>>>A security patch is available at http://msdn.microsoft.com/en-ca/vfoxpro/bb264582.aspx.
>>>
>>>The instructions say to download and run it. We've done this on our production box where we build our exes.
>>>
>>>What impact does this have on the runtime files that are already out there on our clients' machines?
>>>Do they need patching too or is simply rebuilding the exe on the patched computer enough?
>>>
>>>Regards,
>>>Mike
>>
>>
>>Mike,
>>
>>As far as I can see it's only Gdiplus.dll
>>
>>http://www.microsoft.com/downloads/details.aspx?FamilyID=36957f47-9d8b-477d-bd60-5959e5a2eafa&displaylang=en
>>
>>http://support.microsoft.com/?kbid=955370
>
>Ok, but, does this mean that each or our client's computer needs to have this patch applied? If so, why is this a VFP security patch and not simply a Windows Security patch?

It depends where you have installed your gdiplus.dll

http://fox.wikis.com/wc.dll?Wiki~VFP9RuntimeFiles~VFP

If installed in ...\shared\vfp or the app folder, I'd say it's your problem - if you have installed gdiplus.dl from the CD

If installed in winsysdir, it depends on whether you have overwritten an updated version - I see many updates for this go back to 2004 http://www.microsoft.com/technet/security/bulletin/ms04-028.mspx
But then, the customer may have updated the gdiplus.dll in the winsysdir by now


I have installed mine in the winsysdir, but if a more recent version existed, I did not overwrite
[ I'm safe - for me it's a windows update for the customer ]