Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Windows 8 - Adobe Flash Player Updates

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
stephenrea Windows 8 - Adobe Flash Player Updates
Member 25th Oct, 2012 16:53
Ranking: 0
Posts: 7
User Since: 18th Jul, 2012
System Score: 100%
Location: US
FYI. While you do still need to download updates for Flash Player for Chrome and Firefox the Internet Explorer Flash Player is now built in to Windows 8 and its updates are now published through Windows update. So the Secunia System Scanner may need updating as it still thinks Adobe is out of date.

See here for a screenshot of the Adobe Installer Message when you try to update using the Update Link provided by PSI.

http://askthemct.com/adobeupdater.png

--
Thanks,
.rev

Maurice Joyce RE: Windows 8 - Adobe Flash Player Updates
Handling Contributor 25th Oct, 2012 17:18
Score: 11733
Posts: 8,982
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Although PSI does not officially support Windows 8/IE10 it may still be reporting correctly.

Have you looked at the Flash Files in Windows Explorer it points to?

They should be like this:
https://akkkug.bay.livefilestore.com/y1pmZmDNzfqK-...

There may be duplicate files of those highlighted in yellow that have a different version number/date which PSI will find & trigger the update advice.

If additional files exist they require manual deletion for PSI to report correctly.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
stephenrea RE: Windows 8 - Adobe Flash Player Updates
Member 25th Oct, 2012 17:38
Score: 0
Posts: 7
User Since: 18th Jul 2012
System Score: 100%
Location: US
Flash for Firefox was updated recently as it was out of date so this is explicitly a reporting issue with Windows 8. So while its true the version installed (built-in) is out of date its not upgradeable until the Windows Update cycle pushes the new version. See from my screenshot below.

http://askthemct.com/adobeversions.png



--
Thanks,
.rev
Was this reply relevant?
+0
-0
Maurice Joyce RE: Windows 8 - Adobe Flash Player Updates
Handling Contributor 25th Oct, 2012 18:06
Score: 11733
Posts: 8,982
User Since: 4th Jan 2009
System Score: N/A
Location: UK
I see what you mean. Looks like Microsoft need to get a bit of a wiggle on to push out the update.

Unless you create an ignore rule for Flash PSI will continue to "nag" until Microsoft update it.

If reading your post correctly I am surprised to see that Microsoft are not letting users manually update as & when releases are created by Adobe rather than wait a Microsoft Update. They are housed in the same folder as other 64 Bit OS's.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
stephenrea RE: Windows 8 - Adobe Flash Player Updates
Member 25th Oct, 2012 18:13
Score: 0
Posts: 7
User Since: 18th Jul 2012
System Score: 100%
Location: US
Yea. It's all built in as part of the OS now.

--
Thanks,
.rev
Was this reply relevant?
+0
-0
Maurice Joyce RE: Windows 8 - Adobe Flash Player Updates
Handling Contributor 25th Oct, 2012 18:28
Score: 11733
Posts: 8,982
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Looks like you can indeed manually update it - your link is here:

http://www.microsoft.com/en-us/download/details.as...

As per normal save it to desktop then COMPLETELY EXIT these processes if running.
a. All Browsers.
b. Windows Messenger.
c. Incredimail.
d. All Adobe Products.
e. PSI - Unless using version 2 or version 3
f. Microsoft Skype & Plus! For Skype

A full PSI rescan should clear the issue.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0

stephenrea

RE: Windows 8 - Adobe Flash Player Updates
[+]
This reply has been deleted
Maurice Joyce RE: Windows 8 - Adobe Flash Player Updates
Handling Contributor 25th Oct, 2012 18:52
Score: 11733
Posts: 8,982
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Interesting - what is the version number of this OCX?

Is that the file that is triggering PSI?

https://akkkug.bay.livefilestore.com/y1pDn7av8JvE0...


I note in your log file you have published an email address - would you like me to delete that post to protect your privacy?

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
ddmarshall RE: Windows 8 - Adobe Flash Player Updates
Dedicated Contributor 25th Oct, 2012 19:26
Score: 1209
Posts: 961
User Since: 8th Nov 2008
System Score: 98%
Location: UK
The current Flash Player version number for Windows 8 can be found here: http://helpx.adobe.com/flash-player/kb/find-versio...

Currently the version is different for Windows 8.

It appears that Flash Player updates for Internet Explorer 10 on WIndows 8 will only be available through Windows Update (probably including downloading and running the update package from the Download Centre)

I think we will have to wait for official Windows 8 support from PSI. I wouldn't be surprised if the recent Flash Player detection problems have something to do with Secunia trying to find how to adjust their rules to cope with the new situation.

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+0
-0
stephenrea RE: Windows 8 - Adobe Flash Player Updates
Member 25th Oct, 2012 19:32
Score: 0
Posts: 7
User Since: 18th Jul 2012
System Score: 100%
Location: US
Yeah. I didn't realize that if you can remove the email I'd appreciate it.

--
Thanks,
.rev
Was this reply relevant?
+0
-0
stephenrea RE: Windows 8 - Adobe Flash Player Updates
Member 25th Oct, 2012 19:36
Score: 0
Posts: 7
User Since: 18th Jul 2012
System Score: 100%
Location: US
Nice Link! And you are right...completely different version for sure.

http://askthemct.com/flashversion.png



--
Thanks,
.rev
Was this reply relevant?
+0
-0
Maurice Joyce RE: Windows 8 - Adobe Flash Player Updates
Handling Contributor 25th Oct, 2012 21:08
Score: 11733
Posts: 8,982
User Since: 4th Jan 2009
System Score: N/A
Location: UK
That looks OK in that you do have the latest version installed by KB2758994 which 11.4.402.287.

It is displayed in an odd way but that may well be the new Microsoft method for IE 10.

I would now rename the 3 IE files ending 265 dated 9/8/2012 so they have an extension ending _OLD.

I rescan should remove the PSI nag & you are secure until things "sort themselves out".

In the unlikely event of Flash going pear shaped the action is fully reversible.





--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
Nergali RE: Windows 8 - Adobe Flash Player Updates
Member 30th Oct, 2012 04:57
Score: 19
Posts: 48
User Since: 23rd Aug 2010
System Score: 100%
Location: US
Last edited on 30th Oct, 2012 05:11
(unknown source)
That looks OK in that you do have the latest version installed by KB2758994 which 11.4.402.287.


Windows states that I have that update installed however
(and I note the above image confirms)
the version in IE10 is 11.3.375.10 (as is also listed on the adobe site)
I tried to fake it out with OCX replacement but it didn't work.

I'm sure someone will soon find a way to fix this, I find it irresponsible that Microsoft has said "We'll make sure you are safe by updating flash for you" but doesn't push it out as soon as a "non-vulnerable" version is available. Especially since they are the only active users of the OCX formatted flash, so abode is making it explicitly for them (now in two different forms of the same OCX)..

Please, Secunia, contact Microsoft and let them know that it is crucial that they either continuously update the flash or they allow you the capability to update it for them. It makes us (and more so, the non-security conscious) operating unsafely at all times.


EDIT: Actually given the way Adobe Flash Player has fragmented on it's version numbers (goodness why?) I guess Secunia will have to edit the update rule, so we aren't just ignoring the program in PSI :(
(unknown source)


Platform

Browser

Player version

Windows
* Internet Explorer (and other browsers that support Internet Explorer ActiveX controls and plug-ins) 11.4.402.287
* Internet Explorer (Windows 8) 11.3.375.10
* Firefox, Mozilla, Netscape, Opera (and other plugin-based browsers) 11.4.402.287
* Chrome (Pepper-based Flash Player) 11.4.31.110

Macintosh
* OS X Firefox, Opera, Safari 11.4.402.287
* Chrome (NPAPI-based Flash Player) 11.4.402.287

Linux
* Mozilla, Firefox, SeaMonkey (Flash Player 11.2 is the last supported Flash Player version for Linux. Adobe will continue to provide security updates.) 11.2.202.243
* Chrome (Pepper-based Flash Player) 11.4.31.110
* Solaris Flash Player 11.2.202.223 is the last supported Flash Player version for Solaris. 11.2.202.223
Was this reply relevant?
+0
-0
ddmarshall RE: Windows 8 - Adobe Flash Player Updates
Dedicated Contributor 30th Oct, 2012 13:16
Score: 1209
Posts: 961
User Since: 8th Nov 2008
System Score: 98%
Location: UK
You are assuming that because 10.3.375.10 is less than 11.4.402.287 it is unpatched. This is not true. Flash Player 10.3.375.10 was released on 8th October, the same date as Flash Player 10.4.402.287. http://technet.microsoft.com/en-us/security/adviso...
If you have done an upgrade to Windows 8, it's possible that the Internet Explorer 9 versions of Flash Player have been retained and need cleaning up.


I see that the PSI System Requirements now show Windows 8 is supported. I don't envy Secunia the task of getting the detection rules right.

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability