dtSearch information relating to Microsoft Security Bulletin MS11-025

Article: dts0227

Applies to: dtSearch 7.67

Microsoft has recently issued an update to the Microsoft Foundation Classes (MFC) to fix a security vulnerability. MFC is a Microsoft class library that provides user interface controls such as menus and toolbars in Windows programs. For more information on the Microsoft update, please see Security Bulletin MS11-025. This article describes changes in dtSearch 7.67 and 7.68 related to the updated Microsoft components.

The dtSearch programs that use MFC incorporate the patched version of the MFC components as of version 7.67. Users with older dtSearch versions should upgrade to version 7.67.

On June 14, 2011, and again on August 7, 2011, after the release of dtSearch 7.67, Microsoft released an updated version of the patches to correct the incompatibility with Windows 2000 described below. dtSearch 7.68 will be built with the newer version of the Microsoft patch.

Information for dtSearch Desktop/Network Users

If you have dtSearch Desktop/Network and your Windows version is Windows XP or later, you can download the upgrade installer here: dtSearch Upgrades Page. After installing the update, your dtSearch installation will have the new dtSearch version with the patched Microsoft components.

If you have Windows 2000, please see "Windows 2000 incompatibility", below.

Information for dtSearch Web Users

If you have dtSearch Web and your Windows version is Windows XP or later, you can download the upgrade installer here: dtSearch Downloads Page. After installing the update, run dtSearch Web Setup and click the "Update All" button to update dtSearch Web on your IIS server.

If you have Windows 2000, please see "Windows 2000 incompatibility", below.

Information for Developers

Updated MFC redistributable files

The dtSearch Engine's .NET API components (dtSearchNetApi2.dll, dtSearchNetApi3.dll, and dtSearchNetApi4.dll) are built with the patched versions of Visual C++, so they will require the patched versions of the MFC and CRT redistributable files vcredist_x86.exe and vcredist_x64.exe. For links to download the current versions of these files, please see: MFC and CRT redistributable downloads.

Windows 2000 incompatibility

The Microsoft patches described in this article did not work under Windows 2000 or earlier versions of Windows. Therefore, with some limited exceptions (described below), dtSearch 7.67 programs work under Windows XP through Windows 7 but not under Windows 2000, Windows 98, or Windows ME. Users with Windows 2000 or who require Windows 2000 support should not upgrade to dtSearch 7.67 at this time.

dtSearch 7.68 will be built with the updated (June 14, 2011) versions of the Microsoft patches, which will correct the Windows 2000 incompatibility.

Developer Components

The following dtSearch developer components are not built with MFC, are not affected by this bulletin, and will continue to work in Windows 2000:

dten600.dll (C/C++ API, 32-bit)

dtengine64.dll (C/C++ API, 64-bit)

dtsjava.dll (Java API, 32-bit and 64-bit)

dtv_ifilter.dll

dtv_ifilter64.dll

dtv_rar.dll

dvt_rar64.dll

lbvProt.dll

dtisapi6.dll

dtSearchNetApi.dll

dtSearchNetApi2.dll

dtSearchNetApi3.dll

dtSearchNetApi4.dll

dtSearch.Spider.dll

dtSearch.Spider2.dll

dtSearch.Spider4.dll

Other executable components are statically linked with MFC and should be upgraded to dtSearch version 7.67.