Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Skype version incorrectly reported out of date

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
OSI

This thread has been marked as locked.
Farrell Skype version incorrectly reported out of date
Member 13th Oct, 2009 15:16
Ranking: 0
Posts: 3
User Since: 13th Oct, 2009
System Score: N/A
Location: N/A
When I run OSI, it reports that I have Skype version 4.1.0.179 and that the latest revised version is 4.1.0.179 fixing one or more vulnerabilities.

Obviously this is wrong. Yes I have 4.1.0.179 and it is already the latest available version. this should not be detected.

Terry

Maurice Joyce RE: Skype version incorrectly reported out of date
Handling Contributor 13th Oct, 2009 15:32
Score: 11720
Posts: 8,956
User Since: 4th Jan 2009
System Score: N/A
Location: UK
It looks like secunity has found remnants of an old version which is common.

What is path to the file Secunia has found?

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
Maurice Joyce RE: Skype version incorrectly reported out of date
Handling Contributor 13th Oct, 2009 15:32
Score: 11720
Posts: 8,956
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 13th Oct, 2009 15:32
Deleted.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
Farrell RE: Skype version incorrectly reported out of date
Member 13th Oct, 2009 16:35
Score: 0
Posts: 3
User Since: 13th Oct 2009
System Score: N/A
Location: N/A
I don't think that is possible. This is a spanking new install of Windows 7 onto a new full-format hard HDD from only yesterday. I installed the latest version from Skype yeaterday evening, so there's no way there could be any remnants.

The path reported is <C:\Program Files\Skype\Phone\Skype.exe> which looks as expected.

I am convinced it is an OSI detection problem.

Terry
Was this reply relevant?
+0
-0
Maurice Joyce RE: Skype version incorrectly reported out of date
Handling Contributor 13th Oct, 2009 18:35
Score: 11720
Posts: 8,956
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Terry,
Looks like U are correct. Bare in mind that Secunia do not officially support Windows 7 so you may get the odd problem like U describe.



http://secunia.com/vulnerability_scanning/personal...

Secunia staff do trawl the Forum so they may confirm what U suspect.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
xolotl RE: Skype version incorrectly reported out of date
Member 13th Oct, 2009 20:41
Score: -9
Posts: 16
User Since: 13th Oct 2009
System Score: N/A
Location: DE
I am seeing this on Windows XP SP3, so it is not a Windows7 aberration. I went to the trouble of uninstalling the old Skype (4.0) and reinstalling the new one (4.1) and still I get this aberrant message. The path to Skype is the usual one for a german machine, i.e., c:\Programme\Skype. Given the ubiquity of Skype, Secunia needs to fix this.

--
System: Windows XP SP3, Opera 10 or Firefox 3.6
Was this reply relevant?
+0
-0
M.Hansen RE: Skype version incorrectly reported out of date
Secunia Official 14th Oct, 2009 08:31
Score: 188
Posts: 410
User Since: 26th Jan 2009
System Score: N/A
Location: Copenhagen, DK
Hi

We have updated the version rule for Skype 4.x
The OSI should now detect Skype as intended.



--
Kind regards,

Morten Hansen
Secunia PSI Support

Secunia PSI
http://secunia.com/vulnerability_scanning/personal
Farrell RE: Skype version incorrectly reported out of date
Member 14th Oct, 2009 11:31
Score: 0
Posts: 3
User Since: 13th Oct 2009
System Score: N/A
Location: N/A
Thanks for the fast updating. I discovered that Acrobat 9.2 was falsely flagged on my Windows XPP laptop last night in addition to Skype on Win7. This morning, both these fasle reports have been resolved.

Great support.

Terry
Was this reply relevant?
+0
-0
xolotl RE: Skype version incorrectly reported out of date
Member 14th Oct, 2009 12:36
Score: -9
Posts: 16
User Since: 13th Oct 2009
System Score: N/A
Location: DE
I agree: impressively fast turnaround.

--
System: Windows XP SP3, Opera 10 or Firefox 3.6
Was this reply relevant?
+0
-0
Gerrysea RE: Skype version incorrectly reported out of date
Member 17th Oct, 2009 11:48
Score: 0
Posts: 5
User Since: 7th Sep 2009
System Score: N/A
Location: N/A
Last edited on 17th Oct, 2009 11:49
on 14th Oct, 2009 08:31, M.Hansen wrote:
Hi

We have updated the version rule for Skype 4.x
The OSI should now detect Skype as intended.
--
Kind regards,

Morten Hansen
Secunia PSI Support

Secunia PSI
http://secunia.com/vulnerability_scanning/personal...
Hi Y'all,

Same problem still appears to be relevent (17/10/2009), Secunia PSI detects V4.1.0.136. The path reported is <C:\Program Files\Skype\Phone\Skype.exe> which looks as expected.
But installed version is 4.1.0.179?
Have rebooted PC and repeated the exersise but results are still the same?
What next?
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability