Government compliance scans (using eEye Retina Security Scanner) returns results for:
Microsoft Windows Common Controls Code Execution (2720573) - Comctl32.ocx x64
KB2720573 - http://support.microsoft.com/kb/2720573
CVE-2012-1856
Box and File info:
Windows Server 2008 R2 sp1 x64
File: c:\windows\sysWOW64\comctl.ocx
Date modified: 5/22/2000
File version: 6.0.81.5
Size: 594 KB
We can rename the file to make the scan compliant, however it seems SolarWinds needs it to operate and will recreate the file if it was renamed after a restart of the services.
Is there an up to date file out there that we can throw there to make this compliant?
Thanks!