Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: False out-of-date flag for IE 10, Windows 8 RTM

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
EdTittel False out-of-date flag for IE 10, Windows 8 RTM
Member 27th Aug, 2012 20:04
Ranking: 0
Posts: 5
User Since: 17th Nov, 2008
System Score: N/A
Location: N/A
Last edited on 27th Aug, 2012 20:04

Hello, All.

PSI currently flags the 64-bit version of the Adobe Flash Player 11.3.372.94 as out of date for the desktop version of the IE 10 Web browser (you can't run Flash in the Metro-only version of IE on Windows 8). It wants users to install the latest Win7-and-lower version: 11.4.402.265. However Windows 8 Update doesn't yet flag a need for this software, and you can't even use the standalone ...402.265... installer to update the software for this latest and final version of Windows 8.

The scanner needs to be updated to recognize this possibly temporary anomaly for Windows 8 until Microsoft and/or Adobe make an update possible.

Thanks,
--Ed--

ddmarshall RE: False out-of-date flag for IE 10, Windows 8 RTM
Dedicated Contributor 27th Aug, 2012 20:51
Score: 1212
Posts: 965
User Since: 8th Nov 2008
System Score: 98%
Location: UK
The current PSI is not supported on Windows 8.

Flash Player for Internet Explorer 10 on Windows 8 will be updated by Windows Update.
Sites will be able to run Flash Player on Internet Explorer 10 'Metro' if they have been added to a whitelist - so called Compatibility View.
http://msdn.microsoft.com/en-us/library/ie/jj19355...

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+2
-0
EdTittel RE: False out-of-date flag for IE 10, Windows 8 RTM
Member 30th Aug, 2012 16:00
Score: 0
Posts: 5
User Since: 17th Nov 2008
System Score: N/A
Location: N/A
Thanks for the clarification on support status: I expected as much because RTM is not yet GA. But your information was very useful anyway, both to confirm what I was observing with the desktop version of IE 10, and to inform me about the whitelist technique (About which I was blissfully ignorant).

Thanks again,
--Ed--
Was this reply relevant?
+0
-0
ddmarshall RE: False out-of-date flag for IE 10, Windows 8 RTM
Dedicated Contributor 30th Aug, 2012 17:03
Score: 1212
Posts: 965
User Since: 8th Nov 2008
System Score: 98%
Location: UK
It seems that the Flash Player updates through Windows Update won't start until Windows 8 is RTW.
http://forums.adobe.com/thread/1054046?tstart=30

It's not clear whether the Flash Player in the RTM is vulnerable. The exploits currently using the vulnerability use an SWF file embedded in a Word document rather than being drive-by's through Internet Explorer.
http://blogs.technet.com/b/mmpc/archive/2012/08/28...

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer