Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Old Flash Version

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
This user no longer exists Old Flash Version
Member 1st Apr, 2010 19:17
Ranking: 0
Posts: 3
User Since: 1st Jan, 1970
System Score: N/A
Location: N/A
Currently I'm getting flagged for having Windows\system32\Macromed\Flash\Flash10d.ocx installed in IE8. I also have Flash10e.ocx installed. I guess the old version was not replaced.

Can I just go into that folder and delete the old version?


Thanks,
Bart

TiMow RE: Old Flash Version
Dedicated Contributor 1st Apr, 2010 20:12
Score: 737
Posts: 728
User Since: 26th Jun 2009
System Score: N/A
Location: CH
Last edited on 1st Apr, 2010 20:12
Hi Bartolo1

I believe that's all you need to do - but I only give advice on something that I've done myself in the past - and I personally haven't done it that way.

I've cut and paste from something I've given as a reply in the past to solve this issue. I haven't edited it, so a lot you'll probably already know.

Quote:

When updating flash, elements of the old, insecure version are left behind - normally .ocx file(s) - for PSI to find and report.

The latest versions are:

Adobe Flash Player 10.x ..... 10.0.45.2 (ActiveX), for IE, and 10.0.45.2 (NPAPI) for other browsers (eg Firefox).

It may be, that even if you have the latests version, there are still parts of the old version(s) remaining. You must uninstall Flash every time before you update, using an Adobe uninstall download.

It is probably best to start again. Download and run Adobe uninstall Flash from here:

http://kb2.adobe.com/cps/141/tn_14157.html

Re-boot and re-scan PSI to ensure nothing of flash remains.

Download and install latest version:

http://get.adobe.com/flashplayer/

You have to install the latest version 2x. Once using IE, and once using another browser (if you use multiple browsers).

Re-boot and re-scan PSI one more time, and hopefully this will do it.

One further thing to add: close all programs that use flash, before starting - this includes PSI. Right click on the tray icon (bottom right of screen) and exit here. Even if you don't use IE - PSI does - and you need flash (ActiveX) to be installed on IE.

Unquote.

Maurice Joyce always gives informed advice relating to Adobe products, and writes that advanced users only need to clear out the old .ocx files and I'm sure the old ones are 10d, being replaced by 10e (but not overwritten - common Adobe problem).

TiMow

--
Computing is not yet a perfect science - it still requires humans.
Was this reply relevant?
+1
-0
This user no longer exists RE: Old Flash Version
Member 1st Apr, 2010 22:18
Thanks, TiMow. IE is not my main browser. I use it mostly for MS Update.

I take it I should follow your uninstall/reinstall instructions while in IE8, right?
Was this reply relevant?
+0
-0
wr RE: Old Flash Version
Contributor 1st Apr, 2010 23:16
Score: 308
Posts: 736
User Since: 30th Mar 2008
System Score: 100%
Location: US
Hi all,

Yes Bartolo1 you an access the folder & zap the files as TiMow stated.
Just be sure you have the Flash version for IE as well as any
other Gecko based browser(s), e.g. Firefox, Chrome, Opera, etc. The
UNINSTALLER is OS specific & will clear all versions of Flash once run. However the INSTALL version(s) are BROWSER specific--one for IE & one for NPAPI (all other browsers basically).

I would suggest after uninstalling by either method you restart & do a scan to make sure all traces have been eliminated.

Secunia PSI does use IE no matter what browser you use or
have set as default.

Hope this helps.

Regards, wr

--
HP Pavilion Slimline s3020n
Windows Vista Home Premium SP2 32 bit
AMD 64 Athlon X2
Firefox 24.4.0 ESR
The weakest link of a computer system is always sitting in front of the monitor.
Was this reply relevant?
+0
-0
TiMow RE: Old Flash Version
Dedicated Contributor 2nd Apr, 2010 09:10
Score: 737
Posts: 728
User Since: 26th Jun 2009
System Score: N/A
Location: CH
Last edited on 2nd Apr, 2010 10:02
Hi Bartolo1

I think @wr has covered all the bases (thanks wr), and he's on your time zone.

But just to clarify - you can either:

A) Manually delete the 10d.ocx file(s); or

B) Run the Adobe uninstall flash, and download and install Flash (ActiveX) using IE; and further download and install Flash (NPAPI) using Firefox (or other browser).

N.B. PSI needs flash (ActiveX) to be installed on IE, in order to show the green (hopefully) graphics, on the PSI page.

If you are unsure about "A)", then "B)" is safer (but a bit longer 5-10 mins). Just follow all the steps, re. re-booting after uninstall.

Hope all is well.

TiMow

--
Computing is not yet a perfect science - it still requires humans.
Was this reply relevant?
+1
-0
This user no longer exists RE: Old Flash Version
Member 2nd Apr, 2010 14:02
Thanks again, guys. I think I will try the easy way, something I have done before with another app that PSI flagged. As I recall, it was Chrome.

Bart
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability