Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Adobe Systems
And, this specific program:
Adobe Reader 9.x

This thread has been marked as locked.
Confused Computer User Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 1st Aug, 2009 17:28
Ranking: 0
Posts: 11
User Since: 21st Apr, 2009
System Score: N/A
Location: CA
Last edited on 1st Aug, 2009 17:35

Hi guys,

Just putting this out there. My Adobe reader updated recently and when I open it, clcik on Help and then About Adobe Reader 9... I am told that I have version 9.1.3. Can any one tell me why?

Is this a problem?

I rescaned the program twice but still the same version.
I am not told that I have to patch it or anything but just want to know why this slight difference in version number.

--
The answer is 42

krw RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 1st Aug, 2009 18:24
Score: 0
Posts: 9
User Since: 5th Jul 2009
System Score: N/A
Location: N/A
The problem is with the PSI. I also completely uninstalled the reader, flash player, and shockwave player and then removed all references to adobe from both the hard drive, and the windows registry. Before installing the updated Adobe software, i ran a PSI scan and it noted the prgrams were uninstalled. Upon reinstalling and rescanning with the PSI, the reader still shows as version 9.1.282 despite having version 9.1.3 installed. I don't know about you people, nut i am tired of software that claims one thing and does completely the opposite. This might be secunia's last shot on my system...

Regards,

Pissed Off
Was this reply relevant?
+0
-0
noidea RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 1st Aug, 2009 19:26
Score: 1
Posts: 5
User Since: 1st Aug 2009
System Score: N/A
Location: N/A
Last edited on 3rd Aug, 2009 20:02
Dear Confused,
I understand that version 9.1.3 is simply 9.1.2.82 --INCLUDING the language pack. If I open Adobe Reader (9.1.2) and check for updates, I'm told that update (9.1.3) is available. But I discovered that that update is simply a large language pack (and which I don't see that I need).
So, it seems you've got the language pack along with version 9.1.2.82.
I think that's correct--and, I hope, clear.
Was this reply relevant?
+0
-0
Confused Computer User RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 1st Aug, 2009 22:37
Score: 0
Posts: 11
User Since: 21st Apr 2009
System Score: N/A
Location: CA
on 1st Aug, 2009 19:26, noidea wrote:
Dear Confused,
I understand that version 9.1.3 is simply 9.1.2.82 --INCLUDING the language pack. If I open Adobe Reader (9.1.2) and check for updates, I'm told that update (9.1.3) is available. But I discovered that that update is simply a large language pack (and which I don't see that I need).
So, it seems you've got the language pack along with version 9.1.2.82.
I think that's correct--and, I hope, clear.



thank you for the reply. I was not aware the update was just a language pack. Given Acrobat reader's Threat level (as rated by secunia) I expected something else.

Thanks.

--
The answer is 42
Was this reply relevant?
+0
-0
scottyp RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 1st Aug, 2009 23:24
Score: 0
Posts: 6
User Since: 1st Aug 2009
System Score: N/A
Location: N/A
Last edited on 1st Aug, 2009 23:24
PSI is in fact still not updated. If you monitor their advisory on the Adobe Reader vulnerability (http://secunia.com/advisories/35949/) you can see they still have not marked this as patched by the vendor.

At this point, I hope they are doing some analysis to assure the patch fixes the issue, or waiting for someone else to do this for them.

But 9.1.3 is available and does patch the authplay.dll file that is vulnerable. The primary executable does not get modified in any fashion it seems. This may also be a reason for their delay, although I'm sure they can see through this.

On the more concerning side of things, I would be concerned if they are trying to use this high-visibility item to boost their numbers on who is "vulnerable". Since Secunia is very much a primary security vulnerability site, their ability to shift the game could be to their benefit here. Not to mention that telling users (and companies) they are still vulnerable after applying a patch will only result in furor at their handling of it. So lets hope they are just moving very, very cautiously. But I think they will have unacceptably skewed numbers getting reported by their agents post-patch. That is still concerning since it elongates the perceived "window of vulnerability" by everyone and make it easier to sell SAAS.
Was this reply relevant?
+0
-0
stafvanopstal RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 1st Aug, 2009 23:28
Score: 0
Posts: 1
User Since: 10th Jul 2009
System Score: 100%
Location: NL
http://www.adobe.com/support/security/bulletins/ap...
Was this reply relevant?
+0
-0
Lucky0967 RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 2nd Aug, 2009 10:32
Score: 0
Posts: 3
User Since: 14th Jul 2009
System Score: N/A
Location: N/A
Ive uninstalled Adobe Reader and Im now Foxit Reader seem much better and quite fast than Adobe. I think Adobe Reader seem not ready to patch the version 9.1.3 as it part of it has been update but not fully yet, supposed to be completed by 31st July but seem it wee bit late
Was this reply relevant?
+0
-0
Wxguesser RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 3rd Aug, 2009 18:58
Score: 0
Posts: 1
User Since: 24th Jun 2009
System Score: N/A
Location: N/A
Has anyone explained this conflict yet?
Was this reply relevant?
+0
-0
Anthony Wells RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Expert Contributor 3rd Aug, 2009 19:28
Score: 2437
Posts: 3,322
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Adobe have not changed any of the file versions that PSI uses to recognise the Reader version , so it only sees 9.1.2.

As 9.1.3 is more a technical update & not a full security update both versions are "fully patched" but remain vulnerable as shown in secure browsing until the full patch.

Having just said that , Adobe Reader 9.xx is now showing patched/secure in "secure browsing" in my PSI !!

Oh well .

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
Lucky0967 RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 3rd Aug, 2009 20:25
Score: 0
Posts: 3
User Since: 14th Jul 2009
System Score: N/A
Location: N/A
the 9.1.3 dont get fully patched it didnt work on our PC so we dumped Adobe Reader and we used the Foxit Reader which is better and fast- Adobe is rubbish and too much problems like too many hole also Adobe didnt update to get fully software version to 9.1.3 instead of old one that caused too much problemns - hopeless
Was this reply relevant?
+0
-0
Anthony Wells RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Expert Contributor 3rd Aug, 2009 23:07
Score: 2437
Posts: 3,322
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

It would seem that v9.1.3 has corrected the authplay.dll vulnerability .

You need to use the Reader help menu "about" to see which version you have - you do need v9.1.3- as PSI is now showing me as still having v9.1.2 ; but fully patched in both "patched" &"secure browsing" tabs.

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
jarome RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 4th Aug, 2009 02:46
Score: 0
Posts: 16
User Since: 19th Apr 2009
System Score: N/A
Location: N/A
I see this too. Why doesn't Secunia post an answer on here?

And ditto for Flash Player. I updated it several times, and PSI still says it is vulnerable.

This sort of thing will make people stop using PSI.
Was this reply relevant?
+0
-0
TomMain RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 4th Aug, 2009 05:09
Score: 0
Posts: 1
User Since: 13th Sep 2008
System Score: N/A
Location: N/A
Last edited on 4th Aug, 2009 05:10
My version of Reader is 9.1.3, and yet PSI is saying I have a vulnerability that applies to 9.1.1 only. It is not even referencing 9.1.2. What is the deal? Is the PSI database out of date? Could somone from Secunia comment on this?
Was this reply relevant?
+0
-0
ultimitloozer RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 4th Aug, 2009 07:05
Score: 2
Posts: 8
User Since: 30th Jun 2008
System Score: N/A
Location: US
This is not a language pack. If you would read the release notes about it, you would find that it resolves the issue in the authplay.dll file that resulted from bad code in the Microsoft ATL library that was used to create it.
Was this reply relevant?
+0
-0
This user no longer exists RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 4th Aug, 2009 11:04
Some time ago VLC was detected as an older version, too. I wrote a mail to Secunia and got the answer that this is a bug in VLC because they didn't update the version number so Secunia detects an older.
I think it's the same case here, because 'about' in Adobe Reader says 9.1.3 and Secunia 9.1.2.
Was this reply relevant?
+0
-0
Laptopper RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 4th Aug, 2009 12:41
Score: 0
Posts: 1
User Since: 29th Mar 2008
System Score: N/A
Location: N/A
But it nerves me! Why is it not possible for secunia to adjust their database to detect 9.1.2 as secure???
Was this reply relevant?
+0
-0
This user no longer exists RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 4th Aug, 2009 12:56
If you do this, all 9.1.2 Adobe Reader will be detected as updated. Wait for next Adobe Reader update, problem will be fixed then I think.
Of course you could ignore this program by using the PSI function, but it won't notify you if there is really a new version.
Was this reply relevant?
+0
-0
Anthony Wells RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Expert Contributor 4th Aug, 2009 14:38
Score: 2437
Posts: 3,322
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

I can only repeat what I said earlier :-

You need v9.1.3 to have the updated/secure authplay.dll file . The "about" link in Reader Help menu will show which version you have .

Secunia/PSI use the "annots.api" file in the "plug-ins" folder in the Reader main folder to check your version - this file can also be seen in the Help menu->about plug-ins->comments . This file has not been updated .

So PSI still shows my v9.1.3 as V9.1.2 ; but it is in the "patched" tab & on MY PC it shows v9xx as "fully patched" under "secure browsing" - don't ask me why/how !

IF PSI is showing Adobe Reader/Flash/Shockwave or Air under the "insecure" tab then you should trust that PSI certainly has found a "problem" relating to whichever product & you should check it out .
There are plenty of threads to help you.

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
jarome RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 4th Aug, 2009 14:47
Score: 0
Posts: 16
User Since: 19th Apr 2009
System Score: N/A
Location: N/A
Well, I applied the patches multiple times. And this was a clean install of Reader. I downloaded and installed the latest version and did update multiple times. Acrobat Help, about shows 9.1.3, but PSI still says it is insecure.

So what to do?

Of course, Adobe really needs to stop putting unpatched versions on their site for download.
Was this reply relevant?
+0
-0
Anthony Wells RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Expert Contributor 4th Aug, 2009 14:54
Score: 2437
Posts: 3,322
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 4th Aug, 2009 14:54
Hi jarome ,

What exactly is PSI saying to you ??

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
jarome RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 4th Aug, 2009 15:05
Score: 0
Posts: 16
User Since: 19th Apr 2009
System Score: N/A
Location: N/A

Insecure Programs [?] Version Detected [?] Threat Rating [?] Direct [?]

Adobe Reader 9.x 9.1.2.82
Adobe Reader 9.x
This installation of Adobe Reader 9.x is insecure and potentially exposes your system to security threats!

Secunia strongly recommends that you update this program by installing the update that is provided by the vendor of this program.
Installation Path
C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe

And Help, About definitely says 9.1.3
Was this reply relevant?
+0
-0
Anthony Wells RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Expert Contributor 4th Aug, 2009 15:13
Score: 2437
Posts: 3,322
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

What does "secure browsing" say regarding Adobe Reader 9xx ?? What does Help->about plug-ins->comment say ??
In the Reader main folder what is the date reference when you mouse over the "authplay.dll" file??

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
Agapanthus RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 4th Aug, 2009 17:19
Score: 0
Posts: 11
User Since: 11th Jun 2009
System Score: N/A
Location: N/A
on 4th Aug, 2009 14:38, Anthony Wells wrote:
If PSI is showing Adobe Reader/Flash/Shockwave or Air under the "insecure" tab then you should trust that PSI certainly has found a "problem" relating to whichever product & you should check it out.


That is the question! Like many others who have posted here, I have patched Acrobat Reader to 9.1.3 but PSI does not recognise this. PSI's direct link to the solution points to the Adobe update - but that has already been successfully installed. It looks to me as though the problem is with PSI, not with "the product"...
Was this reply relevant?
+0
-0
Agapanthus RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 4th Aug, 2009 17:30
Score: 0
Posts: 11
User Since: 11th Jun 2009
System Score: N/A
Location: N/A
Last edited on 4th Aug, 2009 17:32
on 4th Aug, 2009 15:13, Anthony Wells wrote:
What does "secure browsing" say regarding Adobe Reader 9xx ??

Insecure, SA35949

on 4th Aug, 2009 15:13, Anthony Wells wrote:
What does Help->about plug-ins->comment say ??


In my case:
Annots.api Version: 9.1.2.82
Date: 21.05.2009 04:44:00


on 4th Aug, 2009 15:13, Anthony Wells wrote:

In the Reader main folder what is the date reference when you mouse over the "authplay.dll" file??


Version: 9.0.246.0
Date: 22.07.2009 16:14

Was this reply relevant?
+0
-0
Anthony Wells RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Expert Contributor 4th Aug, 2009 17:51
Score: 2437
Posts: 3,322
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Those details would correlate with V9.1.2 patched to 9.1.3 as far as I can ascertain .

As a final check , in "Add/remove" I can see :

Adobe Reader 9.1.3

Adobe Reader 9.1.3-CPSID_49552

The second entry when highlighted says that this update cannot be removed (or words to that effect ; my XP talks to me in French).

With the same details as all those so far related I consider myself to have v9.1.3 correctly patched ; PSI shows me as v9.1.2 fully patched & secure for browsing.

If you remain with an "insecure" showing & a reboot/full scan changes nothing , then the rest is up to Secunia & Adobe to work out - there is a patch Tuesday due in two weeks from Adobe ; too long to hold your breath , but it could help :-o))


--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
jaypeecee RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 4th Aug, 2009 18:42
Score: 0
Posts: 1
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Hi Folks,

I ran File Hippo's free Update Checker on my PC and it doesn't flag up this Adobe Reader problem. That leads me to conclude that the problem lies fairly and squarely with the Secunia PSI.

Hope this helps.

JPC
Was this reply relevant?
+0
-0
jarome RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 4th Aug, 2009 19:29
Score: 0
Posts: 16
User Since: 19th Apr 2009
System Score: N/A
Location: N/A
Last edited on 4th Aug, 2009 19:52
Well, Firefix has no version information about the plugins. IE8 has
Name Adobe PDF Link Helper
Publisher Adobe Systems, Incorporated
Status Enabled
File date Friday, February 27, 2009, 12:07 PM
Version 9.1.0.163
Load time 0.10 s

which looks old. But the Adobe patchers do not seem to fix this.

I removed this dll with great effort, but PSI still says acroread32.exe is insecure.
Was this reply relevant?
+0
-0
Anthony Wells RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Expert Contributor 4th Aug, 2009 21:13
Score: 2437
Posts: 3,322
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 4th Aug, 2009 21:15
Hi jarome ,

I may be losing it , but the plugin reference I made was to the file in the Reader folder .
The data Secunia reads is in that folder & is confirmed in the "Reader" Help menu go to "about adobe plug-ins" &select "comments" & you see "annots.api" which is what PSI reads.

In Firefox use the "tools" tab menu , select add-ons & in the plugins tab you should see Adobe Acrobat v 9.1.0.163 - this is "normal" .

Idon't have IE8 so I can't advise & have no idea what you have done , but I would always want to be 110% sure I could replace anything I removed , before so doing.

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
jarome RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 4th Aug, 2009 22:07
Score: 0
Posts: 16
User Since: 19th Apr 2009
System Score: N/A
Location: N/A
annots.api is from 5/21/09, 9.1.2.82.

So why doesn't applying the patch for 9.1.3 update this? How do I do this?
Was this reply relevant?
+0
-0
Anthony Wells RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Expert Contributor 4th Aug, 2009 22:25
Score: 2437
Posts: 3,322
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Simply , you don't/can't .

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
deichi RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 4th Aug, 2009 22:34
Score: 0
Posts: 3
User Since: 25th Apr 2009
System Score: N/A
Location: N/A
I've got the same problem, but I would blame Adobe ;)
If you look at the AcroRd32.exe in Vista, you can see that it is still version 9.1.0.163 of 27.02.2009
The patch to what the reader itself calls 9.1.3 if you look at the about window seems to be a patch authplay.dll
Probably Secunia would need to find out where Adobe gets the version information from... it doesn't conform to the Windows rules...
Was this reply relevant?
+0
-0
Leendert Kip Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 4th Aug, 2009 23:08
Score: 70
Posts: 526
User Since: 22nd Jan 2009
System Score: 100%
Location: NL
Last edited on 4th Aug, 2009 23:11
[quote=p8985]Ive uninstalled Adobe Reader and Im now Foxit Reader seem much better and quite fast than Adobe.

I fully agree with you! I am sick and tired about the 'famous' Adobe
products with which I regularly experience security issues and update failures. It seems they too often make serious mistakes in their software. Not very professional!

--
PC: JJ Computer Services
Intel Core I3 2100 3.1Ghz
DDR3 Kingston ValueRam 4GB 1333
Windows 7 Home Premium 64bits SP1
Secunia PSI 3.0.0.9016
Internet Explorer 9
Mozilla Firefox 31NL

Laptop: MSI GT780DX
Intel Core I5-2450
DDR3 RAM 6GB
Windows 7 Home Premium 64bits SP1
Secunia PSI 3.0.0.9016
Internet Explorer 11
Mozilla Firefox 31NL
Was this reply relevant?
+0
-0
dnm RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 5th Aug, 2009 00:07
Score: 0
Posts: 3
User Since: 14th Jan 2008
System Score: 100%
Location: SE
Same here... annoying...
Was this reply relevant?
+0
-0
rbyrne RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 5th Aug, 2009 00:52
Score: -26
Posts: 2
User Since: 22nd Dec 2007
System Score: N/A
Location: N/A
Hi,

I also have Adobe Reader 9.1.3 which is now being reported as insecure. The solution seems to relate to versions 9.1.1 and 9.1.2 and does not work. Do you need to do something Secunia ??

Regards,

Ralph
Was this reply relevant?
+0
-0
wmn4X4ChT0 RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 5th Aug, 2009 02:24
Score: 0
Posts: 1
User Since: 5th Feb 2008
System Score: N/A
Location: N/A
I get the same result. The problem is with Secunia detection algorithms, I believe. I am ignoring the Secunia threat message, since 9.1.3 is the latest version available according to Adobe.
Was this reply relevant?
+0
-0
scottyp RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 5th Aug, 2009 04:16
Score: 0
Posts: 6
User Since: 1st Aug 2009
System Score: N/A
Location: N/A
Odd. I just opened PSI and saw the status "changed" on the Secure Browsing tab. It showed Adobe Reader as patched. I thought "good, finally". Then I manually ran a full scan and it reverted to say that Adobe Reader isn't patched!

I wonder if they have conflicting analysis that is causing this apparent issue, and not a simple "our engine can only check the primary exe version" issue.

If they want to check, they could add an additional check on the authplay.dll, which has version info present on it. Not sure what it was previously though.

I would encourage Secunia to work with Adobe to learn how they establish their app versions - which may only exist in the registry - and not on any file. Meaning Secunia PSI might need new skillz. And soon. ;)

But to end all this discussion, ADOBE READER IS PATCHED! THERE IS NO SECURITY THREAT ANYMORE! Just apply 9.1.3.
Was this reply relevant?
+0
-0
pepsipop318 RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 5th Aug, 2009 04:21
Score: 0
Posts: 1
User Since: 19th Dec 2008
System Score: N/A
Location: N/A
I am also concerned about the two insecure Adobe Flash ratings and now the Adobe Reader 9.1.2.82 entry. But I just realized the following concerning the Adobe Reader 9.1.2.82 entry of PSI.

I have 3 Windows XP PCs. I ran Secunia scans early today 8/4 and only one had the Adobe Reader insecure entry with all three having two Adobe Flash entries.

Later today I watched as two PCs downloaded and installed Adobe Reader update 9.1.32-CPSID_49522.

I did a rescan with PSI and now all three PCs have the 9.1.2.82 insecure warnings. The Adobe update does show up in Add/Remove on all three.

Is there a problem with the Adobe 9.1.32-CPSID_49522 update or Secunia ?

Was this reply relevant?
+0
-0
scelli RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 5th Aug, 2009 04:37
Score: 0
Posts: 2
User Since: 30th May 2009
System Score: N/A
Location: N/A
I installed the priority Adobe Reader 9.1.3 patch the day it was released last week and came up 100% secure with PSI after 2 scans...or at least until an hour ago when I decided to do a PSI re-scan after installing the latest Java version. Now I'm showing 1 program insecure, which is of course the Reader 9.1.3 being identified as 9.1.2.82. Don't quite what to make of what is transpiring, but it sure seems something is amiss on the PSI end that has occurred within the last 24-72 hours.

Just my proverbial two cents worth.
Was this reply relevant?
+0
-0
charlie204 RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 5th Aug, 2009 05:16
Score: 0
Posts: 9
User Since: 4th Oct 2008
System Score: 100%
Location: NYC area, US
Last edited on 5th Aug, 2009 05:18
Regarding the flash viewer: I downloaded the upgrade, but Adobe download downloads Flash10c.ocx without removing Flash10b.ocx
Directory is C:\Windows\System32\Macromed\Flash.

Removing the old flash (you have to first exit Secunia PSI because it uses the flash ocx) and then reboot. Just to make it complete, I also cleaned out the Recycle Bin before the reboot. Then re-scan and you should be clean. As for the 9.1.2.82 vs 9.1.3 controversy, if Adobe reader Help About says you have 9.1.3 (and you know you have done the upgrade), leave it to Adobe and Secunia to thrash that one out. If you notice my 99% clean, the one percent is this Adobe stuff. (I have the exact same problem on both XP and Vista systems.)
Was this reply relevant?
+0
-0
Rosanne RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 5th Aug, 2009 07:06
Score: 0
Posts: 6
User Since: 13th Nov 2008
System Score: N/A
Location: N/A
A simple solution for the everlasting problem with Adobe Reader to get rid of Secunia's critical warning of having installed 9.1.2.83 in spite of Adobe's assurance you are running 9.1.3 is to use 2 simple batch-files
I have created 2 batch-files KILLADOB.BAT and RNEWADOB.BAT with the following text:
KILLADOB.BAT
rem temporary defuse AcroRd32.exe
rem ok ?
pause
move D:\Program\Adobe\"Reader 9.0"\Reader\AcroRd32.exe D:\Program\Adobe\"Reader 9.0"\Reader\AcroRd32.oxe
rem reincarnate AcroRd32.exe with rnewadob.bat

and
RNEWADOB.BAT
rem reincarnate AcroRd32.exe
rem ok ?
pause
move D:\Program\Adobe\"Reader 9.0"\Reader\AcroRd32.oxe D:\Program\Adobe\"Reader 9.0"\Reader\AcroRd32.exe
rem AcroRd32.exe transmigrated
rem can be killed by killadob.bat

Execute killadob.bat and Secunia is happy
When need for Adobe Reader just execute rnewadob.bat, and then after
PDF:ed just use killadob.bat again
Was this reply relevant?
+0
-0
gsfx RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 5th Aug, 2009 10:23
Score: 0
Posts: 1
User Since: 12th Jan 2009
System Score: N/A
Location: N/A
Other PC same shit:

Adobe reader 9.1.3 installed, but its reconized as 9.1.2.something

It destroys the wunderful score of 100% within the last weeks. Today its only 99%. And I canīt do anything abot it...

Kind regards

Frederik
Was this reply relevant?
+0
-0
Leendert Kip Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 5th Aug, 2009 10:34
Score: 70
Posts: 526
User Since: 22nd Jan 2009
System Score: 100%
Location: NL
[quote=p9206]Other PC same shit: Today its only 99%. And I canīt do anything abot it...

Indeed, you cannot solve the problem. To try out, I uninstalled Adobe Reader completely using Revo uninstaller. Then installed 9.1 and then, as recommended by Adobe, two further updates. In vain and wasted time!
Because I only use Adobe Reader for reading/printing documents, I again
uninstalled Adobe Reader and installed Foxit Reader. After some testing:
I can recommend this. I am sick and tired with Adobe products. Every time there are security concerns and update problems.

--
PC: JJ Computer Services
Intel Core I3 2100 3.1Ghz
DDR3 Kingston ValueRam 4GB 1333
Windows 7 Home Premium 64bits SP1
Secunia PSI 3.0.0.9016
Internet Explorer 9
Mozilla Firefox 31NL

Laptop: MSI GT780DX
Intel Core I5-2450
DDR3 RAM 6GB
Windows 7 Home Premium 64bits SP1
Secunia PSI 3.0.0.9016
Internet Explorer 11
Mozilla Firefox 31NL
Was this reply relevant?
+0
-0
Leendert Kip Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 5th Aug, 2009 10:34
Score: 70
Posts: 526
User Since: 22nd Jan 2009
System Score: 100%
Location: NL
[quote=p9206]Other PC same shit: Today its only 99%. And I canīt do anything abot it...

Indeed, you cannot solve the problem. To try out, I uninstalled Adobe Reader completely using Revo uninstaller. Then installed 9.1 and then, as recommended by Adobe, two further updates. In vain and wasted time!
Because I only use Adobe Reader for reading/printing documents, I again
uninstalled Adobe Reader and installed Foxit Reader. After some testing:
I can recommend this. I am sick and tired with Adobe products. Every time there are security concerns and update problems.

--
PC: JJ Computer Services
Intel Core I3 2100 3.1Ghz
DDR3 Kingston ValueRam 4GB 1333
Windows 7 Home Premium 64bits SP1
Secunia PSI 3.0.0.9016
Internet Explorer 9
Mozilla Firefox 31NL

Laptop: MSI GT780DX
Intel Core I5-2450
DDR3 RAM 6GB
Windows 7 Home Premium 64bits SP1
Secunia PSI 3.0.0.9016
Internet Explorer 11
Mozilla Firefox 31NL
Was this reply relevant?
+0
-0
Rosanne RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 5th Aug, 2009 10:52
Score: 0
Posts: 6
User Since: 13th Nov 2008
System Score: N/A
Location: N/A
Fellow users with Adobe Reader problem:
I get 100% mark when i have killed Adobe Reader with KILLADOB.BAT
and when I feel I need Adobe Reader I simply use RNEWADOB.BAT
These batch-files are desribed im my forum-message ealier today
Was this reply relevant?
+0
-0
rbaldwin RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 5th Aug, 2009 13:50
Score: 0
Posts: 2
User Since: 9th Jan 2008
System Score: N/A
Location: N/A
That is NOT a solution. merely a band aid.
Was this reply relevant?
+0
-0
rbaldwin RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 5th Aug, 2009 13:53
Score: 0
Posts: 2
User Since: 9th Jan 2008
System Score: N/A
Location: N/A
That is NOT a solution. merely a band aid.
Was this reply relevant?
+0
-0
chickwich RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 5th Aug, 2009 16:35
Score: -5
Posts: 3
User Since: 24th Jan 2009
System Score: N/A
Location: N/A
It helps when the software makers change the version number in .dll to the correct version..

The files that where patched still show as 9.1.2.82 rather than 9.1.3.xx, so this issue is down to Adobe not PSI
Was this reply relevant?
+0
-0
scelli RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 6th Aug, 2009 18:33
Score: 0
Posts: 2
User Since: 30th May 2009
System Score: N/A
Location: N/A
Just ran a scan about 5 minutes ago and, for whatever reason, I'm back to 100% secure. Made no changes involving the problem application being discussed and can only assume a new search rule set has corrected the issue we all were experiencing. Anyone else that previously experienced problems the last few days with the Adobe Reader app reading as insecure noticed the issue has been resolved?
Was this reply relevant?
+0
-0
dnm RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 6th Aug, 2009 18:50
Score: 0
Posts: 3
User Since: 14th Jan 2008
System Score: 100%
Location: SE
on 6th Aug, 2009 18:33, scelli wrote:
... Anyone else that previously experienced problems the last few days with the Adobe Reader app reading as insecure noticed the issue has been resolved?


Yup, now ok again. Thanks secunia!
Was this reply relevant?
+0
-0
wr RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Contributor 6th Aug, 2009 19:35
Score: 308
Posts: 736
User Since: 30th Mar 2008
System Score: 100%
Location: US
http://secunia.com/community/forum/thread/show/243... Please read the post in this thread near the bottom about Secunia now using new detection rules. The post is by AJNorth02.

wr

--
HP Pavilion Slimline
Windows Vista Home Premium SP2 32 bit
AMD Athlon 64 X2
Firefox 3.5.2

--
HP Pavilion Slimline s3020n
Windows Vista Home Premium SP2 32 bit
AMD 64 Athlon X2
Firefox 24.4.0 ESR
The weakest link of a computer system is always sitting in front of the monitor.
Was this reply relevant?
+0
-0
dnm RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 6th Aug, 2009 23:49
Score: 0
Posts: 3
User Since: 14th Jan 2008
System Score: 100%
Location: SE

What are the actual last digits for this link?
243 gets an error page...
Was this reply relevant?
+0
-0
deveber RE: Adobe Reader 9.1.3 detected by PSI as 9.1.2.82
Member 7th Aug, 2009 00:13
Score: 0
Posts: 7
User Since: 13th Feb 2009
System Score: N/A
Location: N/A
Last 4 digits are most likely 2433.
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability