Options]
PackagePurpose=InstallApp
ShowInstallProgramWindow=0
HideExtractAnimation=1
UseLongFileName=0
InsideCompressed=0
CAB_FixedSize=0
CAB_ResvCodeSigning=0
RebootMode=I
InstallPrompt=%InstallPrompt%
DisplayLicense=%DisplayLicense%
FinishMessage=%FinishMessage%
TargetName=%TargetName%
FriendlyName=%FriendlyName%
AppLaunched=%AppLaunched%
PostInstallCmd=%PostInstallCmd%
AdminQuietInstCmd=%AdminQuietInstCmd%
UserQuietInstCmd=%UserQuietInstCmd%
SourceFiles=SourceFiles
[Strings]
InstallPrompt=
DisplayLicense=C:\TEMP\KB873374\EULA.TXT
FinishMessage=L'outil logiciel n'a détecté aucune application Microsoft Office, Microsoft Picture It! ou Microsoft .NET Framework susceptible d'être affectée par la vulnérabilité relative à la sécurité du composant graphique GDI+ sur votre ordinateur.
TargetName=C:\TEMP\BUILD\KB873374.EXE
FriendlyName=Microsoft GDI+ Detection Tool
AppLaunched=gditool.inf
PostInstallCmd=<None>
AdminQuietInstCmd=
UserQuietInstCmd=
FILE0="ADVPACK.DLL"
FILE1="gdidet.cif"
FILE2="gdidet.xml"
FILE3="gditool.inf"
FILE4="msiutil2.exe"
FILE5="oudetect.dll"
FILE6="W95INF16.DLL"
FILE7="W95INF32.DLL"
[SourceFiles]
SourceFiles0=C:\TEMP\KB873374\
[SourceFiles0]
%FILE0%=
%FILE1%=
%FILE2%=
%FILE3%=
%FILE4%=
%FILE5%=
%FILE6%=
%FILE7%=

Don't forget to create an EULA.TXT file before and edit GDIDET.XML

To launch silently

KB873374.EXe /Q:A /R:N

To check the installation status:

regjump HKLM\SOFTWARE\Microsoft\GdiDetectionTool

GDITool set to 1 = completed

for ENU versions of Windows, replace the French string with :

FinishMessage=The software tool did not detect any Microsoft Office, Microsoft Picture It! or Microsoft .NET Framework software on your computer that is vulnerable to the GDI+ Graphics Component security vulnerability.

Link to understand what this tool is intended for

GDI+ security updates

Link to comment
Share on other sites

  • 3 years later...
It is possible to install this update silently. This is how i did it:

1. Extract the hotfix

2. Open gdidet.xml with notepad.

3 Change all "PROMPT" an "YESNOPROMPT" in "NOPROMPT"

4. save the changes

5. Now we need to make an IExpress package

Click Here for information about making an IExpress package

If you follow this guide above, be sure to use the INF file in the "Install Program To Launch" phase.

6. Save this package as KB873374.exe and put in in your update folder.

7. Add this hotfix to svcpack.inf, no switches requierd

The hotfix will now be silently installed

Good Luck!!

hi,

sorry but I couldn't understand 3. sentence?

here is gdi.xml;which one of prompt is change and which to?

<MsiUtil>
<!-- The result if the patch is needed -->
<DetectionResult statusSet="Installed">
[b]<Action type="YesNoPrompt">[/b]
<Title>Microsoft GDI+ Detection Tool</Title>
<Text>Yazılım aracı, güvenlik açığı içerme olasılığı bulunan bir Microsoft yazılımı çalıştırdığınızı algıladı. Bu güvenlik açığını giderecek güvenlik güncelleştirmelerini Microsoft'tan edinebilirsiniz.


Bu güvenlik açığı ve onu hedefleyen gerekli güvenlik güncelleştirmeleri hakkında daha fazla bilgi edinmek ister misiniz? (Hayır'ı tıklatırsanız bu aracın bir daha sizi uyarmayacağını unutmayın.)</Text>
<Button type="Yes">
<Action type="LaunchURL">http://go.microsoft.com/fwlink/?LinkId=33568</Action>
</Button>
<Button type="No">
[b]<Action type="Prompt">[/b]
<Title>Microsoft GDI+ Detection Tool</Title>
<Text>Yazılım aracı, güvenlik açığı içerme olasılığı bulunan bir Microsoft yazılımı çalıştırdığınızı algıladı. En son güvenlik güncelleştirmelerini yüklemezseniz, sisteminiz risk altına girecektir. Bu güvenlik açığı ve en son güvenlik güncelleştirmelerinin nasıl yükleneceği veya yazılım aracının yeniden nasıl çalıştırılacağı hakkında daha fazla bilgi için aşağıdaki adresi ziyaret etmenizi öneririz:

http://support.microsoft.com/?kbid=873374</Text>
</Action>
</Button>
</Action>
</DetectionResult>
<!-- The result if the patch is not needed -->
<DetectionResult statusSet="NotInstalled,NoShow">
[b]<Action type="Prompt">[/b]
<Title>Microsoft GDI+ Detection Tool</Title>
<Text>Yazılım aracı, bilgisayarınızda GDI+ Grafik Bileşenleri güvenlik açığı içerebilecek herhangi bir Microsoft Office, Microsoft Picture It! veya Microsoft .NET Framework yazılımı algılamadı.</Text>
</Action>
</DetectionResult>
</MsiUtil>

all this bold what to change? :unsure:

all actiontype from "yesnoprompt" to "noprompt"?

added:always prompt me to go another page :angry:

Edited by ZEUS__
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...