Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Not secure ?

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Adobe Systems
And, this specific program:
Adobe Flash CS3 9.x

This thread has been marked as locked.
ReActif Not secure ?
Member 16th Feb, 2010 07:44
Ranking: 0
Posts: 4
User Since: 18th Aug, 2009
System Score: 100%
Location: FR
How to update Fash CS3? Adobe Updater does not find me no updates!

TiMow RE: Not secure ?
Dedicated Contributor 16th Feb, 2010 08:45
Score: 737
Posts: 728
User Since: 26th Jun 2009
System Score: N/A
Location: CH
Last edited on 16th Feb, 2010 11:59
I appreciate that English may not be you first language, but if you can include a little more information, this will help others to help you.

If you mean normal Adobe Flash (I am unfamiliar with CS3), I will offer the following information.

The latest versions are:

Adobe Flash Player 10.x 10.0.45.2 (ActiveX), for IE, and 10.0.45.2 (NPAPI) for other browsers (eg Firefox).

It may be, that even if you have the latests version, there are still parts of the old version(s) remaining. You must uninstall Flash every time before you update, using an Adobe uninstall download.

It is probably best to start again. Download and run Adobe uninstall Flash from here:

http://kb2.adobe.com/cps/141/tn_14157.html

Re-boot and re-scan PSI to ensure nothing of flash remains.

Download and install latest version:

http://get.adobe.com/flashplayer/

You have to install the latest version 2x. Once using IE, and once using another browser (if you use multiple browsers).

Re-boot and re-scan PSI one more time, and hopefully this will do it.

TiMow

EDIT: on Adobe Flash download site (2nd link above), if you hover cursor over Downloads at top of page and click on Trial downloads, it appears that CS4 is the latest. I am unfamiliar with these Adobe trial versions, but it may be the same as other Adobe software, that you still have to uninstall before new update. Maybe another member has a better take on this.

TiMow

--
Computing is not yet a perfect science - it still requires humans.
Was this reply relevant?
+0
-0
ReActif RE: Not secure ?
Member 16th Feb, 2010 12:02
Score: 0
Posts: 4
User Since: 18th Aug 2009
System Score: 100%
Location: FR
You have reason, I'm French and I do not speak English very well.

The problem is not "Flash Player" or "Plugin" but the program to create Flash animations. Secunia said it is not secure. But no updates exist.

Flash CS3
C:\Program Files\Adobe\Adobe Flash CS3\Flash.exe
Version : 9.0.0.494

I installed the update of the Flash Player included, but can not find anything for the main program.

I hope my English will have been sufficiently accurate.
Thank
Was this reply relevant?
+0
-0
TiMow RE: Not secure ?
Dedicated Contributor 16th Feb, 2010 13:14
Score: 737
Posts: 728
User Since: 26th Jun 2009
System Score: N/A
Location: CH
Your English is fine - the most important is that others understand what you want to say.

Now that you have given more information that I (and others can understand), I can now say that your problem is something that I have no experience or knowledge of.

But I am sure there is someone else who will be able to help.

I wish you luck.

TiMow

--
Computing is not yet a perfect science - it still requires humans.
Was this reply relevant?
+0
-0
ddmarshall RE: Not secure ?
Dedicated Contributor 16th Feb, 2010 15:32
Score: 1208
Posts: 959
User Since: 8th Nov 2008
System Score: 98%
Location: UK
I don't use CS3 either.

If you look at the Secunia advisories for CS3:

http://secunia.com/advisories/product/14231/?task=...

there are two for which Adobe have not issued updates. These are over a year old, so it is unlikely that Adobe intends to fix them. I think they have moved on to CS4.

You have to decide if the way you use CS3 might make you insecure.

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+0
-0
This user no longer exists RE: Not secure ?
Member 16th Feb, 2010 16:06
Hi,

You can try clicking the Solution button from within the Secunia PSI. We try, as often an possible, to provide direct downloads, or at the very least, links to the vendor's download page.

The patch you're looking for can be found from that page.

Hope this helps.
Was this reply relevant?
+0
-0
ReActif RE: Not secure ?
Member 16th Feb, 2010 23:34
Score: 0
Posts: 4
User Since: 18th Aug 2009
System Score: 100%
Location: FR
That's what I do, without result. Thank
Was this reply relevant?
+0
-0
Anthony Wells RE: Not secure ?
Expert Contributor 17th Feb, 2010 01:28
Score: 2437
Posts: 3,323
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 17th Feb, 2010 01:38
Bonsoir @ReActif ,

If you click on the pale blue link "Adobe Flash CS3" at the top right of this page , you will find 3 other threads which deal with your problem .

It is also reported in this thread :-

http://secunia.com/community/forum/thread/show/350...

It does seem to be that Secunia have decided to renew the reporting of CS3 as "insecure" , how insecure does not seem to be clear .

Have Adobe offered an "update" using the "help" drop-down menu in the programme software itself ??

A work round is proposed by @vision.reloaded in this thread :-

http://secunia.com/community/forum/thread/show/686...

I do not know if it will apply or could be applied to your problem

Hope this helps
Anthony



--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
Moonwink RE: Not secure ?
Member 20th Feb, 2010 16:43
Score: 1
Posts: 14
User Since: 26th Nov 2009
System Score: N/A
Location: US
Same way here. Yesterday, Secunia started poping up a message telling me ADOBE FLASH CS3 "FLASH.EXE" v9.0.0.494 was insecure.

C:\Program Files (x86)\Adobe\Adobe Flash CS3\Flash.exe

This installation of Adobe Flash CS3 is insecure and potentially exposes your system to security threats!

Secunia strongly recommends that you update this program by installing the update that is provided by the vendor of this program.


When I use the check for updates in Flash, it tells me there are no updates available.

When I click on the link at the bottom of the screen to "Dowload Solution", all I get is updates for Flash Player.

I see this problem has existed for a VERY LONG TIME with Secunia. I can't believe they're letting it go this long.

I can only believe this is a FALSE POSITIVE. Come on Secunia, let's fix this!!!!!
Was this reply relevant?
+0
-0
rbcarterx RE: Not secure ?
Member 22nd Feb, 2010 16:19
Score: 0
Posts: 2
User Since: 27th Jun 2008
System Score: 90%
Location: Washington Crossing, PA, US
Repeat of an old problem, even down to the file versions, see this thread:

http://secunia.com/community/forum/thread/show/209...
Was this reply relevant?
+0
-0
ajchang RE: Not secure ?
Member 23rd Feb, 2010 16:07
Score: 0
Posts: 2
User Since: 23rd Feb 2010
System Score: N/A
Location: US
apparently they fixed it last year .. but it came back.

http://secunia.com/community/forum/thread/show/212...
Was this reply relevant?
+0
-0
ajchang RE: Not secure ?
Member 23rd Feb, 2010 16:16
Score: 0
Posts: 2
User Since: 23rd Feb 2010
System Score: N/A
Location: US
Last edited on 23rd Feb, 2010 16:17
So just to be clear, the confusion here is Flash.exe versus FlashPlayer.exe. Adobe is saying FlashPlayer.exe is insecure while Flash.exe is fine. Secunia please fix ... again ...
Was this reply relevant?
+0
-0
Hollico RE: Not secure ?
Member 23rd Feb, 2010 21:08
Score: 0
Posts: 16
User Since: 22nd Jul 2009
System Score: N/A
Location: N/A
Secunia is reporting my CS3 installation of Flash as insecure as well. The "Download Solution" link takes me to a page of Flash Player updates which don't update the flash.exe file which Secunia is reporting (v 9.0.0.494).

I searched Adobe's site to see if there was another update, which there didn't seem to be, fired up Flash and tried Adobe Updater which said the program was up to date.

Where do I go from here?
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability