Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Wrong Flash Detected Nets 99%

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Adobe Systems
And, this specific program:
Macromedia Flash Player 7.x

This thread has been marked as locked.
CraigS0726 Wrong Flash Detected Nets 99%
Member 5th Oct, 2011 00:51
Ranking: 7
Posts: 10
User Since: 2nd Mar, 2010
System Score: N/A
Location: US
XP SP3 --- I'm being penalized for a "Detected" Macromedia Flash Player Ver 7.0.14.0 (End-of-Life issue) when C:\WINDOWS\system32\Macromed\Flash shows the NEW 11 Ver installed today; Reboot and 2nd PSI Scan net same error. No other .OCX's appear in C:\ .... \Flash string.

Any ideas why this happened and how to Fix ?? Many Thanks !!

ddmarshall RE: Wrong Flash Detected Nets 99%
Dedicated Contributor 5th Oct, 2011 01:18
Score: 1212
Posts: 967
User Since: 8th Nov 2008
System Score: 98%
Location: UK
Post the Troubleshoot Report
http://secunia.com/vulnerability_scanning/personal...

It looks like the Flash Player which was distributed by Microsoft in some versions of XP.

The detection will probably go away tomorrow when Flash Player 11 has been added to the Secunia definitions. The Flash Player 7 will then be treated as a zombie.

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+0
-0
MehulBhai RE: Wrong Flash Detected Nets 99%
Member 5th Oct, 2011 07:45
Score: 36
Posts: 12
User Since: 17th Jul 2011
System Score: N/A
Location: IN
Same here. I have installed the new Adobe Flash Player 11.0.1.152 & Adobe AIR 3.0, rather upgraded, but the PSI still shows the old Adobe Flash Player 10.3.183.10 before the upgrade even after miutliple scannings in PSI, reinstalls of Adobe Flash Player and PC reboots & has stopped showing even Adobe AIR in the Scan Results in PSI.
Was this reply relevant?
+0
-0
M.Rehman RE: Wrong Flash Detected Nets 99%
Secunia Official 5th Oct, 2011 09:36
Score: 25
Posts: 41
User Since: 12th May 2011
System Score: N/A
Location: Copenhagen, DK
Hi.

The Adobe Flash Player 11.x has been added to the our database, and will now be detected by the PSI.

--
Kind regards,

Munib Rehman
Secunia Support

Secunia PSI
http://secunia.com/vulnerability_scanning/personal
ddmarshall RE: Wrong Flash Detected Nets 99%
Dedicated Contributor 5th Oct, 2011 11:19
Score: 1212
Posts: 967
User Since: 8th Nov 2008
System Score: 98%
Location: UK
Last edited on 5th Oct, 2011 11:20
@MehulBhai

Because of the time zone where Adobe operates, their updates are often released after working hours in Europe. So, if you install a new release manually instead of through PSI, you should wait until a few hours after work starts in Europe before scanning.

I often find it takes a while for the new Flash Player releases to propagate through the Adobe content distribution network. If I download from the Adobe download page just after the release is announced, I get the previous version.

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+0
-0
Maurice Joyce RE: Wrong Flash Detected Nets 99%
Handling Contributor 5th Oct, 2011 11:39
Score: 11799
Posts: 9,040
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Adobe Flash Player 11 & Adobe AIR 3 are now showing after a full PSI scan.

If problems remain after a full PSI scan can U please publish the Troubleshooting Report for us to help:


FINDING A FILE PATH

From the DASHBOARD page click on SCAN RESULTS.

1. This will list all your programmes with a + to the left of each one.
2. Click the + sign next to the item that U want help with.
3. This will reveal the path under DETECTED INSTANCES.
4. Highlight it then copy (CTRL+C) then paste (CTRL+V)) that path back to the Forum.
OR THIS METHOD WHICH GIVES A HELPER MORE INFORMATION
4a Below DETECTED INSTANCES you will see You can double click this row for additional information & options>double click it>a box will appear>click TROUBLESHOOT REPORT>Now highlight the information revealed from START to END & copy it (CTRL+C) then post it to the Forum (CTRL+V)

The end result U post to the Forum should look like this:
---START---

Program Name:
Apple iTunes 10.x

Security State:
Insecure

Download Link:
http://appldnld.apple.com/iTunes10/061-9638.201103...

Instances Found:
C:\Program Files\iTunes\iTunes.exe, version: 10.1.2.17

Last System Scan (localtime):
3. Mar 2011, 16:47

Operating System:
Microsoft Windows XP Home Edition, Service Pack 3

---END---
Update 9 09:33 13/03/2011




--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+3
-0
CraigS0726 RE: Wrong Flash Detected Nets 99%
Member 5th Oct, 2011 13:35
Score: 7
Posts: 10
User Since: 2nd Mar 2010
System Score: N/A
Location: US
Last edited on 5th Oct, 2011 13:42
Thanks for the Replies. Typical of "amateurs" I looked in the Macromed Folder rather than the system32 Folder shown in Scan Results. Turns out I have a "C:\Windows\system32\FLASH.OCX --- File Type: Active X Control --- Dated 8-18-11 Showing Ver data 7.0.14.0 that the Scan Result Refers To and doesn't like re: End of Life status.

Another File is "C:\Windows\system32\FLASH.OCX.PSI" - - File Type: PSI File -- Dated 4/28/08 that ALSO shows Ver 7.0.14.0 BUT is Not Referred to in the Scan Results.

While PSI has not Disliked FLASH.OCX before May I DELETE them Both?
Was this reply relevant?
+0
-0
ddmarshall RE: Wrong Flash Detected Nets 99%
Dedicated Contributor 5th Oct, 2011 14:23
Score: 1212
Posts: 967
User Since: 8th Nov 2008
System Score: 98%
Location: UK
Last edited on 5th Oct, 2011 14:27
I don't think the .psi file has anything to do with PSI. Did you have PSI installed in 2008? The only reference to the .psi extension I can find is related to a program called PrimalScript. Did you install something on 8-18-11?

Forgot the link
http://www.fileinfo.com/extension/psi

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+0
-0
CraigS0726 RE: Wrong Flash Detected Nets 99%
Member 5th Oct, 2011 14:54
Score: 7
Posts: 10
User Since: 2nd Mar 2010
System Score: N/A
Location: US
Last edited on 5th Oct, 2011 14:55
I Re-Named the -- C:\Windows\system32\FLASH.OCX -- file to ".old" and PSI Liked That - Green Sys Tray Bars again and 100%.

Can't figure out Why PSI Disliked that File just now Vs all prior scans but All is Well again.

I won't worry about the .PSI File since it wasn't noted in the Scan Result.
That it shows Ver 7.0.14.0 via Properties like the Scan Result Uh-Oh Designation means it does or had something to do with Flash.
Was this reply relevant?
+0
-0
Anthony Wells RE: Wrong Flash Detected Nets 99%
Expert Contributor 5th Oct, 2011 15:24
Score: 2445
Posts: 3,337
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hello All ,

For Information , there seem to still be scan problems re Flash 11.x .

I loaded both the NPAPI and ActiveX successfully this morning (CET) and there was no change in the PSI display for sometime (hour or two) . I decided I would try a "programme rescan" (NOT my usual practice) and the greyed out "rescan flash" window ran for some time . I tried to close it and then the whome GUI - no go . I tried to close the psi.exe from the Task Manager - no go . I tried to reboot my system - no go . I tried to a complete shutdown - no go . I did a forced shutdown which of course did work .

A cold restart and no change in the PSI - still showing 10.x for both ActiveX and NPAPI . .A full manual scan now only shows only the ActiveX :ie NO NPAPI display and no (AU) offered in the rhs "Install Solution" column (nor the double click splash window) .

As per another thread , I still get no Firefox 7.0.1 (AU) either .

Will see what I get when I go for AIR now ( all on XP SP3) .

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+1
-0
ddmarshall RE: Wrong Flash Detected Nets 99%
Dedicated Contributor 5th Oct, 2011 15:54
Score: 1212
Posts: 967
User Since: 8th Nov 2008
System Score: 98%
Location: UK
Sorry to tack onto someone else's thread but the Forum refuses to believe I am logged on when I click create thread.

Flash Player 11 support seems to be a work in progress. The Firefox plugin is not being reported separately. I was going to ask if that is a deliberate change or a bug. Neither is reported in the Secure Browsing screen.
I've had a few 'Not respondings' from the Secunia PSI GUI on various machines today, although it has always eventually woken up.
Adobe Air 3.0 doesn't seem to be a problem except it doesn't have the automatic update option. Flash Player 11 has also lost this option. Is this until Secunia get more information from Adobe?

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+0
-0
Anthony Wells RE: Wrong Flash Detected Nets 99%
Expert Contributor 5th Oct, 2011 16:01
Score: 2445
Posts: 3,337
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 5th Oct, 2011 16:05
Hello ddm ,

This used to be a problem/bug which I thought had been resolved ; select "all threads" and use the grey/black link on the rhs just above the red "threads" banner .

Anthony

EDIT :I have reported the Flash display problems with the PSI in an ongoing discussion
(ref another problem) with Emil at support .

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+1
-0
ddmarshall RE: Wrong Flash Detected Nets 99%
Dedicated Contributor 5th Oct, 2011 16:59
Score: 1212
Posts: 967
User Since: 8th Nov 2008
System Score: 98%
Location: UK
Aha! Thanks, I think I'd found that before but the brain's going.

