Secunia SmallBusiness
Overview
Advisories
Research
Forums
Create Profile
Our Commitment
All Threads
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Foxit Reader still seen as insecure after 5.4 downloaded

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
JFCdad Foxit Reader still seen as insecure after 5.4 downloaded
Member 11th Sep, 2012 19:33
Ranking: 0
Posts: 10
User Since: 25th Feb, 2009
System Score: 98%
Location: US
PSI indicated that Foxit Reader 5.3 was insecure. I manually downloaded current versioon (5.4...) and PSI still sees it as insecure.

--
JFCdad

Maurice Joyce RE: Foxit Reader still seen as insecure after 5.4 downloaded
Handling Contributor 12th Sep, 2012 12:00
Score: 10500
Posts: 8,066
User Since: 4th Jan 2009
System Score: 100%
Location: UK
Does it show as insecure after a full PSI rescan?

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 10 for Windows 7
16GB RAM
Was this reply relevant?
+0
-0
JFCdad RE: Foxit Reader still seen as insecure after 5.4 downloaded
Member 12th Sep, 2012 16:07
Score: 0
Posts: 10
User Since: 25th Feb 2009
System Score: 98%
Location: US
Previous version removed and new version of Foxit Reader installed twice, and computer rebooted. Still version 5.4.... seen as insecure by PSI.

--
JFCdad
Was this reply relevant?
+0
-0
Maurice Joyce RE: Foxit Reader still seen as insecure after 5.4 downloaded
Handling Contributor 12th Sep, 2012 16:33
Score: 10500
Posts: 8,066
User Since: 4th Jan 2009
System Score: 100%
Location: UK
What file path is PSI showing?


FINDING A FILE PATH USING PSI

VERSION 2


From the DASHBOARD page click on SCAN RESULTS.

1. This will list all your programmes with a + to the left of each programme.
2. Click the + sign next to the item that U want help with.
3. This will reveal the path under DETECTED INSTANCES.
4. Below DETECTED INSTANCES you will see this You can double click this row for additional information & options>double click it>a box will appear>look to the RIGHT & U will see TROUBLESHOOT REPORT in BLUE writing under the heading TOOLBOX> click TroubleShoot Report & it will reveal some information in a box>highlight the information revealed from ---START--- to ---END--- & copy it (CTRL+C) then post it to the Forum (CTRL+V)

VERSION 3
This version does not have such an easy method to publish the path.

Open PSI>once open select Show Programs.
U will now see a page full of programme icons or a list.
Right click on the programme in error>select Show Details - that will open a box showing the path & version number of the offending file.
U now have 2 options:
1. Write down the exact file path & install version - return to the Forum & type that information.
2. Take a screen shot & publish that.

Update 29 15:32 12/09/2012

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 10 for Windows 7
16GB RAM
Was this reply relevant?
+1
-0
JFCdad RE: Foxit Reader still seen as insecure after 5.4 downloaded
Member 12th Sep, 2012 17:13
Score: 0
Posts: 10
User Since: 25th Feb 2009
System Score: 98%
Location: US
Thank you, Maurice. I did this, and PSI shows C:\Program Files (86) Foxit Software\Foxit Reader.exe 5.3.1.606.
However, at control panel\programs, Foxit Reader 5.4 is shown, and with Windows Explorer, same address, all programs related to Foxit Reader are dated 0/11 (when I downloaded updated version) and are 5.4, with the exception of 3 that were 9/2/2012. I manually deleted all contents of the folder cotaining Foxit Reader files, and re-installed Foxit Reader 5.4 from my desk top. PSI still sees the above version! Hoe to proceed?

--
JFCdad
Was this reply relevant?
+0
-0
Maurice Joyce RE: Foxit Reader still seen as insecure after 5.4 downloaded
Handling Contributor 12th Sep, 2012 17:26
Score: 10500
Posts: 8,066
User Since: 4th Jan 2009
System Score: 100%
Location: UK
While awaiting an answer I have installed Foxit Reader on my test PC & PSI shows it correctly as version 5.4.2.901.

That old rogue file is still on your PC.


DELETING A FILE OR FOLDER

VERSION 2


1. Open PSI>Scan results.

2. Against the programme marked as vulnerable is a + sign to the left of it.

3. Click that & it will reveal DETECTED INSTANCES.

4. Below that are two yellow folders. Click the one WITHOUT a red dot.

5. That will open Windows Explorer & U will be able to see the vulnerable file.
C:\Program Files (86) Foxit Software\Foxit Reader.exe 5.3.1.606.

6. Right click on that file & select delete.

7. Carry out a full PSI scan & all should be in order.

VERSION 3

Open PSI>once open select Show Programs.

U will now see a page full of programme icons or a list.

Right click on the icon that represents the programme in error>select Show Details - that will open a box showing the path & version number of the offending file.

Double click on C:\Program Files (86) Foxit Software\Foxit Reader.exe 5.3.1.606.

That will open Windows Explorer & U will see that file. Right click on it & select delete.

Run a full PSI scan & the problem should be resolved.

Update 12 16:25 12/09/2012



--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 10 for Windows 7
16GB RAM
Was this reply relevant?
+2
-0
JFCdad RE: Foxit Reader still seen as insecure after 5.4 downloaded
Member 12th Sep, 2012 18:03
Score: 0
Posts: 10
User Since: 25th Feb 2009
System Score: 98%
Location: US
Maurice, I did as you suggested and deleted ALL files under Foxit, then reinstalled the program from the internet Foxit web site. I then reopened the Foxit program, and it is labeled Foxit Reader.exe 5.4.2.901.
There is no other Foxit Reader.exe in the file. I also uninstalled the program using the control panel and reinstalled the 5.4.2.901. After all this, PSI still sees Foxit Reader.exe5.3.1.606, and I have done this twice! This is very puzzleing to me

--
JFCdad
Was this reply relevant?
+0
-0
JFCdad RE: Foxit Reader still seen as insecure after 5.4 downloaded
Member 12th Sep, 2012 18:34
Score: 0
Posts: 10
User Since: 25th Feb 2009
System Score: 98%
Location: US
Maurice, Eureka! I deleted and reinstalled both PSI 3.0and Foxit Reader 5.4.2.901, and PSI now says it is OK! I learned a lot following your instructions about the 3.0 PSI. Thanks again!

--
JFCdad
Was this reply relevant?
+0
-0
Maurice Joyce RE: Foxit Reader still seen as insecure after 5.4 downloaded
Handling Contributor 12th Sep, 2012 18:43
Score: 10500
Posts: 8,066
User Since: 4th Jan 2009
System Score: 100%
Location: UK
PSI shows you where it has found that rogue file as follows:

FINDING A FILE PATH USING PSI

VERSION 2

From the DASHBOARD page click on SCAN RESULTS.

1. This will list all your programmes with a + to the left of each programme.
2. Click the + sign next to the item that U want help with.
3. This will reveal the path under DETECTED INSTANCES.


VERSION 3
This version does not have such an easy method to publish the path.

Open PSI>once open select Show Programs.
U will now see a page full of programme icons or a list.
Right click on the programme in error>select Show Details - that will open a box showing the path & version number of the offending file.

What you should see is this:

https://akkkug.bay.livefilestore.com/y1pnCxxPTPOH6...

Does your files match mine?

If need be you can take a screenshot of your files like I have done to show us the files PSI finds.



--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 10 for Windows 7
16GB RAM
Was this reply relevant?
+1
-0
JFCdad RE: Foxit Reader still seen as insecure after 5.4 downloaded
Member 12th Sep, 2012 19:43
Score: 0
Posts: 10
User Since: 25th Feb 2009
System Score: 98%
Location: US
Maurice, mine is exactly like yours now. I tried to make a screen shot, but ccould not. What program do you use for thar?

--
JFCdad
Was this reply relevant?
+0
-0
Maurice Joyce RE: Foxit Reader still seen as insecure after 5.4 downloaded
Handling Contributor 12th Sep, 2012 21:14
Score: 10500
Posts: 8,066
User Since: 4th Jan 2009
System Score: 100%
Location: UK
POSTING A SCREEN SHOT TO THE FORUM

To post a screen shot to the Forum U need to:

1. Capture the image by using a programme such as:
a. Microsoft Paint - details here if unsure how it is done.
http://www.wikihow.com/Take-a-Screenshot-in-Micros...
b. Microsoft One Note
c. Microsoft Snippet (Windows 7 & Vista)
d. Any third party equivalent programme.


2. Save the image to an online repository such as Microsoft Skydrive or here: http://www.picamatic.com/

3. Post the hyperlink to the stored online image to the Forum. Use CTRL+C to copy & CTRL+V to post to the Forum.

Update 11 20:08 12/09/2012


If you want to try it can you make two screenshots showing what PSI is showing you like this:

https://akkkug.bay.livefilestore.com/y1pzbTTpnUt7f...

and the other one when PSI opens Windows Explorer like this:

https://akkkug.bay.livefilestore.com/y1pnCxxPTPOH6...

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 10 for Windows 7
16GB RAM
Was this reply relevant?
+1
-0
JFCdad RE: Foxit Reader still seen as insecure after 5.4 downloaded
Member 12th Sep, 2012 22:07
Score: 0
Posts: 10
User Since: 25th Feb 2009
System Score: 98%
Location: US
Maurice, you are a prince! Thanks so much for all your help. I will get MS Paint!

John (JFCdad)

--
JFCdad
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Factsheets
Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability