none
No Visual Studio 2013 Update 2 Download for msdia120.dll (Ref. KB2927432) RRS feed

  • Question

  • We have a system with msdia120.dll (Visual Studio 2013 Debug Interface Access Library, path: C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\msdia120.dll) installed but was pointed out by auditor that the file (version 12.0.21005.1) has security vulnerability according to KB2927432.

    In the KB2927432 (https://support.microsoft.com/en-hk/help/2927432/description-of-visual-studio-2013-update-2)  we are suggested to upgrade to Microsoft Visual Studio 2013 Update 2, so that the msdia120.dll can be updated to version 12.0.30501.0.

    However I could not download this update as it is already removed from Microsoft website. (from link "Download the latest Visual Studio 2013 update package now").

    Is there anywhere I can download the update, or the file in particular? If not, any advice on this please? Thanks!


    Thursday, March 15, 2018 10:47 AM

All replies

  • Hi,

    Welcome to MSDN forum.

    In the blog, you can download the ISO file for visual studio 2013 update 2(We also have Visual Studio 2013 Update 2 available as an ISO.).

    https://blogs.msdn.microsoft.com/visualstudio/2014/05/12/visual-studio-2013-update-2-is-here/

    It is recommend to download the latest update for visual studio 2013, the latest update contain the bugs fixed in the previous update.

    Best regards,

    Joyce


    Please remember to click "Mark as Answer" the responses that resolved your issue, and to click "Unmark as Answer" if not. This can be beneficial to other community members reading this thread. If you have any compliments or complaints to MSDN Support, feel free to contact MSDNFSF@microsoft.com.

    Friday, March 16, 2018 9:05 AM
  • Just for your information, I was able to trace this back on our system to an install of Visual Studio 2015, specifically a hidden MSI called 'Visual C++ IDE Debugger Package'.

    This package includes an insecure version of msdia120.dll 12.0.21005.1 but as far as I can tell there's no way to update it to the secure version 12.0.30501.0.

    So sounds like Visual Studio 2015 includes an insecure DLL from version 2013. Would need to be fixed by Microsoft, probably.

    Friday, December 6, 2019 3:30 PM
  • Further to previous message: 'Visual C++ IDE Debugger Package' can be removed using the following command:

    MsiExec.exe /X {F3F23EAE-D617-3A1F-8717-FACD35A1ECEE}

    Found this removed msdia120.dll and resolved the issue. It may break parts of Visual Studio, use at your own risk.

    Monday, December 23, 2019 3:59 PM