D

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+0
-0
Anthony Wells RE: Wrong Flash Detected Nets 99%
Expert Contributor 5th Oct, 2011 21:01
Score: 2445
Posts: 3,337
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hi ,

Quick update :-

Air 3 installed correctly but not acknowledged by the PSI display - have waited several hours .

I (bravely:)) ran a single programme rescan and it gave almost instataneous recognition , but the "Auto-Update" facility has gone awol .

Take care

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
wr RE: Wrong Flash Detected Nets 99%
Contributor 5th Oct, 2011 21:27
Score: 308
Posts: 736
User Since: 30th Mar 2008
System Score: 100%
Location: US
Last edited on 6th Oct, 2011 20:25
Hi all

Just a quick FYI regarding AFP- as ddm
reported neither is reported in Secure Browsing
section of v1.5.0.2 on full scan & only
Activex is listed in Patched section.

This last scan about 15 min ago-after installing
updates yesterday (10/04) full scan didn't report any version of AFP. Thought maybe
just needed to wait till Secunia came back to work today to update data base-evidently they
didn't 'get it right' on the NPAPI detection
but I'm sure that will happen shortly.
Will rescan later today to see if correction(s)
have been made. AFP is working as Ff is my
default browser & AFP does work though
not detected.

Take care.

Regards, wr
EDIT: Just rescanned-still no NPAPI Detection of Flash Player-- 18:15 local time 10/05/2012
EDIT 2: Scan finished @ 14:07 local time-ActiveX & NPAPI listed in Patched but not in Secure Browsing. Unsubscribing.

--
HP Pavilion Slimline s3020n
Windows Vista Home Premium SP2 32 bit
AMD 64 Athlon X2
Firefox 24.4.0 ESR
The weakest link of a computer system is always sitting in front of the monitor.
Was this reply relevant?
+0
-0
Anthony Wells RE: Wrong Flash Detected Nets 99%
Expert Contributor 7th Oct, 2011 11:40
Score: 2445
Posts: 3,337
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 7th Oct, 2011 11:52
Hello again ,

Can confirm that like OGSO , I now see a new style display for Flash 11.x ; rather than two entries , as with version 10.x , I have just one which has changed from being (originally) designated as ActiveX and has become NPAPI ***. It now has THREE detected instances :ie: NPAPI , ActiveX and the "embedded" AIR versions . The Auto-Update update facility is missing for Flash and AIR ; still there for Shockwave .

***EDIT : I should say , the actual "Program" now has no designation other than 11.x but shows (only) as NPAPI in the "detected version" column n the Scan Results module .

Some progress at least ; as yet , I have no specific reply from Emil .

Take care

Anthony


--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
wr RE: Wrong Flash Detected Nets 99%
Contributor 7th Oct, 2011 21:01
Score: 308
Posts: 736
User Since: 30th Mar 2008
System Score: 100%
Location: US
Last edited on 7th Oct, 2011 21:02
Hi Anthony

Just for 'giggles' I went to the Secure Browsing
section & now have have 2 entries in
both ActiveX & NPAPI. This is in v.1.5.0.2-& I don't have Adobe Air installed.

I guess 'working on it' would best describe the
action involved.

Take care.

Regards, wr
EDIT: Corrected typo-sorry.

--
HP Pavilion Slimline s3020n
Windows Vista Home Premium SP2 32 bit
AMD 64 Athlon X2
Firefox 24.4.0 ESR
The weakest link of a computer system is always sitting in front of the monitor.
Was this reply relevant?
+0
-0
Anthony Wells RE: Wrong Flash Detected Nets 99%
Expert Contributor 7th Oct, 2011 22:02
Score: 2445
Posts: 3,337
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 7th Oct, 2011 22:04
Hi wr ,

Glad OGSO is still subscribing :))

PSI 2.0.0.3003 shows/designates simply as Adobe Flash Player 11.x (no version data) once under IE8 and once under Mozzy Ff 7.x in the Scure Browsing module

AIR appears to have only the NPAPI plug-in loaded in it's directory ; never really use IE so don't know how that might differ .

With this new website hane gevin oop on spelling and sundry typo corijections ; although still need to Edit to cover up congenital idiocy and blatant misinforming of our readers :))

Take care

Anthony

PS: you said you were wating for Mozzy to launch Ff8 , you might want to look at 7(0.1) and get a feel for it and see which add-ons you might need to relinqush ; NoSquint is fine but no Tidy read and worse still no Colourful Tabs since v6 .

PSI 2.0.0.3003 runs fine IF it loads successfully on your system , worth a look if you have not already done so .



--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+1
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer