Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: PSI3 doesnt recognize correct version of Adobe Flash Player

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
grizzlybear PSI3 doesnt recognize correct version of Adobe Flash Player
Member 11th Jul, 2012 17:19
Ranking: 0
Posts: 2
User Since: 11th Jul, 2012
System Score: N/A
Location: AT
Have installed PSI3 recently and am very disapointed about it. It tells me all the time that I have installed Adobe Flash Player version 11.2.202.228, whereas my installed version is 11.3.300.265 (the latest). This wasnt so with PSI2.
How can I change back again to PSI2 ???
Regards,
grizzlybear

Maurice Joyce RE: PSI3 doesnt recognize correct version of Adobe Flash Player
Handling Contributor 11th Jul, 2012 17:31
Score: 11626
Posts: 8,915
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 11th Jul, 2012 18:43
Use the link below my Signature Block.

Once activated it will auto uninstall V3 & reinstall V2 once U accept the EULA.

Please be aware that Secunia have not yet updated their database to the latest version. I have suggested it to them this afternoon so it should appear tomorrow.

At the moment after a full PSI rescan it should show that U do not have Adobe Flash installed.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+3
-0
scsummit RE: PSI3 doesnt recognize correct version of Adobe Flash Player
Member 11th Jul, 2012 18:54
Score: 2
Posts: 2
User Since: 23rd Jun 2008
System Score: N/A
Location: US
I actually find that 3.0 doesn't recognize that latest updates to a number of programs, at least not immediately. That's why I'm continuing to use FileHippo and CNET Tech Tracker to double check.
Was this reply relevant?
+1
-0
Maurice Joyce RE: PSI3 doesnt recognize correct version of Adobe Flash Player
Handling Contributor 11th Jul, 2012 19:03
Score: 11626
Posts: 8,915
User Since: 4th Jan 2009
System Score: N/A
Location: UK
It is not meant to.

What NORMALLY happens is:

1. A programme is UPDATED by the user to enjoy the latest vendor bug fixes & enhancements. Provided the vendor has updated the meta data PSI should show the latest version number in Scan Results after a FULL PSI rescan or U can wait, & in due course, a PSI icon tray notification "balloon" message will appear giving the update details without a scan***.

2. If there is a major VERSION change then 1. above MAY NOT work if the new version is not on the Secunia database. What happens in real life is the programme is removed from the user Scan Results until this is corrected by whatever means.

3. If any programme installed is secure & not End of Life PSI WILL NOT NOTIFY a user to update. The rationale for this is fully explained in the FAQ - basically PSI is a vulnerability checker not a general updater.

4. ALPHA (Includes Google Canary/Dev & Mozilla Aurora) & BETA programme versions are not catered for.

5. If for some reason points 1 & 2 do not work the PSI "Suggest A Programme" feature should be used. Provided the meta data submitted is correct the Secunia database will be updated.

*** Microsoft Updates may be slightly different.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+3
-0
scsummit RE: PSI3 doesnt recognize correct version of Adobe Flash Player
Member 11th Jul, 2012 19:38
Score: 2
Posts: 2
User Since: 23rd Jun 2008
System Score: N/A
Location: US
Maurice,

Perhaps then the last screen should say NOT "All Programs Are Up To Date," but rather "All Programs Are Secure."

Also, I realize that you are in the UK, but please note that across the pond, we spell it Programs, not Programmes.

Thank you for your excellent reply, especially that PSI is a security checker, not an update checker.
Was this reply relevant?
+1
-0
Maurice Joyce RE: PSI3 doesnt recognize correct version of Adobe Flash Player
Handling Contributor 11th Jul, 2012 23:24
Score: 11626
Posts: 8,915
User Since: 4th Jan 2009
System Score: N/A
Location: UK
The wording aspect of many functions in V3 have already been commented on.

I suspect they will not change it immediately because under certain circumstance "All Programs Are Secure." could be misleading.

An example: Currently in PSI version 3 users are told that Adobe Flash is up to date. That is correct but it is NOT totally secure in that an unpatched vulnerability remains. Finding out that information with that version is a time consuming nightmare.

The wording on the status of each programme shown in the scan results does require a rethink so that users are more informed about each item & whether it is Totally Secure - Fully Patched but Vulnerable - Vulnerable - End of Life.





--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-0
grizzlybear RE: PSI3 doesnt recognize correct version of Adobe Flash Player
Member 12th Jul, 2012 16:18
Score: 0
Posts: 2
User Since: 11th Jul 2012
System Score: N/A
Location: AT
Thanks to everybody for their comments. What I do not really understand is the fact that PSI3 claims that an older version is installed, while a more recent one is present. I double checked with "FileHippo" when I ve used the Windows 32-bit version, unfortunately this program seems not to work with the 64-bit one. CNET I ve not used so far, but will try it now.
Best regards,
grizzlybear
Was this reply relevant?
+0
-0
Anthony Wells RE: PSI3 doesnt recognize correct version of Adobe Flash Player
Expert Contributor 13th Jul, 2012 23:01
Score: 2428
Posts: 3,316
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

HI ,

I have also noted the "unusually" long delay in PSI 3 recognising that a proramme has ben patched/updated ; it took Secunia 2/3 days longer than Mozilla Firefox to provide the Advisory (that includes a weekend) and then a furhter 2/3 days for the PSI to detect that I had installed the latest VLC Media Player update .

Adobe Flash Player is only showing the NPAPI update and no sign of the ActiveX icon after a similar time delay . VlC was a "security update" whilst Flash is a "bug fix" .

I cannot say if the same is/was apparent in PSI 2.0x .

Take care

Anthony



--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
throkr. RE: PSI3 doesnt recognize correct version of Adobe Flash Player
Member 14th Jul, 2012 02:36
Score: 72
Posts: 85
User Since: 22nd Nov 2009
System Score: 100%
Location: BE
Just for info : I'm running PSI 2.0.0.4003 and, after update to latest version 11.3.300.265, both Adobe Flash Players (NPAPI and Active X) are perfectly detected ...

--
Win 8.1.1 Pro x64

OSS Pro - MBAM Pro - SAS Pro - Secunia PSI (2.0.0.3003)
Mozilla Firefox - Cyberfox (x64) - SRWare Iron

- All current versions & updates -
Was this reply relevant?
+0
-0
bhenshaw RE: PSI3 doesnt recognize correct version of Adobe Flash Player
Member 14th Jul, 2012 07:22
Score: 18
Posts: 67
User Since: 29th Apr 2009
System Score: 93%
Location: US
on 14th Jul, 2012 02:36, throkr. wrote:
Just for info : I'm running PSI 2.0.0.4003 and, after update to latest version 11.3.300.265, both Adobe Flash Players (NPAPI and Active X) are perfectly detected ...


I too am running PSI 2.0.0.4003 and updated to Adobe Flash Player 11.3.300.265 two days ago and Secunia still reports that I am running the old version 11.2.202.228. I went to the Adobe site to check what version I am actually running and it said I am running 11.3.300.265.

When will PSI be updated to reflect the correct new version?

Bill
Was this reply relevant?
+0
-0
Maurice Joyce RE: PSI3 doesnt recognize correct version of Adobe Flash Player
Handling Contributor 14th Jul, 2012 07:41
Score: 11626
Posts: 8,915
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 14th Jul, 2012 07:49
PSI is showing the latest version. Looks like U have remnants of an older version installed.

FINDING A FILE PATH USING PSI

VERSION 2


From the DASHBOARD page click on SCAN RESULTS.

1. This will list all your programmes with a + to the left of each programme.
2. Click the + sign next to the item that U want help with.
3. This will reveal the path under DETECTED INSTANCES.
4. Below DETECTED INSTANCES you will see this You can double click this row for additional information & options>double click it>a box will appear>look to the RIGHT & U will see TROUBLESHOOT REPORT in BLUE writing under the heading TOOLBOX> click TroubleShoot Report & it will reveal some information in a box>highlight the information revealed from ---START--- to ---END--- & copy it (CTRL+C) then post it to the Forum (CTRL+V)

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-0
bhenshaw RE: PSI3 doesnt recognize correct version of Adobe Flash Player
Member 14th Jul, 2012 17:55
Score: 18
Posts: 67
User Since: 29th Apr 2009
System Score: 93%
Location: US
Hi Maurice,

Thanks for your reply. This is what it says:

---START---

Program Name:
Adobe Flash Player 11.x (ActiveX)

Security State:
Patched

Download Link:
http://dl.secunia.com/SPS/FlashPlayer_11.3.300.257...

Instances Found:

C:\Windows\SysWOW64\Macromed\Flash\Flash32_11_2_20 2_228.ocx, version: 11.2.202.228 (ActiveX)

Last System Scan (localtime):
13. Jul 2012, 22:20

Operating System:
Microsoft Windows 7, Microsoft Windows 7

---END---

However, when I go to the Adobe site and check my version it shows I am running 11.3.300.265.

How do I get PSI to recognize that?

Thanks,

Bill

Was this reply relevant?
+1
-0
Maurice Joyce RE: PSI3 doesnt recognize correct version of Adobe Flash Player
Handling Contributor 14th Jul, 2012 18:49
Score: 11626
Posts: 8,915
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Bill,
U have got remnants of the old version. This is caused by updating when a Flash element is running during the update.

DELETING A FILE OR FOLDER

VERSION 2


1. Open PSI>Scan results.

2. Against the programme marked as vulnerable is a + sign to the left of it.

3. Click that & it will reveal DETECTED INSTANCES.

4. Below that are two yellow folders. Click the one WITHOUT a red dot.

5. That will open Windows Explorer & U will be able to see the vulnerable file.
C:\Windows\SysWOW64\Macromed\Flash\Flash32_11_2 _20 2_228.ocx, version: 11.2.202.228 (ActiveX)

6. Right click on that file & select delete.

7. Carry out a full PSI scan & all should be in order.


--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+3
-0
bhenshaw RE: PSI3 doesnt recognize correct version of Adobe Flash Player
Member 14th Jul, 2012 20:44
Score: 18
Posts: 67
User Since: 29th Apr 2009
System Score: 93%
Location: US
Maurice,

That took care of it.

Thanks!

Bill
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability