Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Adobe Flash sooooo Annoying

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
smcpoland Adobe Flash sooooo Annoying
Member 19th Aug, 2010 09:39
Ranking: 2
Posts: 6
User Since: 6th Apr, 2009
System Score: N/A
Location: SA
Ok Windows 7 Ult 64 bit
Secunia latest version
Adobe Flash latest version

Adobe flash is still out of date...

PSI tells me it is here

C:\Windows\System32\Macromed\Flash\NPSWF32.dll

This directory does NOT exist, yes I've done show hidden & System files etc...

the file does exist in

C:\Windows\SysWOW64\Macromed\Flash but this is the latest as installed by Adobe.

So why am I being told flash exists when it doesn't?

Thanks and regards

dracudok RE: Adobe Flash sooooo Annoying
Member 19th Aug, 2010 10:15
Score: 42
Posts: 26
User Since: 14th Jun 2009
System Score: 100%
Location: DE
Hi smcpoland,

Adobe Flash is 32-bit software and that's why it is installed to the SysWOW64-folder on 64-bit operating systems. That is some of the strange rules Microsoft has implemented to deal with 32-bit software, that claims to be installed to the system32-folder, but cannot because this is reserved for 64-bit software.

PSI obviously shows the same file twice, one time referenced by windows\system32\... (which is not real) and one time referenced by its real path windows\SysWOW64\...

An explanation why your installation ist old may be, that there still exists an old Flash10[letter].ocx in your Macromed\Flash-folder with letter < i.

dracudok
Was this reply relevant?
+5
-0
smcpoland RE: Adobe Flash sooooo Annoying
Member 21st Aug, 2010 10:30
Score: 2
Posts: 6
User Since: 6th Apr 2009
System Score: N/A
Location: SA
Hi Dracodok,

first things first, I understand why SYSWOW64 is used, I'm a developer but you weren't to know that. My point being is why does PSI tell me about a library that doesn't exist? Shouldn't PSI just get the file directory that it is installed in and report that? Or does PSI have a hard coded "library location" for this file? I hope not.

Maybe windows is using the Virtual Directory service which is why PSI picks up the wrong directory?

PSI in this case is not showing the file name twice it is showing it once, in the afore mentioned windows\system32\macromed library (which doesn't exist).

If I look at the file location under syswow64 I see that all files are = i it is not the Flash10[i].ocx file that is causing the problem but NPSWF32.dll whose properties are 10.1.82.76 installed on 19/08/2010. This is the latest version and I'm still being told it's wrong.

Thanks and regards
Sean
Was this reply relevant?
+1
-0
dracudok RE: Adobe Flash sooooo Annoying
Member 21st Aug, 2010 11:24
Score: 42
Posts: 26
User Since: 14th Jun 2009
System Score: 100%
Location: DE
Hi smcpoland,

yes, these are the questions I ask myself too. But they should be better answered by a PSI-specialist/developer.

For example the following components show this strange behaviour:

- Adobe Flash Player (Macromed\Flash\NPSWF32.dll, Macromed\Flash\Flash10i.ocx)
- Adobe Shockwave Player (Adobe\Director\np32dsw.dll, Adobe\Director\SwDir.dll)
- MSCOMCTL ActiveX Control (MSCOMCTL.OCX)
- Microsoft Update Catalog ActiveX Control (MicrosoftUpdateCatalogWebControl.dll)
- Microsoft Windows Genuine Advantage ActiveX Control (LegitCheckControl.DLL)
- Microsoft XML Core Services (MSXML) 4.x (msxml4.dll)

The referenced files or relative pathes in these examples are always shown twice by PSI on a 64 bit OS, one time (true) within the windows\SysWOW64 folder and one time (false) within the windows\system32 folder.

dracudok
Was this reply relevant?
+1
-0
smcpoland RE: Adobe Flash sooooo Annoying
Member 22nd Aug, 2010 08:49
Score: 2
Posts: 6
User Since: 6th Apr 2009
System Score: N/A
Location: SA
Ok, so how do we get PSI developers to look at this?
Was this reply relevant?
+1
-0
Anthony Wells RE: Adobe Flash sooooo Annoying
Expert Contributor 22nd Aug, 2010 14:33
Score: 2445
Posts: 3,336
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hello ,

This problem was explained in some detail in a thread last year ; unfortunately I cannot find it for now .

Secunia do not work on the PSI at weekends ; they may pick up and comment here on Monday CET , if not you could contact them and refer to this thread by email to support@secunia.com

Hope this helps .

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer