navigation bar left navigation bar right

Secunia CSI7
navigation left tab Advisories navigation right tab
navigation left tab Research navigation right tab
navigation left tab Forums navigation right tab
navigation left tab Create Profile navigation right tab
navigation left tab Our Commitment navigation right tab
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Adobe Reader listed as second Flash Player (NPAPI) v2.0

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
MattS1984 Adobe Reader listed as second Flash Player (NPAPI) v2.0
Member 19th Oct, 2012 15:24
Ranking: 2
Posts: 9
User Since: 19th Oct, 2012
System Score: N/A
Location: US
Hi there was an earlier thread with the exact same topic reporting that after updating to Adobe Reader 11, Secunia is picking up on NPSWF32.dll in C:\Program Files (x86)\Adobe\Reader 11.0\Reader which is not the current version. Secunia reports this as a Zombie Installation but it is finding it nonetheless.

The other thread was marked as resolved even though the solution was not directly regarding this issue. Can I:

A. manually copy the current file (NPSWF32_11_4_402_287.dll) to the Reader directory and remove the old one. If so, do I need to rename the copied file without the version number?

B. just delete the reader copy of flash. Since it's a zombie installation I was wondering if they didn't just install it in case you don't have flash independently installed. Will deleting the Reader copy affect normal Reader use?

C. Secunia exclude this result from scans?

D. Something I didn't think of?

I am using PSI v. 2.0.0.4003

--
Info. Security Specialist
Windows 7 x64
PSI v2.0.0.4003

Leendert Kip Adobe Reader listed as second Flash Player (NPAPI) v2.0
Member 19th Oct, 2012 15:51
Score: 70
Posts: 526
User Since: 22nd Jan 2009
System Score: 100%
Location: NL
After reading your post I ckecked and found the same. Ran a full scan, no change. I'll do nothing before someone more experienced tells us what to do.

--
PC: JJ Computer Services
Intel Core I3 2100 3.1Ghz
DDR3 Kingston ValueRam 4GB 1333
Windows 7 Home Premium 64bits SP1
Secunia PSI 3.0.0.9016
Internet Explorer 9
Mozilla Firefox 31NL

Laptop: MSI GT780DX
Intel Core I5-2450
DDR3 RAM 6GB
Windows 7 Home Premium 64bits SP1
Secunia PSI 3.0.0.9016
Internet Explorer 11
Mozilla Firefox 31NL
Was this reply relevant?
+0
-0
MattS1984 RE: Adobe Reader listed as second Flash Player (NPAPI) v2.0
Member 19th Oct, 2012 16:37
Score: 2
Posts: 9
User Since: 19th Oct 2012
System Score: N/A
Location: US
I now realize this should probably be in the "Programs" forum. I didn't see it at first and thought it should go under PSI because PSI is the product I'm using. Thats a little confusing.

--
Info. Security Specialist
Windows 7 x64
PSI v2.0.0.4003
Was this reply relevant?
+0
-0
Leendert Kip Adobe Reader listed as second Flash Player (NPAPI) v2.0
Member 19th Oct, 2012 16:56
Score: 70
Posts: 526
User Since: 22nd Jan 2009
System Score: 100%
Location: NL
I think you are in the right forum. The problem is not in Adobe Reader of Flash but in PSI because PSI for some reason doesn't recognise Reader and/or Flash.

--
PC: JJ Computer Services
Intel Core I3 2100 3.1Ghz
DDR3 Kingston ValueRam 4GB 1333
Windows 7 Home Premium 64bits SP1
Secunia PSI 3.0.0.9016
Internet Explorer 9
Mozilla Firefox 31NL

Laptop: MSI GT780DX
Intel Core I5-2450
DDR3 RAM 6GB
Windows 7 Home Premium 64bits SP1
Secunia PSI 3.0.0.9016
Internet Explorer 11
Mozilla Firefox 31NL
Was this reply relevant?
+0
-0
ddmarshall RE: Adobe Reader listed as second Flash Player (NPAPI) v2.0
Dedicated Contributor 19th Oct, 2012 17:52
Score: 1219
Posts: 971
User Since: 8th Nov 2008
System Score: 98%
Location: UK
Don't mess with the copy of Flash Player in the Adobe Reader files.

Adobe don't keep the copy in Adobe Reader synchronised unless the Flash Player issue is exploitable inside Adobe Reader. The design since Adobe Reader X makes this unlikely.

PSI normally ignores this location. I imagine this is just a question of the detection rules needing to be updated for Adobe Reader XI.

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+0
-0
Leendert Kip Adobe Reader listed as second Flash Player (NPAPI) v2.0
Member 19th Oct, 2012 18:30
Score: 70
Posts: 526
User Since: 22nd Jan 2009
System Score: 100%
Location: NL
Hi D. D. Marshall, thanks for this info. I don't change anything and hope that support changes the detection rules next week.

--
PC: JJ Computer Services
Intel Core I3 2100 3.1Ghz
DDR3 Kingston ValueRam 4GB 1333
Windows 7 Home Premium 64bits SP1
Secunia PSI 3.0.0.9016
Internet Explorer 9
Mozilla Firefox 31NL

Laptop: MSI GT780DX
Intel Core I5-2450
DDR3 RAM 6GB
Windows 7 Home Premium 64bits SP1
Secunia PSI 3.0.0.9016
Internet Explorer 11
Mozilla Firefox 31NL
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


Secunia is a member of FIRST Secunia is a member of EDUcause Secunia is a member of The Open Group Secunia is a member of FS-ISAC
 
Secunia © 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer
follow Secunia on Facebook follow Secunia on Twitter follow Secunia on LinkedIn follow Secunia on YouTube follow Secunia Xing follow Secunias RSS feed follow Secunia on Google+