Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Flash, shock and java

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Sun Microsystems
And, this specific program:
Oracle Java JRE 1.6.x / 6.x

This thread has been marked as resolved.
lauralcreek Flash, shock and java
Member 27th Jul, 2010 14:54
Ranking: 0
Posts: 11
User Since: 19th Jun, 2010
System Score: 100%
Location: US
PSI states I have 3 up-dates Micromedia Flash , Micromedia Shockwave and Java 6. After running the up-dates and rescanning it still states that I have 3 critical up-dates. My staus does not change. But my computer states they have been updated. Turned off firewall, virus and malware programs and followed the links from PSI downloaded the up-dates again and get the same thing 3 critical up-dates needed. What's up with the program?

--
Louie

Post "RE: Flash, shock and java" has been selected as an answer.
M.Hansen RE: Flash, shock and java
Secunia Official 27th Jul, 2010 15:10
Score: 188
Posts: 410
User Since: 26th Jan 2009
System Score: N/A
Location: Copenhagen, DK
Hi

Some program does not always remove the older version or old files when updating to a newer version.

Some of these files may have been in use while the installation was in process, locking them and thus preventing the installer to remove them.

Old Java installations can normally be removed from the Window Control Panel.
Use the Tool: Add/Remove Programs (Programs and Features)

You should have a program listed as Java 6 Update 20 or similar.
If you have more than one, it should be save to remove the one with the lowest number.

With both Shockwave and Flash, try to reinstall while you have closed your browsers and other programs that might use the files (Including the PSI)
Right-click the PSI Icon in the in tray (Near the windows clock) and pick "Exit".

Let me know how it went.
MSKAYLLA RE: Flash, shock and java
Member 27th Jul, 2010 17:06
Score: 0
Posts: 1
User Since: 25th Dec 2009
System Score: N/A
Location: N/A
Last edited on 27th Jul, 2010 17:20
I am having the same problem with SUN JAVA JRE 1.6X/6.X too Anyone know how to fix this??? LAURA

I HAVE RE INSTALLED JAVA, the only thing in programs (where you un-install things) isJAVA TM 6 UPDATE 20 AND JAVA TMSE RUNTIME ENVIRONMENT 6.....have vista as my Windows program THANKS
Was this reply relevant?
+0
-0
thedillpickl RE: Flash, shock and java
Contributor 27th Jul, 2010 17:39
Score: 376
Posts: 872
User Since: 3rd May 2009
System Score: 100%
Location: US
@MSKAYLLA, as we are on lauralcreeks' thread I'll be brief.

Use PSI in "Advanced" mode. Click the [+] to the left of the insecure version of Java that PSI finds. Click on the "Open Folder" icon, this will take you to the old file. You want to remove the old leftover file(s) and leave the rest.

If you're unsure how to do the above or want to discuss this further do this:
=======
For help 'fixing' a specific problem, start a new thread. Click on "Create Thread", on the left. You can also click on the "Create new thread" button, at the top of the list of threads (directly under the search box).

To ask a question about a particular program, select "Programs" forum. To ask about PSI, select "PSI" forum, etc.

In the "Topic" box, use something descriptive like "Adobe Reader download fails", this will get help faster.
=======


Regards;

Fred

--
XP Home
Chrome, Firefox, IE8
--
consilio et animis
Was this reply relevant?
+4
-0
wr RE: Flash, shock and java
Contributor 27th Jul, 2010 17:40
Score: 308
Posts: 736
User Since: 30th Mar 2008
System Score: 100%
Location: US
Last edited on 27th Jul, 2010 17:42
@MSKAYLLA go to Add\Remove Programs & remove
Java™ Runtime Environment 6>restart>do complete
system scan. This should remove the insecurity.

Hope this helps.

Regards, wr

EDIT: Sorry Fred for the cross post-I'll step aside & leave
things in your very capable hands.

--
HP Pavilion Slimline s3020n
Windows Vista Home Premium SP2 32 bit
AMD 64 Athlon X2
Firefox 24.4.0 ESR
The weakest link of a computer system is always sitting in front of the monitor.
Was this reply relevant?
+1
-0
lauralcreek RE: Flash, shock and java
Member 27th Jul, 2010 17:53
Score: 0
Posts: 11
User Since: 19th Jun 2010
System Score: 100%
Location: US
java updated and removed the old one. Flash & Shock still remain.

--
Louie
Was this reply relevant?
+0
-0
wr RE: Flash, shock and java
Contributor 27th Jul, 2010 18:13
Score: 308
Posts: 736
User Since: 30th Mar 2008
System Score: 100%
Location: US
#lauralcreek May I suggest that you read & study the
2nd post(the one by Maurice Joyce) in the included link http://secunia.com/community/forum/thread/show/473... Hope this helps.

Regards, wr

--
HP Pavilion Slimline s3020n
Windows Vista Home Premium SP2 32 bit
AMD 64 Athlon X2
Firefox 24.4.0 ESR
The weakest link of a computer system is always sitting in front of the monitor.
Was this reply relevant?
+1
-0
thedillpickl RE: Flash, shock and java
Contributor 27th Jul, 2010 18:34
Score: 376
Posts: 872
User Since: 3rd May 2009
System Score: 100%
Location: US
on 27th Jul, 2010 17:40, wr wrote:
... EDIT: Sorry Fred for the cross post...

Not a problem, you're going, I defer to you.

Apologies to lauralcreek for the clutter.


Fred

--
XP Home
Chrome, Firefox, IE8
--
consilio et animis
Was this reply relevant?
+4
-0
Maurice Joyce RE: Flash, shock and java
Handling Contributor 27th Jul, 2010 18:45
Score: 11726
Posts: 8,970
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 27th Jul, 2010 18:46
@laurelcreek
U require two solutions if U wish to fix SHOCKWAVE PLAYER & the STANDALONE FLASH.

My latest advice to update these pests are here:

UPDATING SHOCKWAVE PLAYER
==================

1. Uninstall Shockwave for your OS from the clearly marked link here:
http://www.adobe.com/shockwave/download/alternates...

2. Reboot to clear out any left over ocx files.

3. Rescan using PSI. Are there any outstanding files that are insecure? These should be cleared out before proceeding to serial 4.In your case this means all the files U have listed in the Shockwave folder

Note 1: At this stage,if PSI finds any elements of Shockwave in the C:\i386 folder or on any drive other than C that is an OEM reinstallation partition (normally D drive) or a drive U use solely to backup your work U can safely create an ignore rule.

Note 2: The path on the C Drive to any remaining insecurity is important. Does it point to the Shockwave Player or another Adobe product that has a Flash element? If it points to Shockwave right click on the file(s) & delete them. If it points elsewhere reinstalling Shockwave will not necessarily clear the problem.

4. Reinstall Shockwave from here:
http://get.adobe.com/shockwave/

5. If you wish to test your new Shockwave Player the link is here:

http://www.adobe.com/shockwave/welcome/

Update 2 18:20 22/07/2010

UPDATING STANDALONE ADOBE FLASH
===============================
Works with Windows XP,Vista & Windows 7 - 32 & 64 Bit systems.

If U have PSI version 1.9.0.2 installed have U tried the auto update feature?

OR

To successfully install Adobe Flash go here:
http://www.filehippo.com/download_flashplayer_ie/

& then here if U have any Gecko based (Firefox etc) browsers.

http://www.filehippo.com/download_flashplayer_fire...

The latest version is:10.1.53.64

1. Download & SAVE it to desktop.
2. The installer will appear on the desk top. Before agreeing to install check these programmes are closed:
a. All Browsers.
b. PSI.
c. Windows Messenger.
d. Incredimail.
e. Adobe Free Reader.

3. The new install will then remove all old files during the update process.
4. Complete a PSI rescan & all should be in order.
5. Delete the Flash installer from the desktop.

POSSIBLE PROBLEMS.
++++++++++++++++++

If U failed to complete 2. above U may well find PSI still shows a vulnerability on the rescan.

SOLUTION

1. Double check all items listed in 2. above are closed.
2. Navigate to:
32 Bit Systems - C:\Windows\system32\Macromedia\Flash
64 Bit Systems - C:\Windows\sysWOW64\Macromedia\Flash

In these locations U may well find these entries:
FLASH10D or E.OCX - Right click & delete it/them.
FLASH10H.OCX - The latest version which should be retained.


SOLUTION 2

1. Check the path to the vulnerability.

If PSI has found elements of Flash in the C:\i386 folder or on any drive other than C that is an OEM reinstallation partition (normally D drive) or a drive U use solely to backup your work U can safely create an ignore rule. It may also be in the Recycle Bin.

OPTIONAL EXTRA'S
++++++++++++++++

Security. (Fairly important if U care to check what Adobe attempt to store on a PC)
Adobe also have a very bad habit of changing your Flash settings each time they plug vulnerabilities. To change the security settings to your liking & regain control of your PC click here:

http://www.macromedia.com/support/documentation/en...

Click each tab U see & change the settings to your security requirements.

Bloat ware.(Very important if U dislike totally useless programmes installed on your PC)
If you used the Adobe site, rather than FileHippo to update you will also find they try or have installed an unnecessary Download Manager.

It is bloat ware by a third party Company called NOS. If found I would uninstall it via Add/Remove.

If this post has solved your problem could you please select the ACCEPT option. This will lock the thread and stop you & I from receiving unnecessary update emails.

Update 12 18:07 22/07/2010








--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+4
-0

lauralcreek

RE: Flash, shock and java
[+]
This reply has been minimised due to a negative Relevancy Score.

lauralcreek

RE: Flash, shock and java
[+]
This reply has been minimised due to a negative Relevancy Score.
lauralcreek RE: Flash, shock and java
Member 28th Jul, 2010 01:18
Score: 0
Posts: 11
User Since: 19th Jun 2010
System Score: 100%
Location: US
Thanks they are all update and 100%

--
Louie
Was this reply relevant?
+4
-0

lauralcreek

RE: Flash, shock and java
[+]
This reply has been minimised due to a negative Relevancy Score.
lauralcreek RE: Flash, shock and java
Member 28th Jul, 2010 01:19
Score: 0
Posts: 11
User Since: 19th Jun 2010
System Score: 100%
Location: US
Thanks they are all update and 100%

--
Louie
Was this reply relevant?
+2
-1
Maurice Joyce RE: Flash, shock and java
Handling Contributor 28th Jul, 2010 01:19
Score: 11726
Posts: 8,970
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Brilliant news.

Could I ask U to lock (Accept) the thread. This will prevent U and all the helpers from getting update emails from "tag on" posts.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
lauralcreek RE: Flash, shock and java
Member 28th Jul, 2010 01:19
Score: 0
Posts: 11
User Since: 19th Jun 2010
System Score: 100%
Location: US
Thanks they are all update and 100%

--
Louie
Was this reply relevant?
+2
-1

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability