Security covered with greater file versions?

[Randy]

I ran Microsoft Baseline Security Analyzer and received
3 "yellow X" warnings for files being out of date.

For example, under the caption Reason relating to MS02-
055 Unchecked Buffer in Windows Help Facility Could
Enable Code Execution (Q323255) it reads:

File C:\Windows\system32\hhctrl.ocx has a file version
[5.2.3735.0] that is greater than what is expected
[5.2.3669.0].

Has the security risk been alleviated with the more
current file version?

Thank you.

 

[Roger Abell]

Later versions are said to include fixes released
at earlier versions. The reason this happens is that
the XML file used by the MBSA detection only takes
into account versions released as part of a security
patch, so when there is a later release/update not
categorized as security related you get one of this
type of indications from MBSA.