Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Adobe Reader 9.3.2

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Adobe Systems
And, this specific program:
Adobe Reader 9.x

This thread has been marked as locked.
gfweinstein Adobe Reader 9.3.2
Member 16th Apr, 2010 01:25
Ranking: 0
Posts: 2
User Since: 8th Oct, 2008
System Score: N/A
Location: US
Adobe Reader above is being declared insecure, and seems to be because it says I have version 9.3.0.148. I do not have this version and have used Microsofts Search and it found one file with this version and I deleted it but your program still says I have version 9.3.0.148. I used your program to download the new patch to no avail. I like my secure program to declare me 100% secure. I can not find what it sees and usually I can figure these things out. It says it is finding this version in Program Files. I rescanned program numerous times.

--
gfweinstein

ksedwar RE: Adobe Reader 9.3.2
Member 16th Apr, 2010 02:12
Score: 2
Posts: 2
User Since: 1st Dec 2009
System Score: N/A
Location: US
Last edited on 16th Apr, 2010 02:13
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe

I went as far as uninstalling Adobe Reader an ensuring that the Adobe folder was deleted. Secunia still reports it as insecure with the file/folder removed from the computer. I then removed the registry entries for AcroRd32.exe. Secunia still says it is insecure. It's not even installed!!

I then installed the new version of Reader. Checked for updated within Reader and tried the Repair option. It still says AcroRd32.exe is insecure.

Apparently this is a bug.

P.S. I also restarted the computer multiple time with and without Reader installed. Still the same results.
Was this reply relevant?
+3
-0
harveyblessing RE: Adobe Reader 9.3.2
Member 16th Apr, 2010 03:04
Score: 0
Posts: 1
User Since: 26th Jul 2008
System Score: N/A
Location: N/A
I am having the exact same problem. Running Vista Hope Premium. All updates are up-to-date. Uninstalled all Adobe products. Used two different searches to try and locate the acrord32.exe file. It isn't on my computer and yet it is being reported. Did a rescan and Secunia ran for a LONG, LONG time and then went to not responding. Obviously a bug.

Harvey Blessing
Was this reply relevant?
+0
-0
ksedwar RE: Adobe Reader 9.3.2
Member 16th Apr, 2010 03:50
Score: 2
Posts: 2
User Since: 1st Dec 2009
System Score: N/A
Location: US
Last edited on 16th Apr, 2010 03:51
Instead of using the re-scan option do a new Full Scan. It shows as patched after the full scan but did not (even after uninstalled) show as secure using the re-scan option.
Was this reply relevant?
+0
-1
This user no longer exists RE: Adobe Reader 9.3.2
Member 16th Apr, 2010 08:55
Hi,

Please follow this procedure:
Uninstall Adobe Reader. Rescan. It should not detect any reader instances.

Download adobe reader from here:
http://get.adobe.com/reader/
and install it.

Do a scan with the PSI, make sure Adobe Reader is detected.

Click the "download solution" button and install the incremental patch.

Do a full rescan.

Has this solved the problem?
Was this reply relevant?
+0
-0
oliverrp9939 RE: Adobe Reader 9.3.2
Member 16th Apr, 2010 19:25
Score: 0
Posts: 2
User Since: 4th Jan 2010
System Score: N/A
Location: N/A
Yes, it solved the problem. The situation also wasted a fair bit of time. Hope Secunia is working on fixing the root cause.
Was this reply relevant?
+0
-0
goalmaster2 RE: Adobe Reader 9.3.2
Member 20th Apr, 2010 20:01
Score: 2
Posts: 3
User Since: 20th Apr 2010
System Score: N/A
Location: N/A
Same thing happened to me. PSI says version detected is 9.3.0.148, however after updating, when you follow the folder to the file PSI says it is scanning, files properties show it as version 9.3.2.163. This must be a bug with PSI.
Was this reply relevant?
+1
-0
al1939 RE: Adobe Reader 9.3.2
Member 20th Apr, 2010 21:04
Score: 0
Posts: 2
User Since: 16th Apr 2010
System Score: N/A
Location: US
I had the same problem about a week ago. I finally deleted all my temp files and rebooted my computer and installed the update. I don't know if this will work for you but good luck.

--
AL
Was this reply relevant?
+0
-0
Anthony Wells RE: Adobe Reader 9.3.2
Expert Contributor 20th Apr, 2010 21:30
Score: 2445
Posts: 3,337
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hello ,

If you actually have the up to date version and no "old" files are lurking elsewhere (check the installation path) then :

Since the 16th some PSI scanners/scans are not correctly recording/showing updates . This can often be fixed by un-installing and reinstalling PSI .

Equally there "has been" a bug which may have reappeared and which shows no update in the full scan , but an individual scan using the "scan" icon in the "toolbox" (look in the individual programme expanded page in PSI in "advanced" mode) will show the correct version , but only until the next full scan .

Hope this helps , if not come back here .

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+1
-0
goalmaster2 RE: Adobe Reader 9.3.2
Member 21st Apr, 2010 04:50
Score: 2
Posts: 3
User Since: 20th Apr 2010
System Score: N/A
Location: N/A
tried this, it did'nt work. Thanks for trying.
Was this reply relevant?
+0
-0
Anthony Wells RE: Adobe Reader 9.3.2
Expert Contributor 21st Apr, 2010 11:22
Score: 2445
Posts: 3,337
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 21st Apr, 2010 11:23
Hello goalmaster2 ,

If you have followed followed Emil's instructions (above) for a full uninstal/reinstall of Adobe and also reinstalled PSI , rebooted and done a full scan and an individual scan of Adobe and you still get "insecure" , could you post back with all the details shown using PSI in "advanced" mode/expanded page , including the folder location using the open folder icon in the "toolbox" .

Does this produce anything ??

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+6
-0
goalmaster2 RE: Adobe Reader 9.3.2
Member 21st Apr, 2010 16:32
Score: 2
Posts: 3
User Since: 20th Apr 2010
System Score: N/A
Location: N/A
Anthony,

I actually ran the OSI scan and it showed no problems with Adobe. I uninstalled PSI, rebooted and reinstalled. Rescanned and no problems.

Thanks.
Was this reply relevant?
+1
-0
Anthony Wells RE: Adobe Reader 9.3.2
Expert Contributor 21st Apr, 2010 17:31
Score: 2445
Posts: 3,337
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

@goalmaster2 ,

Thank you for your update . Glad you're back to "normal".

Easy-peasy , huh ?? :))

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
marky1124 RE: Adobe Reader 9.3.2
Member 26th Apr, 2010 14:39
Score: 1
Posts: 8
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 26th Apr, 2010 14:40
Hi,

I have this same problem as described above. E.g. I had Adobe Reader 9.3.0.148 installed and then upgraded it to 9.3.2.163. I've rebooted and done full rescans and PSI still insists that my installed version is 9.3.0.148.

Here's a screenshot;

http://img34.imageshack.us/img34/8956/psiw.png

I see from earlier posts that uninstalling & reinstalling Secunia PSI is likely to resolve this problem, however I'm not keen on that approach since that won't fix the underlying code issue.

So can I provide any further information that will enable you to fix the code?

Cheers,
Mark

EDIT:
P.S. I forgot to mention that I've also tried the individual 'Re-scan program' option and that doesn't fix this either.
Was this reply relevant?
+0
-0
Anthony Wells RE: Adobe Reader 9.3.2
Expert Contributor 26th Apr, 2010 14:46
Score: 2445
Posts: 3,337
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 26th Apr, 2010 14:49
Mark ,

Could you please wait for a Secunia official to contact you .

What version of PSI are you using .

EDIT : I see it is 1.5.0.0. in your screenshot , so please wait for Secunia .

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
marky1124 RE: Adobe Reader 9.3.2
Member 26th Apr, 2010 14:53
Score: 1
Posts: 8
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
I'm happy to wait. I'm also happy to use the sysinternals tools if there is any specific information to be monitored during a run.
Was this reply relevant?
+0
-0
Anthony Wells RE: Adobe Reader 9.3.2
Expert Contributor 26th Apr, 2010 14:56
Score: 2445
Posts: 3,337
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Thank you , Mark . They'll tell you what they need .

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
M.Hansen RE: Adobe Reader 9.3.2
Secunia Official 26th Apr, 2010 15:43
Score: 188
Posts: 411
User Since: 26th Jan 2009
System Score: N/A
Location: Copenhagen, DK
Hi
Thank you for waiting!

Could i ask you to start start the PSI in Debug mode?
First close the PSI by right-clicking the PSI icon in the tray and pick "exit"

Next, open the commandprompt by typing CMD in either the "run.." utility or simply in the program search field (Vista and 7 only)

(You might want to change the path to match your local installation)
Then type: cd "C:\Program Files\Secunia\PSI\" (Press enter)
Next type psi.exe --verbose --debug secunia.txt

Perform a full scan with the PSI.

Send the following to support@secunia.com:
1.Screenshot of the file version details from the wrongly detected files (With path if possible) (right click on the file and pick properties, then go to the "details" tab)
2. The secunia.txt log
3. Screenshot of your scan results in the PSI (With path if possible)
marky1124 RE: Adobe Reader 9.3.2
Member 26th Apr, 2010 16:00
Score: 1
Posts: 8
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 26th Apr, 2010 16:36
Hi,

Thank you for your speedy response. I have the secunia.txt file. It's 360KB. Do you have a suggested method by which I can send it to you?

Here's a few snippets from it, in case they are enough to solve the issue:

[04/26 14:52:33.985] Timestamp: 0x4987edd0
[04/26 14:52:33.985] Machine : 0x014c
[04/26 14:52:33.985] Scanning file: 'C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.dll'
[04/26 14:52:34.001] Scanning PE header for file: \\.\C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.dll
[04/26 14:52:34.017] Offset=256
[04/26 14:52:34.017] Timestamp: 0x4bb80f73
[04/26 14:52:34.017] Machine : 0x014c
[04/26 14:52:34.032] Scanning file: 'C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe'
[04/26 14:52:34.048] Scanning PE header for file: \\.\C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe
[04/26 14:52:34.063] Offset=240

...

[04/26 14:53:08.048] Offset=336
[04/26 14:53:08.048] Timestamp: 0x49d65443
[04/26 14:53:08.048] Machine : 0x014c
[04/26 14:53:08.063] Scanning file: 'C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67C A7DA73301B7449A0300000010\9.3.0\AcroRd32.dll'
[04/26 14:53:08.079] Scanning PE header for file: \\.\C:\WINDOWS\Installer\$PatchCache$\Managed\68AB 67CA7DA73301B7449A0300000010\9.3.0\AcroRd32.dll
[04/26 14:53:08.095] Offset=248
[04/26 14:53:08.095] Timestamp: 0x4b307339
[04/26 14:53:08.095] Machine : 0x014c
[04/26 14:53:08.157] Scanning file: 'C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67C A7DA73301B7449A0300000010\9.3.0\AcroRd32.exe'
[04/26 14:53:08.188] Scanning PE header for file: \\.\C:\WINDOWS\Installer\$PatchCache$\Managed\68AB 67CA7DA73301B7449A0300000010\9.3.0\AcroRd32.exe


I've checked the AcroRd32.exe in the c:\windows\installer\... directory and it is indeed version 9.3.0.148. So I'm guessing that PSI.exe notices this but reports the issue against the c:\program files\... instance of the file, thus causing the confusion.

Cheers,
Mark

EDIT: I've now uploaded the file to this service: http://www.2shared.com/file/12845119/45c7a48f/secu...
Was this reply relevant?
+1
-0
M.Hansen RE: Adobe Reader 9.3.2
Secunia Official 29th Apr, 2010 12:40
Score: 188
Posts: 411
User Since: 26th Jan 2009
System Score: N/A
Location: Copenhagen, DK
I again.

Could i ask you to email either the secunia.txt or the content of it in a email to: support@secunia.com

We will then examine it for a possible bug.
marky1124 RE: Adobe Reader 9.3.2
Member 30th Apr, 2010 11:01
Score: 1
Posts: 8
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
I've sent an email with the attachment. Did the link to the file above not work for you?
Was this reply relevant?
+0
-0
jmrzx RE: Adobe Reader 9.3.2
Member 30th Apr, 2010 17:21
Score: -1
Posts: 2
User Since: 12th Sep 2009
System Score: N/A
Location: US
Based on feedback from an "official" on a thread about this issue, I sent in details and screenshots to support@secunia.com on April 16 but never received a response. Good thing this is a free service, otherwise I'd want my money back.
Was this reply relevant?
+0
-1
marky1124 RE: Adobe Reader 9.3.2
Member 4th May, 2010 13:15
Score: 1
Posts: 8
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Both of the machines I had that were experiencing this problem fixed themselves this morning when I manually ran a full scan. One of them had run a scheduled scan yesterday and at that point still displayed the problem.
Was this reply relevant?
+0
-0
Anthony Wells RE: Adobe Reader 9.3.2
Expert Contributor 4th May, 2010 16:31
Score: 2445
Posts: 3,337
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Without wishing to put words into their mouth , i can assure you that Secunia are still busy looking into this problem .

Take care

Anthony


--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
jmrzx RE: Adobe Reader 9.3.2
Member 4th May, 2010 16:46
Score: -1
Posts: 2
User Since: 12th Sep 2009
System Score: N/A
Location: US
Just like Marky1124, my scan yesterday still showed Insecure but I just ran another and it's gone.
Was this reply relevant?
+0
-0
This user no longer exists RE: Adobe Reader 9.3.2
Member 5th May, 2010 08:47
Hi,

I'm glad to see we managed to solve the problem! If anyone is still experiencing problems, please start a new thread.
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer