Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: PSI Error message for Adobe Elements 7x

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Adobe Systems
And, this specific program:
Adobe Photoshop Elements 7.x

This thread has been marked as resolved.
Kwant PSI Error message for Adobe Elements 7x
Member 8th May, 2010 18:09
Ranking: 0
Posts: 3
User Since: 25th Mar, 2009
System Score: 100%
Location: NL
PSI informs me with the following message.

This installation of Adobe Photoshop Elements 7.x is insecure and potentially exposes your system to security threats!

Secunia strongly recommends that you update this program by installing the update that is provided by the vendor of this program.

However, the message remais after applying the patch provided through PSI.
When I try to update through the Adobe provided Update check I am informed that my program is up to date.

Who is wrong, Adobe or PSI?
How can I get this message away?

Post "RE: PSI Error message for Adobe Elements 7x" has been selected as an answer.
Maurice Joyce RE: PSI Error message for Adobe Elements 7x
Handling Contributor 8th May, 2010 18:30
Score: 11711
Posts: 8,954
User Since: 4th Jan 2009
System Score: N/A
Location: UK
What path is PSI showing?

FINDING A VULNERABILITY FILE PATH
=================================

To locate the exact file that the Secunia PSI has detected, use or switch to the ADVANCED interface, then :

1 Click on the + sign of the programme to "expand' it.
2 Click on Technical Details in the Toolbox to see the installation path of the detected file. (Copy (CTRL+C) & paste (CTRL+V) the Installation Path of the file back to the Forum if U are unsure what to do next.

Revision 2

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-0
Kwant RE: PSI Error message for Adobe Elements 7x
Member 8th May, 2010 22:41
Score: 0
Posts: 3
User Since: 25th Mar 2009
System Score: 100%
Location: NL
When I check the security information at PSI, it looks as if the vulnarability only concerns Adobe Elements 8x. No correction seems available for Adobe 7x.

Technical details
Technical details about this installation of Adobe Photoshop Elements 7.x, you can use this information to determine why the Secunia PSI detected the program and the security state of it.

Version Detected:
7.0.0.0

Installation Path:
D:\Program Files\Adobe\Photoshop Elements 7.0\Photoshop Elements 7.0.exe

Last Inspection of Program:
8th May. 2010, 18:02 CET


CVE Reference: CVE-2009-3489
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2009-3489

Description:
Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local users to (1) stop the service via the stop command, (2) execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or (3) restart the service via the start command.

CVE Status: Candidate
References: ST 1022963
SAID Secunia Advisory: SA36895
Was this reply relevant?
+0
-0
Maurice Joyce RE: PSI Error message for Adobe Elements 7x
Handling Contributor 9th May, 2010 01:16
Score: 11711
Posts: 8,954
User Since: 4th Jan 2009
System Score: N/A
Location: UK
What do U use your D drive for? Is it a backup drive?

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
thedillpickl RE: PSI Error message for Adobe Elements 7x
Contributor 9th May, 2010 05:40
Score: 376
Posts: 872
User Since: 3rd May 2009
System Score: 100%
Location: US
Hi Kwant;

If this is not an archive, but the actually running version of Photoshop Elements, please note that Adobe reports 7.0.3 version current as of 4/27/2010. http://www.adobe.com/support/downloads/product.jsp...


Hope this helps;

Fred

--
XP Home
Chrome, Firefox, IE8
--
consilio et animis
Was this reply relevant?
+3
-2
Kwant RE: PSI Error message for Adobe Elements 7x
Member 9th May, 2010 18:46
Score: 0
Posts: 3
User Since: 25th Mar 2009
System Score: 100%
Location: NL
This D disk is my program files disk.
So the Adobe Elements exe is the program I run.
The download of the patch works great. it runs and then tels me that it updated Elements 7.x
The patch does not, however, on my machine update the Elements version number and PSI does not recognize the program as patched.

I run Vista Ultimate SP2 on a Intel Core duo with 4 gb ram, 32 bit os
Was this reply relevant?
+0
-0
Maurice Joyce RE: PSI Error message for Adobe Elements 7x
Handling Contributor 9th May, 2010 19:03
Score: 11711
Posts: 8,954
User Since: 4th Jan 2009
System Score: N/A
Location: UK
I would suggest the programme to Secunia again in it's current format. It may update their database.

Go the the patched tab>scroll to the bottom & click the link

Help us improve our service to you:
Program missing? Suggest it here!

If this post has solved your problem could you please select the ACCEPT option. This will lock the thread and stop you & I from receiving unnecessary update emails.


--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+3
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability