List of Microsoft XML Parser (MSXML) versions

This article lists the version numbers of Microsoft XML Core Services or the Microsoft XML parser (MSXML). Different versions of MSXML are included with various Microsoft products, such as Microsoft Windows, Microsoft Internet Explorer, Microsoft Office, and Microsoft SQL Server. MSXML is also updated when you install software updates for various Microsoft products.

Microsoft provides several different XML parsers. The System.xml parser and the System.XML.XmlReader XML parser are included with the Microsoft .NET Framework 2.0. The MSXML parser is included in the Msxml.dll file, the Msxml2.dll file, the Msxml3.dll file, the Msxml4.dll file, the Msxml5.dll file, the Msxml6.dll file, and one or more resource files. Notice that Windows HTTP Services (Winhttp*.dll) is also included with some versions of MSXML.

The Microsoft XML parser is a Component Object Model (COM) implementation of the W3C DOM model. Two versions are associated with each parser: the release version of the MSXML parser and the actual file version of the DLL that contains the parser. The release version of the MSXML parser (for example, versions 2.5, 2.6, 3.0, 4.0, 5.0, and 6.0) identifies the milestone of development.

MSXML versions that have been released by Microsoft

Notes

• MSXML versions 1.x and 2.x are no longer supported by Microsoft.
• MSXML 3.0 is supported by Microsoft only if you are running Service Pack 5 (SP5) or a later service pack.
• MSXML 4.0 is supported by Microsoft only if you are running Service Pack 2 (SP2).
• MSXML 5.0 and MSXML 6.0 are supported by Microsoft.
• This table includes the version of MSXML that is included in security updates that were released on October 10, 2006 (MS06-061), on November 14, 2006 (MS06-071), and on August 14, 2007 (MS07-042). For more information about the security updates, click the following article numbers to view the articles in the Microsoft Knowledge Base:
  924191  (http://support.microsoft.com/kb/924191/ ) MS06-061: Vulnerabilities in Microsoft XML Core Services could allow remote code execution
  928088  (http://support.microsoft.com/kb/928088/ ) MS06-071: Vulnerability in Microsoft XML Core Services could allow remote code execution
  936227  (http://support.microsoft.com/kb/936227/ ) MS07-042: Vulnerability in Microsoft XML Core Services could allow remote code execution
• After you install the security update that is described in Microsoft security bulletin MS06-061, you cannot use MSXML 2.6 in Internet Explorer. This behavior is by design. The security update packages set the "kill bit" for MSXML 2.6. The "kill bit" prevents MSXML 2.6 from running in Internet Explorer.
• 32-bit versions of MSXML (Wmsxml*.dll.) on 64-bit versions of Windows use the same MSXML and file version numbers that are listed in this table.
• If MSXML 4.0 is installed on a computer that is running Microsoft Windows 98 or Windows Millennium Edition, the Msxml4a.dll file is installed. If the parser is installed on a computer that is running Windows NT, Windows 2000, or Windows XP, the WinHTT5.dll file is installed.

MSXML versions that are included with other Microsoft products and software updates

Replaced MSXML security update - MS02-008

MSXML versions that are included with Microsoft Internet Explorer

MSXML versions that are included with MDAC

MSXML versions that are included with other Microsoft products

This is not a complete list of MSXML versions that are included with other Microsoft products. Note If the MSXML parser is updated on a computer that has Microsoft Application Center 2000 installed, you must reinstall Application Center 2000. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

For more information, click the following article numbers to view the articles in the Microsoft Knowledge Base: