Relating to this vendor:
And, this specific program:
|16th Jun, 2010 03:19|
User Since: 13th May, 2010
System Score: N/A
PSI is reporting PCRE 6.x (6.4.2194.685) as end-of-life and a level 3 security threat.
The installation path is: C:\Program Files (x86)\Steam\steamapps\common\battleforge\pcre3.dll
As you can see this is a dll file located within a game I had downloaded with Steam.
I tried clicking on download solution and it sends me to the SourceForge page for PCRE: http://sourceforge.net/projects/pcre/files/
I was hoping it would be as easy as downloading a new file and replacing the old one but all of the download links on the SourceForge page give simply gave me the source. I'm no programmer but I did my best to try to compile it and it gave me a .lib file that I have no idea what to do with, so I'm a little stuck.
I'd hate to just ignore a security threat like this, so are there any other solutions?
|thedillpickl||RE: PCRE 6.x|
|16th Jun, 2010 07:32|
User Since: 3rd May 2009
System Score: 100%
Last edited on 16th Jun, 2010 07:42
Unfortunately, there are going to be no solutions to fix this problem. End of life means that the vendor of the game is not going to support it anymore. They are done.
The options you have are these:
1) Download a newer version of the game that is supported by the vendor.
2) Create an "Ignore Rule" for the .dll file. (Note: This won't 'fix' the problem, only hide it.)
3) Only play the game when the computer is off-line. (To be safe [see p.s.] you would have to disable the file by changing it's name [i.e. <filename>.old] before going on-line, then back when off-line.)
p.s. This may not be the only file that leaves the program vulnerable!!! It's just the one Secunia flags it as EOL.
Chrome, Firefox, IE8
consilio et animis
|This user no longer exists||RE: PCRE 6.x|
|16th Jun, 2010 08:32|
A rescan should no longer show this instance of PCRE. It its correct that it is End-Of-Life, but before the PSI should mark it as such, there needs to be a proved security glitch in the software.
hope this helps.
Not a customer already?
Learn more about how our market leading Vulnerability Management solutions can help you manage risk and ensure compliance.