Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Google Talk - update 1.0.0.104 to latest

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Google
And, this specific program:
Google Talk 1.x

This thread has been marked as locked.
CSGalloway Google Talk - update 1.0.0.104 to latest
Member 2nd Jun, 2012 01:37
Ranking: 3
Posts: 22
User Since: 12th Sep, 2008
System Score: 97%
Location: US
I use Windows XP Pro sp3 (full updates) and Google talk doesn't update and toolbar.google.com downloads the build I have.

What can I do to fix this issue please?

Maurice Joyce RE: Google Talk - update 1.0.0.104 to latest
Handling Contributor 2nd Jun, 2012 11:21
Score: 11569
Posts: 8,888
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Are U getting some sort of error message when attempting an update or are U suggesting that PSI has found a vulnerability/End of Life installation?

If the former have U tried updating from here:

http://www.google.com/talk/

If the latter what path does PSI give U?


FINDING A FILE PATH USING PSI VERSION 2

From the DASHBOARD page click on SCAN RESULTS.

1. This will list all your programmes with a + to the left of each programme.
2. Click the + sign next to the item that U want help with.
3. This will reveal the path under DETECTED INSTANCES.
4. Below DETECTED INSTANCES you will see this You can double click this row for additional information & options>double click it>a box will appear>look to the RIGHT & U will see TROUBLESHOOT REPORT in BLUE writing under the heading TOOLBOX> click TroubleShoot Report & it will reveal some information in a box>highlight the information revealed from ---START--- to ---END--- & copy it (CTRL+C) then post it to the Forum (CTRL+V)

As an EXAMPLE the end result U post to the Forum should look something like this:
---START---

Program Name:
Adobe Flash Player 11.x

Security State:
Patched

Download Link:
http://fpdownload.adobe.com/get/flashplayer/curren...

Instances Found:
C:\Windows\SysWOW64\Macromed\Flash\Flash32_11_2_20 2_228.ocx, version: 11.2.202.228 (ActiveX)

Last System Scan (localtime):
3. Apr 2012, 09:25

Operating System:
Microsoft Windows 7

---END---


Update 17 10:19 02/06/2012

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-1
CSGalloway RE: Google Talk - update 1.0.0.104 to latest
Member 2nd Jun, 2012 23:23
Score: 3
Posts: 22
User Since: 12th Sep 2008
System Score: 97%
Location: US
---START---

Program Name:
Google Talk

Security State:
Programs that need patching

Download Link:
http://www.google.com/talk

Instances Found:
c:\program files\google\google talk\ version 1.0.0.104

Last System Scan (localtime):
June 2, 2012, 5:03pm

Operating System:
Microsoft Windows XP Pro sp3 (fully updated)

---END---


Was this reply relevant?
+0
-0
CSGalloway RE: Google Talk - update 1.0.0.104 to latest
Member 2nd Jun, 2012 23:39
Score: 3
Posts: 22
User Since: 12th Sep 2008
System Score: 97%
Location: US
Nothing happens when I download and run GoogleTalk_1.0.0.105_SPS.exe from Secunia.
Was this reply relevant?
+0
-0
Maurice Joyce RE: Google Talk - update 1.0.0.104 to latest
Handling Contributor 3rd Jun, 2012 00:10
Score: 11569
Posts: 8,888
User Since: 4th Jan 2009
System Score: N/A
Location: UK
It is running an SPS package which is explained here:

http://secunia.com/vulnerability_scanning/personal...

Give it a bit of time - if that does not appear to work manually install it.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-1
CSGalloway RE: Google Talk - update 1.0.0.104 to latest
Member 3rd Jun, 2012 06:49
Score: 3
Posts: 22
User Since: 12th Sep 2008
System Score: 97%
Location: US
I have let it run 3 hours and also tried to install it manually. Still shows the old version....

Any ideas?

Also I went to talk.google.com and it just give me .104 - not 105. I think Secunia is giving me a false report...
Was this reply relevant?
+1
-0
Maurice Joyce RE: Google Talk - update 1.0.0.104 to latest
Handling Contributor 3rd Jun, 2012 13:48
Score: 11569
Posts: 8,888
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Not sure what your problem is. I have tested the install using PSI version 3 BETA 3 & PSI version 2.

The install works perfectly as U can see from my PSI scan result below where version 105 is clearly showing.

Program Name:
Google Talk 1.x
Security State:
Patched
Download Link:
http://dl.secunia.com/SPS/GoogleTalk_1.0.0.105_SPS...

Instances Found:
C:\Program Files (x86)\Google\Google Talk\googletalk.exe, version: 1.0.0.105


Last System Scan (localtime):
3. Jun 2012, 11:45

Operating System:
Microsoft Windows 7

My research shows that Google/Doubleclick Talk version 104 was dated 1/1/2007 - the update to version 105 took place on 21/1/2007 (both very old files)

The correct hash details for the latest download are:

CRC32: A71F13AD
MD5: FDC694C06891E14DD5BE5B668E4A69E0
SHA-1: E8158A95522C7D4E59048CDEF5EBE61CBBA22D27



--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-1
CSGalloway RE: Google Talk - update 1.0.0.104 to latest
Member 3rd Jun, 2012 16:52
Score: 3
Posts: 22
User Since: 12th Sep 2008
System Score: 97%
Location: US
Can anyone suggest any debugging steps please?
Was this reply relevant?
+0
-0
Bradley RE: Google Talk - update 1.0.0.104 to latest
Member 4th Jun, 2012 04:51
Score: 1
Posts: 8
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
I have Windows 7 64 bit version (6.1) with all the updates. Using the download link provided by secunia psi beta V3, I get the following file:

GoogleTalk_1.0.0.105_SPS.exe

When I attempt to install it, it prompts:
"This version requires Windows 2000, XP or 2003; you have 6.1."
"Would you like to exit or continue the installation anyway?"

I took the continue option and it seems to be working fine. The only other option aborts and does nothing.

Kind regards,

Bradley
Was this reply relevant?
+0
-0
CSGalloway RE: Google Talk - update 1.0.0.104 to latest
Member 4th Jun, 2012 16:51
Score: 3
Posts: 22
User Since: 12th Sep 2008
System Score: 97%
Location: US
I downloaded the file and here is what I got:

CRC32: B78AF799
FileDate: 06/04/12
FileSize: 1504768
FileTime: 08:00
MD5: 0D2DA46FEBA7D0DAE83128DFB7E64612
SHA1: 8473D001A14E37E1FDE0213E29FED9B8EE6B8257
SHA256: 1BAC850528D28104F464AE17A8DC9945099891BD2B262709F0 EEACA6C47846BD
SHA384: 6F1B69CFA0EA305AFCFA37C301EB490FEE9584E6539572FDF8 2E955E40449840E392C438A6C65B1188C0CD2DE5A6EB01
SHA512: 4DEF4882A7DD98C0E0F2235CBB057B540491525D1BEA281641 6EDEF3F3111D3BDB36C55E6B3B6A0218BCCD9A8D0383A92E7E 916243B59214243C402F1F543056

I have run it with Google Talk running and not running - just does not show anything....

I am very mystified about this...
Was this reply relevant?
+1
-0
tguerrette Google Talk - update 1.0.0.104 to latest
Member 4th Jun, 2012 22:04
Score: 1
Posts: 3
User Since: 6th Dec 2008
System Score: N/A
Location: US
I was prompted to update Google Talk today on my Windows 7 x64 system. The installer said it was not designed to work for my OS.

I went to http://www.google.com/talk/index.html and downloaded the client from there and it was the same 1.0.0.104 version I had before. The version that downloaded from the "run manual update" was GoogleTalk_1.0.0.105_SPS.

This appears to be some kind of error since Google has not released a new version on their site yet.

In PSI 3.0 it does not appear I can ignore this detection either. That feature really needs to be re-enabled for 3.0.
Was this reply relevant?
+1
-0
TarraAnn85 RE: Google Talk - update 1.0.0.104 to latest
Member 4th Jun, 2012 23:22
Score: 1
Posts: 2
User Since: 4th Jun 2012
System Score: N/A
Location: US
Hey Charles,
I am having a issue with Google Talk as well. PSI stated that it was unsecure and that there was a patch to download, so i downloaded the patch and ran it, it said that it was designed for another type of system would i still like to run it i put yes, it installed a new version but the new version has absolutely no "Send Files" option, so i uninstalled it and downloaded again from the Google website, which gave me the other version back i had previously, but it took my score back down to 99%. Im at the moment just gonna ignore that patch for Google Talk as it apparently doesn't have all the features of the current one and i know other people who are having the same issue.
Was this reply relevant?
+1
-0
ddmarshall RE: Google Talk - update 1.0.0.104 to latest
Dedicated Contributor 4th Jun, 2012 23:53
Score: 1198
Posts: 954
User Since: 8th Nov 2008
System Score: 98%
Location: UK
@tguerrette

You can ignore a program with the latest version of the Beta. Right click the program icon to reveal the option.

I can confirm that the download from the Google site is 104. Also, it installs in Appdata rather than Program Files for Vista or later unless you use this procedure:
http://support.google.com/talk/bin/answer.py?hl=en...
This might cause some problems for automatic updating.

As Maurice said, Wikipedia states the latest version is 105 dated 2007.

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+2
-0
Anthony Wells RE: Google Talk - update 1.0.0.104 to latest
Expert Contributor 5th Jun, 2012 00:03
Score: 2414
Posts: 3,310
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hello ,

Using the "download" link for Talk on this page , I get Talk version 1.0.0.105 and if I look in the Program Files folder (after default installation) see there is is a version 1.0.0.107**** upgrader.exe file in the folder :-

http://www.google.com/talk/intl/en-GB/index.html

You will also see there is the Google Chat plug-in which , I think , tends to supersede Talk .

****NOTE : The Secunia Advisory 48448 for Talk 1.x (classed as "less critical") is here and it says that version 1.0.0.105 is vulnerable ; so you at least would be advised to go with the 1.0.0.107 upgrade , as mentioned above , even if it is not specifically noted in the SA :-

http://secunia.com/advisories/48448/


Sorry , I do not have the time to look further for you ; you should try Google Help if you need more stuff .

Take care

Anthony

Take care

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-1
ddmarshall RE: Google Talk - update 1.0.0.104 to latest
Dedicated Contributor 5th Jun, 2012 00:38
Score: 1198
Posts: 954
User Since: 8th Nov 2008
System Score: 98%
Location: UK
I've just had a look at the original vulnerability report.
http://retrogod.altervista.org/9sg_gtalk_uri.html

As far as I can see the 105 version is only available from Google International sites.

It also appears that 104 is not actually vulnerable. The vulnerabilty only exists if 105 is installed onto a system with 104 installed without manually uninstalling 104 first.

The download from http://www.google.com/talk/intl/en-GB/ includes the upgrader file. I can't find a US English version. If 105 was never offered to US users, they could safely carry on with 104. That must be the reason Google have not updated the US download.

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+2
-0
Bradley RE: Google Talk - update 1.0.0.104 to latest
Member 5th Jun, 2012 01:08
Score: 1
Posts: 8
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Your two posts get my vote as being the most accurate in the US at least.

Thanks, I'm back to 104 now and ignoring the "threat".

Bradley
Was this reply relevant?
+0
-0
Anthony Wells RE: Google Talk - update 1.0.0.104 to latest
Expert Contributor 5th Jun, 2012 01:17
Score: 2414
Posts: 3,310
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 5th Jun, 2012 01:24
Hi ddm ,

If you look top right of the Google en-GB download page you linked to , you will see a language choice which gives you an English GB or US option . The US option downloads version 1.0.0.104 from Google Inc. which would seem to confirm your US 104/International 105+107 theory . No way that I can see the PSI handling this detection correctly .

EDIT: Bradley , Just to be sure , to be sure , it might be wise to make sure you clean out the Talk folder completely and then (re)install 104 en-US or 105/107 en-GB to choice .

Take care

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
CSGalloway RE: Google Talk - update 1.0.0.104 to latest
Member 5th Jun, 2012 03:39
Score: 3
Posts: 22
User Since: 12th Sep 2008
System Score: 97%
Location: US
Then I assume the Secunia upgrade notice for .104 in the US is false. If I do flag it as igore, will Secunia PSI still update when the next US version isavailable?
Was this reply relevant?
+1
-0
Bradley RE: Google Talk - update 1.0.0.104 to latest
Member 5th Jun, 2012 04:50
Score: 1
Posts: 8
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Okay, I did a clean uninstall and removed the folder and registry entries too (with ccleaner).
Then I downloaded the US version from the google site as you specified and it is 1.0.0.104 and installed it. I set the ignore feature as suggested by ddmarshall and all is well and happy now.

Thanks - Bradley
Was this reply relevant?
+1
-0
Maurice Joyce RE: Google Talk - update 1.0.0.104 to latest
Handling Contributor 5th Jun, 2012 11:02
Score: 11569
Posts: 8,888
User Since: 4th Jan 2009
System Score: N/A
Location: UK
@CSGalloway.

The answer to your question is no. If U ignore it then any scan carried out will not find that programme to advise U.





--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
ddmarshall RE: Google Talk - update 1.0.0.104 to latest
Dedicated Contributor 5th Jun, 2012 15:27
Score: 1198
Posts: 954
User Since: 8th Nov 2008
System Score: 98%
Location: UK
Google Talk 'should' update itself automatically.
However, Google do seem to be encouraging alternatives. For example, the Google Talk Forum is now locked.

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability