Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: npswf32.dll and Photoshop CS4

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Adobe Systems
And, this specific program:
Adobe Photoshop CS4 11.x

This thread has been marked as locked.
Ubtree npswf32.dll and Photoshop CS4
Member 28th Jun, 2009 16:11
Ranking: 0
Posts: 2
User Since: 18th Apr, 2009
System Score: N/A
Location: N/A
I have 3 instances of insecure versions of Flash Player - all relating to Adobe Photoshop CS4:

Adobe Flash Player 9.x (General plug-in) 9.0.124.0
Photoshop CS4\Extension Manager CS4\npswf32.dll
Photoshop CS4\Bridge CS4\Browser\plugins\npswf32.dll

Adobe Flash Player 9.x (Opera plug-in) 9.0.115.0
Photoshop CS4\Adbobe Device Central CS4\Required\Opera\program\plugins\npswf32.dll

I tried contacting Adobe about this, but the support engineer did not seem to understand the issue.

Is there any way to deal with this (short of uninstalling CS4)?

Anthony Wells RE: npswf32.dll and Photoshop CS4
Expert Contributor 28th Jun, 2009 18:55
Score: 2437
Posts: 3,327
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

From a simplistic , non-techie point of view , these questions come to mind :-

1) Does CS4 need the out of date v9 of flash specifically in order to work ?
2) Do you have the equivalent versions of the up to date 10.0.22.87 installed ?

Adobe is well known for leaving obsolete files behind ; these "might" pose a security risk - as PSI has pointed out.

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
Ubtree RE: npswf32.dll and Photoshop CS4
Member 28th Jun, 2009 19:09
Score: 0
Posts: 2
User Since: 18th Apr 2009
System Score: N/A
Location: N/A
on 28th Jun, 2009 18:55, Anthony Wells wrote:

1) Does CS4 need the out of date v9 of flash specifically in order to work ?

I really don't know. Can anyone else help with this point?

on 28th Jun, 2009 18:55, Anthony Wells wrote:

2) Do you have the equivalent versions of the up to date 10.0.22.87 installed ?

Yes, I have 3 instances of 10.0.22.87 installed ( \Program Files\Common Files\Adobe AIR\Versions\1.0\Resources \WINDOWS\System32\Macromedia\Flash and \Opera\programs\plugins )
Was this reply relevant?
+0
-0
Anthony Wells RE: npswf32.dll and Photoshop CS4
Expert Contributor 28th Jun, 2009 19:42
Score: 2437
Posts: 3,327
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 28th Jun, 2009 19:53
If no one can help you with the first point , you could try renaming the insecure files and move them to a new folder . Be sure to remember the original names/designation in care you need to restore them for CS4 to work - if you just move them PSI will see them & they may not be safe.

The 10.0.22.87 give the appearance from here as updating the v9 files ; you could check all the folders/files (v9 & 10) by clicking on the "open folder" link from each installation path & recording all file versions & look for duplicates.

I hope someone will add their techie advice to my ramblings.

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability