navigation bar left navigation bar right

Secunia CSI7
navigation left tab Advisories navigation right tab
navigation left tab Research navigation right tab
navigation left tab Forums navigation right tab
navigation left tab Create Profile navigation right tab
navigation left tab Our Commitment navigation right tab
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Installed 9.3 but still unsecure

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Adobe Systems
And, this specific program:
Adobe Reader 9.x

This thread has been marked as locked.
Morpurgo Installed 9.3 but still unsecure
Member 31st Jan, 2010 09:47
Ranking: 0
Posts: 1
User Since: 29th Jan, 2010
System Score: N/A
Location: N/A
I got a warning that my adobe needed to be updated so i did. Now i have 9.3 but Secunia tells me I have still 9.2.0.124?

TiMow RE: Installed 9.3 but still unsecure
Dedicated Contributor 31st Jan, 2010 10:11
Score: 737
Posts: 728
User Since: 26th Jun 2009
System Score: N/A
Location: CH
Last edited on 31st Jan, 2010 10:16
Hello Morpurgo

Maurice Joyce is the Adobe master. Hopefully he will pick up your Q. at some point.
If you weren`t aware, there are perpetual problems with Adobe software.

In the meantime, what you need to try, (if not already done), is to reboot your system and re scan PSI.

This is always the advisable practice, when updating, and is sometimes all that is needed.

If this doesn`t work, then you will need to locate and clear out any residual files from 9.2.

As I`ve said, Maurice is best placed in this case, or you can search the forum for previos Adobe threads.

What has been stated in the past is that whereever possible alternatives should be sought to Adobe - there are other freeware PDF readers and, on recommendation, I changed to Foxit Reader pre-XMas, when there were big issues with Adobe reader.

Take a look at this thread (8th entry from Maurice Joyce - with the bold print)

http://secunia.com/community/forum/thread/show/339...


TiMow

--
Computing is not yet a perfect science - it still requires humans.
Was this reply relevant?
+0
-0
Maurice Joyce RE: Installed 9.3 but still unsecure
Handling Contributor 31st Jan, 2010 13:07
Score: 11830
Posts: 9,072
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Where is this Adobe vulnerability lurking?

FINDING A VULNERABILITY FILE PATH
=================================

To locate the exact file that the Secunia PSI has detected, use or switch to the ADVANCED interface, then :

1 Click on the + sign of the programme to "expand' it.
2 Click on Technical Details in the Toolbox to see the installation path of the detected file. (Copy (CTRL+C) & paste (CTRL+V) the Installation Path of the file back to the Forum if U are unsure what to do next.




12:06 31/01/2010




--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
Eljo RE: Installed 9.3 but still unsecure
Member 31st Jan, 2010 13:16
Score: -2
Posts: 42
User Since: 29th Nov 2008
System Score: 99%
Location: NL
C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe

--
Ms Windows7 32bit \Notebook HP 6720s\1.6Ghz\3GB\CIS 5.x\
Asus Notebook A8\ Win8 64bit\1.9Ghz\8Gb\Cis5.x\
Was this reply relevant?
+0
-0
dill0612 RE: Installed 9.3 but still unsecure
Member 31st Jan, 2010 14:59
Score: 0
Posts: 2
User Since: 23rd Feb 2009
System Score: N/A
Location: N/A
The problem isn't unique to one machine. I have the identical symptoms even after a reboot and rescan. File Explorer clearly shows the version of acrord32.exe as 9.3 but PSI reports 9.2. I've also ensure there is one and only one copy of acrord32.exe on my hard drives.
Was this reply relevant?
+0
-0
Anthony Wells RE: Installed 9.3 but still unsecure
Expert Contributor 31st Jan, 2010 18:12
Score: 2454
Posts: 3,345
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 31st Jan, 2010 18:17
Hello All ,

Secunia do not always use the installation path file - in this case AcroRD32.exe - to detect the version of Adobe Reader .

Having said that , V 9.3.0.148 has been available since 12/01/2010 and when installed it appears to change/update all the important files to that version N.

This seems to be the first reported problem for "Reader" here in the Forum , since the update became available ; in order to help to try clarify , could you you say at what date and by which method you updated from v9.2.0.124 to v9.3.0.148

Is anyone using Reader in Adobe Acrobat Pro ??

This thread deals with the problem in Adobe Acrobat Pro :-

http://secunia.com/community/forum/thread/show/332...

Take care
Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
Eljo RE: Installed 9.3 but still unsecure
Member 31st Jan, 2010 19:10
Score: -2
Posts: 42
User Since: 29th Nov 2008
System Score: 99%
Location: NL
I installed it this morning my Win7 32bit system. I followed the link in Secunia and followed the instructions, thats it.

--
Ms Windows7 32bit \Notebook HP 6720s\1.6Ghz\3GB\CIS 5.x\
Asus Notebook A8\ Win8 64bit\1.9Ghz\8Gb\Cis5.x\
Was this reply relevant?
+0
-0
Anthony Wells RE: Installed 9.3 but still unsecure
Expert Contributor 31st Jan, 2010 20:35
Score: 2454
Posts: 3,345
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

@eljo ,

Adobe Reader tends to update better from within itself .

You could try ;-

Open the Reader and close all/as many other programmes you can do so safely , click on the "Help" tab (top leftish of the page) and in the dropdown menu select "check for updates" , if they show (unlikely) install them . If this does not help you , select "Repair Adobe Reader Installation" and let it run . It may work straight away but better do a reboot and then run a Full PSI scan .

Let us know how you go .
Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
Eljo RE: Installed 9.3 but still unsecure
Member 31st Jan, 2010 21:09
Score: -2
Posts: 42
User Since: 29th Nov 2008
System Score: 99%
Location: NL
The update did not work but the repair option did the trick, solved!

--
Ms Windows7 32bit \Notebook HP 6720s\1.6Ghz\3GB\CIS 5.x\
Asus Notebook A8\ Win8 64bit\1.9Ghz\8Gb\Cis5.x\
Was this reply relevant?
+0
-0
dill0612 RE: Installed 9.3 but still unsecure
Member 31st Jan, 2010 23:32
Score: 0
Posts: 2
User Since: 23rd Feb 2009
System Score: N/A
Location: N/A
The repair trick fixed it. In fact, not only did it fix the Reader, it also fixed Shockwave and Flash errors as well. FYI, I had tried both the standalone install from the web page and an internal update. The last thing I had done prior to running repair was an internal update from the Help menu.

Thanks for your assitance. It's sure nice to see green bars again!
Was this reply relevant?
+0
-0
cains2 RE: Installed 9.3 but still unsecure
Member 20th Feb, 2010 13:44
Score: 0
Posts: 1
User Since: 20th Feb 2010
System Score: N/A
Location: JP
Hi
I installed Adobe Reader in
C:\TOOLS\PDFViewer\AdobeReader90\Reader\AcroRd32.e xe

AcroRd32.exe (9.3.0.148) MD5 c528536bf4e4c14c2e3171900e588443

C:\TOOLS\PDFViewer\AdobeReader90\Reader\plug_ins\A croForm.api

AcroForm.api (9.3.1.203) MD5 61b909be7623d833ce25cb5213e66412

Secunia PSI still said:
"This installation of Adobe Reader 9.x is insecure and potentially exposes your system to security threats"


WIN XP PRO SP3 FFX3.5
Was this reply relevant?
+0
-0
Expatcher RE: Installed 9.3 but still unsecure
Member 20th Feb, 2010 23:49
Score: 0
Posts: 1
User Since: 20th Feb 2010
System Score: N/A
Location: US
HI,

I installed the 9.3.1 update supplied by Adode. It says version is 9.3.1, but Secunia says it is still 9.3.0 and I agree with Secunia. I removed Adobe Reader completely (2) times and re-installed with the same outcome.

When is Adobe going to learn how to patch software ??? This is getting rather annoying.

--
STCD
Was this reply relevant?
+0
-0
searcher1 RE: Installed 9.3 but still unsecure
Member 22nd Feb, 2010 06:41
Score: 0
Posts: 1
User Since: 22nd Feb 2010
System Score: N/A
Location: N/A
PSI is looking at 'acrobat.dll' which shows its verion to still be 9.X The update is done (in my case 3 times!) but that file I suspect was not the problem so Adobe simply left it. I wonder how you can verify the update?

Michael
Was this reply relevant?
+0
-0
mbrazil RE: Installed 9.3 but still unsecure
Member 22nd Feb, 2010 08:29
Score: 0
Posts: 8
User Since: 2nd Feb 2008
System Score: 92%
Location: US
I have a similar situation with Adobe Reader. I installed the latest update from Adobe, and the program now shows itself as ver. 9.3.1. The file properties for AcroRd32.exe show ver. 9.3.0.148. PSI also indicates the Reader version is 9.3.0.148 and says it's insecure. When I check for updates within Reader, it says there are none available.

--
Mike Brazil
Was this reply relevant?
+0
-0
Syzyzgy RE: Installed 9.3 but still unsecure
Member 22nd Feb, 2010 08:40
Score: 0
Posts: 9
User Since: 14th Dec 2008
System Score: N/A
Location: CN
There appears to be something amiss with you Secunia PSI program.

Although I have run all recommended patches and updates PSI still says the programs are insecure.

Example: Google Chrome - PSI says it is version 4.0.249.78 where as Google Chrome itself says it is version 4.0.249.89

Example: Adobe Acrobat - PSI says there is a later version of Adobe Acrobat 9, however when I update both via PSI link and the Acrobat program itself the version installed is 9.3.0.148 which PSI says is insecure.

Example - MS PowerPoint Viewer. PSI say version 12.0.6414.1000 is insecure whereas the latest download from MS Office installs version 12.0.6414

Example - Adobe Flash - I have updated this numerous times and now PSI tels me 2 versions are out of date. 10.0.42.34 (ActiveX) & 10.0.32.18 (ActiveX). I don't know how to check which version is running, however following the PSI link does not install a version that PSI recognizes as patched.

So either i am completely stupid and inept or there is some problem with PSI.

Perhaps you could let me know.

Maybe I need an updated version of PSI.
Was this reply relevant?
+0
-0
Anthony Wells RE: Installed 9.3 but still unsecure
Expert Contributor 22nd Feb, 2010 18:52
Score: 2454
Posts: 3,345
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

@syzyzgy

Multiple postings on different threads is considee bad manners and likely to annoy those you wish to help you ; it is also very confusing for those following a thread and also needing help .

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
Syzyzgy RE: Installed 9.3 but still unsecure
Member 23rd Feb, 2010 08:13
Score: 0
Posts: 9
User Since: 14th Dec 2008
System Score: N/A
Location: CN
Sorry. thanks for the tip.

Was this reply relevant?
+0
-0
Anthony Wells RE: Installed 9.3 but still unsecure
Expert Contributor 23rd Feb, 2010 15:41
Score: 2454
Posts: 3,345
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

No problem :))

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
terragasta RE: Installed 9.3 but still unsecure
Member 26th Feb, 2010 12:26
Score: 0
Posts: 11
User Since: 31st Jul 2009
System Score: N/A
Location: FR
hello everybody,
i think the problem is the fact of Adobe who doesn't update the version of the file Acrord32.exe (9.3.0.148) since the software version is 9.3.1...
not the problem of PSI...
sincerely
terragasta
Was this reply relevant?
+0
-0
terragasta RE: Installed 9.3 but still unsecure
Member 26th Feb, 2010 19:11
Score: 0
Posts: 11
User Since: 31st Jul 2009
System Score: N/A
Location: FR
and now SECUNIA recognize Adobe Reader updated as 9.3.1...also the version of the file acrord32.exe is always 9.1.0.148...
why not ?
terragasta
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


Secunia is a member of FIRST Secunia is a member of EDUcause Secunia is a member of The Open Group Secunia is a member of FS-ISAC
 
Secunia © 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer
follow Secunia on Facebook follow Secunia on Twitter follow Secunia on LinkedIn follow Secunia on YouTube follow Secunia Xing follow Secunias RSS feed follow Secunia on Google+