Secunia SmallBusiness
Overview
Advisories
Research
Forums
Create Profile
Our Commitment
All Threads
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: False Positive and Possible Solution?

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Microsoft
And, this specific program:
Microsoft Office PowerPoint Viewer 2003

This thread has been marked as locked.
kardmania False Positive and Possible Solution?
Member 3rd Jul, 2009 20:36
Ranking: 0
Posts: 34
User Since: 7th Jun, 2009
System Score: N/A
Location: N/A


I have applied all updates from the windows update http://update.microsoft.com/microsoftupdate/
there are no updates to apply from the download solution source

this relates to the following issues as well

Frontpage 2002 (10.6308.6845)SP3

C:\program files\microsoft office\office\office 10\frontpg.exe

Powerpoint Viewer 2003
C:\SWsetup\msworks\us\pfiles\office\ppv\pptview.ex e

file rescans shows insecurity still was an issue

Does it make sense to download and install the 2007 version and to delete the 2003 version or is this a false positive?

Maurice Joyce RE: False Positive and Possible Solution?
Handling Contributor 3rd Jul, 2009 23:42
Score: 10510
Posts: 8,071
User Since: 4th Jan 2009
System Score: 100%
Location: UK
It is not a false positive.

PowerPoint Viewer 2003 will not be available after 16 October 2009 - I assume that means End of Life.

Microsoft are now actively encouraging the use of their 2007 viewer which allows the reading of PPTX & PPSX extentions created by users of Office 2007.

Details here:
http://www.microsoft.com/downloads/details.aspx?Fa...

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 10 for Windows 7
16GB RAM
Was this reply relevant?
+0
-0
kardmania RE: False Positive and Possible Solution?
Member 3rd Jul, 2009 23:50
Score: 0
Posts: 34
User Since: 7th Jun 2009
System Score: N/A
Location: N/A
I presume based on your remarks that it does make sense to clean out the old program; however, the failure of the download solution indicated by secunia is not addressed.
Was this reply relevant?
+0
-0
Maurice Joyce RE: False Positive and Possible Solution?
Handling Contributor 4th Jul, 2009 00:05
Score: 10510
Posts: 8,071
User Since: 4th Jan 2009
System Score: 100%
Location: UK
I agree - I treat them as suggested rather than "the solution". Once I know the file they have found as insecure I find my own using the vendor sites.

In your case there are two issues.

Updates for Office 97/2000/2002/XP have never been part of Windows update.

Your Powerpoint Viewer element appears to be in a version of Microsoft Works. Given that PSI is a clone of the paid for Corporate Version not sure they will point U in the right direction either in that Works is not a business tool.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 10 for Windows 7
16GB RAM
Was this reply relevant?
+0
-0
kardmania RE: False Positive and Possible Solution?
Member 4th Jul, 2009 01:41
Score: 0
Posts: 34
User Since: 7th Jun 2009
System Score: N/A
Location: N/A
Thanks I suppose what is throwing me with the 3 microsoft issues is that I did patch these programs with broader and newer cures than were suggested andyet the programs still show insecure. I presume that Access ultimately came off the insecure list based on secunia catching up to these cures.
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Factsheets
Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability