DevTest - Need to remove remediate VC++ dll files with security vulnerabilities

Products

• Service Virtualization

Issue/Introduction

Our security team has flagged several of our DevTest system as being at risk for a security vulnerability. The cause of the security failure, is the msvcr100.dll, which is used by Mircosoft Visual C++ 2010. Are there any requirements or dependencies that DevTest 10.5 has related to Visual C++ 2010. We need assistance in removing or remediating this issue.

 

 

 

Cause

The DLL in question is the msvcr100.dll, which is a Microsoft Visual C++ 2010 dll.  The dll version 10.0.30319 is the base Microsoft Visual C++ 2010 Redistributed installation; the 10.0.40219 release is from the Microsoft Visual C++ 2010 Redistributed Service Pack 1 installation.

See Microsoft's KB2565063 -https://support.microsoft.com/en-us/help/2565063/ms11-025-description-of-the-security-update-for-visual-c-2010-service, regarding the Security Update for the Service Pack 1.

Environment

Release : 10.6

Component : CA Service Virtualization

Resolution

DevTest does not have any dependencies with  Visual C++ 2010. You can safely uninstall this appication without affecting DevTest.

Additional Information

• DevTest 10.5 System Requirements - https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/continuous-testing/devtest-solutions/10-5/installing/preinstallation/system-requirements.html
• DevTest 10.5 Release Notes - Third Party Acknowledgments - https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/continuous-testing/devtest-solutions/10-5/release-notes/third-party-acknowledgments.html