Secunia
|
|

|
|
|
|
|
|
|
|
|
|
|
|
|
|
Relating to this vendor: |
And, this specific program: Google Talk 1.x |
| CSGalloway | Google Talk - update 1.0.0.104 to latest |
|---|---|
|
2nd Jun, 2012 01:37 |
|
Ranking: 3 Posts: 22 User Since: 12th Sep, 2008 System Score: 97% Location: Raleigh, US |
I use Windows XP Pro sp3 (full updates) and Google talk doesn't update and toolbar.google.com downloads the build I have. What can I do to fix this issue please? |
| Maurice Joyce | RE: Google Talk - update 1.0.0.104 to latest | ||||||||
|
2nd Jun, 2012 11:21 | ||||||||
| Score: 10510 Posts: 8,071 User Since: 4th Jan 2009 System Score: 100% Location: UK |
Are U getting some sort of error message when attempting an update or are U suggesting that PSI has found a vulnerability/End of Life installation? If the former have U tried updating from here: http://www.google.com/talk/ If the latter what path does PSI give U? FINDING A FILE PATH USING PSI VERSION 2 From the DASHBOARD page click on SCAN RESULTS. 1. This will list all your programmes with a + to the left of each programme. 2. Click the + sign next to the item that U want help with. 3. This will reveal the path under DETECTED INSTANCES. 4. Below DETECTED INSTANCES you will see this You can double click this row for additional information & options>double click it>a box will appear>look to the RIGHT & U will see TROUBLESHOOT REPORT in BLUE writing under the heading TOOLBOX> click TroubleShoot Report & it will reveal some information in a box>highlight the information revealed from ---START--- to ---END--- & copy it (CTRL+C) then post it to the Forum (CTRL+V) As an EXAMPLE the end result U post to the Forum should look something like this: ---START--- Program Name: Adobe Flash Player 11.x Security State: Patched Download Link: http://fpdownload.adobe.com/get/flashplayer/curren... Instances Found: C:\Windows\SysWOW64\Macromed\Flash\Flash32_11_2_20 Last System Scan (localtime): 3. Apr 2012, 09:25 Operating System: Microsoft Windows 7 ---END--- Update 17 10:19 02/06/2012 -- Maurice Windows 7 SP1 64 Bit OS HP Intel Pentium i7 IE 10 for Windows 7 16GB RAM |
||||||||
|
|||||||||
| CSGalloway | RE: Google Talk - update 1.0.0.104 to latest | ||||||||
|
2nd Jun, 2012 23:23 | ||||||||
| Score: 3 Posts: 22 User Since: 12th Sep 2008 System Score: 97% Location: Raleigh, US |
---START--- Program Name: Google Talk Security State: Programs that need patching Download Link: http://www.google.com/talk Instances Found: c:\program files\google\google talk\ version 1.0.0.104 Last System Scan (localtime): June 2, 2012, 5:03pm Operating System: Microsoft Windows XP Pro sp3 (fully updated) ---END--- |
||||||||
|
|||||||||
| CSGalloway | RE: Google Talk - update 1.0.0.104 to latest | ||||||||
|
2nd Jun, 2012 23:39 | ||||||||
| Score: 3 Posts: 22 User Since: 12th Sep 2008 System Score: 97% Location: Raleigh, US |
Nothing happens when I download and run GoogleTalk_1.0.0.105_SPS.exe from Secunia. | ||||||||
|
|||||||||
| Maurice Joyce | RE: Google Talk - update 1.0.0.104 to latest | ||||||||
|
3rd Jun, 2012 00:10 | ||||||||
| Score: 10510 Posts: 8,071 User Since: 4th Jan 2009 System Score: 100% Location: UK |
It is running an SPS package which is explained here: http://secunia.com/vulnerability_scanning/personal... Give it a bit of time - if that does not appear to work manually install it. -- Maurice Windows 7 SP1 64 Bit OS HP Intel Pentium i7 IE 10 for Windows 7 16GB RAM |
||||||||
|
|||||||||
| CSGalloway | RE: Google Talk - update 1.0.0.104 to latest | ||||||||
|
3rd Jun, 2012 06:49 | ||||||||
| Score: 3 Posts: 22 User Since: 12th Sep 2008 System Score: 97% Location: Raleigh, US |
I have let it run 3 hours and also tried to install it manually. Still shows the old version.... Any ideas? Also I went to talk.google.com and it just give me .104 - not 105. I think Secunia is giving me a false report... |
||||||||
|
|||||||||
| Maurice Joyce | RE: Google Talk - update 1.0.0.104 to latest | ||||||||
|
3rd Jun, 2012 13:48 | ||||||||
| Score: 10510 Posts: 8,071 User Since: 4th Jan 2009 System Score: 100% Location: UK |
Not sure what your problem is. I have tested the install using PSI version 3 BETA 3 & PSI version 2. The install works perfectly as U can see from my PSI scan result below where version 105 is clearly showing. Program Name: Google Talk 1.x Security State: Patched Download Link: http://dl.secunia.com/SPS/GoogleTalk_1.0.0.105_SPS... Instances Found: C:\Program Files (x86)\Google\Google Talk\googletalk.exe, version: 1.0.0.105 Last System Scan (localtime): 3. Jun 2012, 11:45 Operating System: Microsoft Windows 7 My research shows that Google/Doubleclick Talk version 104 was dated 1/1/2007 - the update to version 105 took place on 21/1/2007 (both very old files) The correct hash details for the latest download are: CRC32: A71F13AD MD5: FDC694C06891E14DD5BE5B668E4A69E0 SHA-1: E8158A95522C7D4E59048CDEF5EBE61CBBA22D27 -- Maurice Windows 7 SP1 64 Bit OS HP Intel Pentium i7 IE 10 for Windows 7 16GB RAM |
||||||||
|
|||||||||
| CSGalloway | RE: Google Talk - update 1.0.0.104 to latest | ||||||||
|
3rd Jun, 2012 16:52 | ||||||||
| Score: 3 Posts: 22 User Since: 12th Sep 2008 System Score: 97% Location: Raleigh, US |
Can anyone suggest any debugging steps please? | ||||||||
|
|||||||||
| Bradley | RE: Google Talk - update 1.0.0.104 to latest | ||||||||
|
4th Jun, 2012 04:51 | ||||||||
| Score: 1 Posts: 8 User Since: 19th Dec 2007 System Score: N/A Location: N/A |
I have Windows 7 64 bit version (6.1) with all the updates. Using the download link provided by secunia psi beta V3, I get the following file: GoogleTalk_1.0.0.105_SPS.exe When I attempt to install it, it prompts: "This version requires Windows 2000, XP or 2003; you have 6.1." "Would you like to exit or continue the installation anyway?" I took the continue option and it seems to be working fine. The only other option aborts and does nothing. Kind regards, Bradley |
||||||||
|
|||||||||
| CSGalloway | RE: Google Talk - update 1.0.0.104 to latest | ||||||||
|
4th Jun, 2012 16:51 | ||||||||
| Score: 3 Posts: 22 User Since: 12th Sep 2008 System Score: 97% Location: Raleigh, US |
I downloaded the file and here is what I got: CRC32: B78AF799 FileDate: 06/04/12 FileSize: 1504768 FileTime: 08:00 MD5: 0D2DA46FEBA7D0DAE83128DFB7E64612 SHA1: 8473D001A14E37E1FDE0213E29FED9B8EE6B8257 SHA256: 1BAC850528D28104F464AE17A8DC9945099891BD2B262709F0 SHA384: 6F1B69CFA0EA305AFCFA37C301EB490FEE9584E6539572FDF8 SHA512: 4DEF4882A7DD98C0E0F2235CBB057B540491525D1BEA281641 I have run it with Google Talk running and not running - just does not show anything.... I am very mystified about this... |
||||||||
|
|||||||||
| tguerrette | Google Talk - update 1.0.0.104 to latest | ||||||||
|
4th Jun, 2012 22:04 | ||||||||
| Score: 1 Posts: 3 User Since: 6th Dec 2008 System Score: N/A Location: US |
I was prompted to update Google Talk today on my Windows 7 x64 system. The installer said it was not designed to work for my OS. I went to http://www.google.com/talk/index.html and downloaded the client from there and it was the same 1.0.0.104 version I had before. The version that downloaded from the "run manual update" was GoogleTalk_1.0.0.105_SPS. This appears to be some kind of error since Google has not released a new version on their site yet. In PSI 3.0 it does not appear I can ignore this detection either. That feature really needs to be re-enabled for 3.0. |
||||||||
|
|||||||||
| TarraAnn85 | RE: Google Talk - update 1.0.0.104 to latest | ||||||||
|
4th Jun, 2012 23:22 | ||||||||
| Score: 1 Posts: 2 User Since: 4th Jun 2012 System Score: N/A Location: US |
Hey Charles, I am having a issue with Google Talk as well. PSI stated that it was unsecure and that there was a patch to download, so i downloaded the patch and ran it, it said that it was designed for another type of system would i still like to run it i put yes, it installed a new version but the new version has absolutely no "Send Files" option, so i uninstalled it and downloaded again from the Google website, which gave me the other version back i had previously, but it took my score back down to 99%. Im at the moment just gonna ignore that patch for Google Talk as it apparently doesn't have all the features of the current one and i know other people who are having the same issue. |
||||||||
|
|||||||||
| ddmarshall | RE: Google Talk - update 1.0.0.104 to latest | ||||||||
|
4th Jun, 2012 23:53 | ||||||||
| Score: 1126 Posts: 910 User Since: 8th Nov 2008 System Score: 100% Location: UK |
@tguerrette You can ignore a program with the latest version of the Beta. Right click the program icon to reveal the option. I can confirm that the download from the Google site is 104. Also, it installs in Appdata rather than Program Files for Vista or later unless you use this procedure: http://support.google.com/talk/bin/answer.py?hl=en... This might cause some problems for automatic updating. As Maurice said, Wikipedia states the latest version is 105 dated 2007. -- This answer is provided “as-is.” You bear the risk of using it. |
||||||||
|
|||||||||
| Anthony Wells | RE: Google Talk - update 1.0.0.104 to latest | ||||||||
|
5th Jun, 2012 00:03 | ||||||||
| Score: 2324 Posts: 3,203 User Since: 19th Dec 2007 System Score: N/A Location: N/A |
Hello , Using the "download" link for Talk on this page , I get Talk version 1.0.0.105 and if I look in the Program Files folder (after default installation) see there is is a version 1.0.0.107**** upgrader.exe file in the folder :- http://www.google.com/talk/intl/en-GB/index.html You will also see there is the Google Chat plug-in which , I think , tends to supersede Talk . ****NOTE : The Secunia Advisory 48448 for Talk 1.x (classed as "less critical") is here and it says that version 1.0.0.105 is vulnerable ; so you at least would be advised to go with the 1.0.0.107 upgrade , as mentioned above , even if it is not specifically noted in the SA :- http://secunia.com/advisories/48448/ Sorry , I do not have the time to look further for you ; you should try Google Help if you need more stuff . Take care Anthony Take care Anthony -- It always seems impossible until its done. Nelson Mandela |
||||||||
|
|||||||||
| ddmarshall | RE: Google Talk - update 1.0.0.104 to latest | ||||||||
|
5th Jun, 2012 00:38 | ||||||||
| Score: 1126 Posts: 910 User Since: 8th Nov 2008 System Score: 100% Location: UK |
I've just had a look at the original vulnerability report. http://retrogod.altervista.org/9sg_gtalk_uri.html As far as I can see the 105 version is only available from Google International sites. It also appears that 104 is not actually vulnerable. The vulnerabilty only exists if 105 is installed onto a system with 104 installed without manually uninstalling 104 first. The download from http://www.google.com/talk/intl/en-GB/ includes the upgrader file. I can't find a US English version. If 105 was never offered to US users, they could safely carry on with 104. That must be the reason Google have not updated the US download. -- This answer is provided “as-is.” You bear the risk of using it. |
||||||||
|
|||||||||
| Bradley | RE: Google Talk - update 1.0.0.104 to latest | ||||||||
|
5th Jun, 2012 01:08 | ||||||||
| Score: 1 Posts: 8 User Since: 19th Dec 2007 System Score: N/A Location: N/A |
Your two posts get my vote as being the most accurate in the US at least. Thanks, I'm back to 104 now and ignoring the "threat". Bradley |
||||||||
|
|||||||||
| Anthony Wells | RE: Google Talk - update 1.0.0.104 to latest | ||||||||
|
5th Jun, 2012 01:17 | ||||||||
| Score: 2324 Posts: 3,203 User Since: 19th Dec 2007 System Score: N/A Location: N/A Last edited on 5th Jun, 2012 01:24 |
Hi ddm , If you look top right of the Google en-GB download page you linked to , you will see a language choice which gives you an English GB or US option . The US option downloads version 1.0.0.104 from Google Inc. which would seem to confirm your US 104/International 105+107 theory . No way that I can see the PSI handling this detection correctly . EDIT: Bradley , Just to be sure , to be sure , it might be wise to make sure you clean out the Talk folder completely and then (re)install 104 en-US or 105/107 en-GB to choice . Take care Anthony -- It always seems impossible until its done. Nelson Mandela |
||||||||
|
|||||||||
| CSGalloway | RE: Google Talk - update 1.0.0.104 to latest | ||||||||
|
5th Jun, 2012 03:39 | ||||||||
| Score: 3 Posts: 22 User Since: 12th Sep 2008 System Score: 97% Location: Raleigh, US |
Then I assume the Secunia upgrade notice for .104 in the US is false. If I do flag it as igore, will Secunia PSI still update when the next US version isavailable? | ||||||||
|
|||||||||
| Bradley | RE: Google Talk - update 1.0.0.104 to latest | ||||||||
|
5th Jun, 2012 04:50 | ||||||||
| Score: 1 Posts: 8 User Since: 19th Dec 2007 System Score: N/A Location: N/A |
Okay, I did a clean uninstall and removed the folder and registry entries too (with ccleaner). Then I downloaded the US version from the google site as you specified and it is 1.0.0.104 and installed it. I set the ignore feature as suggested by ddmarshall and all is well and happy now. Thanks - Bradley |
||||||||
|
|||||||||
| Maurice Joyce | RE: Google Talk - update 1.0.0.104 to latest | ||||||||
|
5th Jun, 2012 11:02 | ||||||||
| Score: 10510 Posts: 8,071 User Since: 4th Jan 2009 System Score: 100% Location: UK |
@CSGalloway. The answer to your question is no. If U ignore it then any scan carried out will not find that programme to advise U. -- Maurice Windows 7 SP1 64 Bit OS HP Intel Pentium i7 IE 10 for Windows 7 16GB RAM |
||||||||
|
|||||||||
| ddmarshall | RE: Google Talk - update 1.0.0.104 to latest | ||||||||
|
5th Jun, 2012 15:27 | ||||||||
| Score: 1126 Posts: 910 User Since: 8th Nov 2008 System Score: 100% Location: UK |
Google Talk 'should' update itself automatically. However, Google do seem to be encouraging alternatives. For example, the Google Talk Forum is now locked. -- This answer is provided “as-is.” You bear the risk of using it. |
||||||||
|
|||||||||
Not a customer already?Learn more about how our market leading Vulnerability Management solutions can help you manage risk and ensure compliance. |