Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Patched Adobe Reader, but scan doesn't recognize it.

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
OSI

This thread has been marked as locked.
walkerpb Patched Adobe Reader, but scan doesn't recognize it.
Member 20th Aug, 2010 17:50
Ranking: 0
Posts: 4
User Since: 3rd Aug, 2010
System Score: N/A
Location: US
Just ran the OSI scan---it said download the Adobe Reader 9.3.4 update---so I did so & installed the update. After installing the update, I opened the reader to make sure version is 9.3.4; it was indeed. Reran the scan, but it still says Adobe Reader is bad version, & needs version 9.3.4! Path is "C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe". This has happened in 2 XP computers. When I press the download button (after 2nd scan), it asks me to download the same module that I've already downloaded & executed.

--
Using Windows XP & OSI on 2 machines for a non-profit; Windows 7 on my Home Machine (PSI)

cfmeier RE: Patched Adobe Reader, but scan doesn't recognize it.
Member 20th Aug, 2010 18:15
Score: 1
Posts: 1
User Since: 20th Aug 2010
System Score: N/A
Location: US
I'm having the same problem. Went so far as to completely uninstall Adobe Reader, then reinstalled it along with the update to newest version, but Secunia OSI still reports that I have the old version! I double-checked in the program, and yep, it says it is version 9.3.4, which is the latest available. Yes, I rebooted my system, and yes, I cleared my Java cache. Irritating. :-(

--
If not for geometry, life would be pointless...
Was this reply relevant?
+1
-0
abeloffv RE: Patched Adobe Reader, but scan doesn't recognize it.
Member 20th Aug, 2010 18:15
Score: 7
Posts: 25
User Since: 7th Sep 2009
System Score: 100%
Location: US
Same issue here with Acrobat 9 Professional. The dll is 9.3.4 but Secunia PSI says it is 9.3.3. System is Windows 7 Ulitimate.

I expect to see the same on three more systems tonight when I get the time to update Acrobat.

Vic

--

Vic
Was this reply relevant?
+1
-0
ddmarshall RE: Patched Adobe Reader, but scan doesn't recognize it.
Dedicated Contributor 20th Aug, 2010 18:21
Score: 1198
Posts: 953
User Since: 8th Nov 2008
System Score: 98%
Location: UK
This is what Secunia suggests you do:

http://secunia.com/community/forum/thread/show/519...

You won't get any action from Secunia until Monday.

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+1
-0
thedillpickl RE: Patched Adobe Reader, but scan doesn't recognize it.
Contributor 20th Aug, 2010 18:38
Score: 376
Posts: 872
User Since: 3rd May 2009
System Score: 100%
Location: US
Last edited on 20th Aug, 2010 18:42
Hi walkerpb;

While waiting for Secunia's return on Monday...

On the two XP machines, try downloading PSI, run in advanced mode and check the installation path. Also, poking around in the folder that PSI points to may show something.


Regards;

Fred

p.s. After reading the next two posters, it kind of sounds like a file in the Adobe programs is being incorrectly flagged. (See ddmarshall's link.) Still wouldn't hurt to look for old files.

--
XP Home
Chrome, Firefox, IE8
--
consilio et animis
Was this reply relevant?
+1
-0
jpegman RE: Patched Adobe Reader, but scan doesn't recognize it.
Member 20th Aug, 2010 18:50
Score: 2
Posts: 5
User Since: 20th Aug 2010
System Score: N/A
Location: US
I agree - PSI should be flagging the AcroRd32.dll, not the AcroRd32.exe file to see if the update has been properly applied!

When I run the AcroRd32.exe (v9.33xx) program, the about window says it's is v9.34, and when I run the Adobe internal update checker, Adobe tells me there are no updates - I'm already running the latest version.

Secunia missed the boat on this one and I'm just going to ignore he results.

Jpegman
Was this reply relevant?
+2
-1
This user no longer exists RE: Patched Adobe Reader, but scan doesn't recognize it.
Member 20th Aug, 2010 20:02
Hi,

We've checked our rules, and the PSI does get it's version number from the dll file and not the .exe.

I suggest you try re-applying the solution and scanning again. Has this resolved the problem?
Was this reply relevant?
+0
-0
jpegman RE: Patched Adobe Reader, but scan doesn't recognize it.
Member 20th Aug, 2010 20:31
Score: 2
Posts: 5
User Since: 20th Aug 2010
System Score: N/A
Location: US
Absolutely not - I reapplied it 3 times, including uninstalling Adobe Reader (interestingly, Adobes latest complete download is v9.33, only the patch exists or V9.34!), rebooting my PC twice, and each time it PSI only sees AcroRd32.exe as the problem, which in fact has details of v9.33 dated 6/19/2010) - so PSI does not check AcroRd32.dll.

Jpegman
Was this reply relevant?
+1
-0
TheQuigs RE: Patched Adobe Reader, but scan doesn't recognize it.
Member 20th Aug, 2010 20:56
Score: 0
Posts: 1
User Since: 25th Jan 2009
System Score: N/A
Location: N/A
Last edited on 20th Aug, 2010 21:02
The .exe is the problem. It is version 9.3.3.177 dated 6/19/2010. The .dll is 9.3.4.218 dated 8/13/2010.

It sounds like PSI correctlly uses the .dll to determine the installed version. See the thread at: http://secunia.com/community/forum/thread/show/519...
Was this reply relevant?
+0
-0
Anthony Wells RE: Patched Adobe Reader, but scan doesn't recognize it.
Expert Contributor 20th Aug, 2010 21:05
Score: 2414
Posts: 3,310
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Hello All ,

Technically Secunia rules may identify the programme by the .exe file and use another file such as the .dll file to detect the version . In the past the file has not even been that obvious .

It will need Secunia and Adobe to work things out .

The PSI detection appear to work so it may be an OSI problem .

It is likely you have the updated version correctly loaded and it is a rule problem ; if past experience is anything to go by .

Emil P. may have gone for the weekend .

Take care

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
thedillpickl RE: Patched Adobe Reader, but scan doesn't recognize it.
Contributor 21st Aug, 2010 02:23
Score: 376
Posts: 872
User Since: 3rd May 2009
System Score: 100%
Location: US
@All;

We've confused the issue somewhat, the original problem was with OSI, not PSI. In the links ddmarshall & TheQuigs give above, Secunia 'fixed' the problem in PSI (I thought). Now abeloffv & jpegman report it is still happening.

A cold reboot (power off) and a full manual scan by PSI should show "Patched". If not and PSI still shows "Insecure", is the file shown the only .dll or are there two with different version numbers?
> If two, rename the old one xxx.dll_old.
> If only the 9.3.4, follow Emil's suggestion to report the program, in either of those threads.

As to the original OSI problem, PSI & OSI do not always change at the same time. PSI is the primary application for individual PC's, so that is what would get changed first (after they take care of CSI). Perhaps with the weekend coming on Secunia had only time to do one and not the other. As long as you're certain that you have the 9.3.4 version installed and the previous removed, you are patched.

> If someone has the time, an experiment might be in order.
> Remove Adobe Reader from the computer and reboot.
> Scan with OSI and/or PSI to see if AR is still shown at all.
> Reload AR, reboot & rescan with OSI/PSI to see if problem persists.

I'm on dial-up and do not wish to take three hour to download AR or I would test.

As Anthony said, Secunia and Adobe will sort out Monday.


Fred

--
XP Home
Chrome, Firefox, IE8
--
consilio et animis
Was this reply relevant?
+0
-0
jpegman RE: Patched Adobe Reader, but scan doesn't recognize it.
Member 21st Aug, 2010 04:20
Score: 2
Posts: 5
User Since: 20th Aug 2010
System Score: N/A
Location: US
You are correct - I was scanning with OSI (I assumed they were identical, and used the terms interchangeably)

PSI has no problems reading Adobe Reader v9.34 updates, but, OSI does!

Jpegman
Was this reply relevant?
+0
-0
thedillpickl RE: Patched Adobe Reader, but scan doesn't recognize it.
Contributor 21st Aug, 2010 04:44
Score: 376
Posts: 872
User Since: 3rd May 2009
System Score: 100%
Location: US
@jpegman;

Hi, welcome to the Secunia forum, BTW.

Understandable, all these acronyms can make an old man dizzy. :)

Glad PSI says AR is OK, that's what is reported elsewhere. Seems OSI has a hiccup and will have to wait until Monday.


Fred

--
XP Home
Chrome, Firefox, IE8
--
consilio et animis
Was this reply relevant?
+1
-1
DAVID606 RE: Patched Adobe Reader, but scan doesn't recognize it.
Member 21st Aug, 2010 13:06
Score: 0
Posts: 4
User Since: 3rd Aug 2009
System Score: N/A
Location: N/A
That is something of a common problem with Secunia; that is, updates will not be recognized by the software. Secunia is very useful, but you get what you pay for. Eventually, Secunia geeks will fix the problem so that it will recognize the new version as having been patched.
Was this reply relevant?
+0
-0
swiftd51 RE: Patched Adobe Reader, but scan doesn't recognize it.
Member 21st Aug, 2010 15:19
Score: 1
Posts: 2
User Since: 10th Jun 2010
System Score: N/A
Location: US
This issue has happened before with OSI specifically as it relates to patches by Adobe. This lastest patch by Adobe did NOT change their primary executible; AcroRd32.exe (9.3.3.177) but changes at least the file AcroRd32.dll (9.3.4.218). It would appear that OSI is only looking at the primary executible not the Libraries when checking for updates?? I did note that Secunia's PSI DOES detect that the Adobe patch has been installed.
Was this reply relevant?
+0
-0
Anthony Wells RE: Patched Adobe Reader, but scan doesn't recognize it.
Expert Contributor 21st Aug, 2010 15:47
Score: 2414
Posts: 3,310
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 21st Aug, 2010 15:48
@abeloffy ,

Hello Vic ,

If Acrobat is still showing incorrectly in the PSI , see this thread :-

http://secunia.com/community/forum/thread/show/520...

The same explanation for version 8.x usually applies to 9.x

Hope that helps .

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
Thunder1963 RE: Patched Adobe Reader, but scan doesn't recognize it.
Member 21st Aug, 2010 17:16
Score: -1
Posts: 5
User Since: 24th Jan 2010
System Score: N/A
Location: US
I updated to the Adobe Reader 9.3.4, after it installs the update you need to REBOOT then rescan and it all comes up correctly. This is what I did and it shows everything updated perfectly and everything reads correctly.
Was this reply relevant?
+0
-0
jakro64 RE: Patched Adobe Reader, but scan doesn't recognize it.
Member 25th Aug, 2010 11:05
Score: 0
Posts: 3
User Since: 17th Feb 2010
System Score: N/A
Location: LT
I have scanned the system in advanced mode, but still the old 9.3.3.177 comes up.
Was this reply relevant?
+0
-0
Anthony Wells RE: Patched Adobe Reader, but scan doesn't recognize it.
Expert Contributor 25th Aug, 2010 11:21
Score: 2414
Posts: 3,310
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 25th Aug, 2010 11:22
@jakro64 ,

This is a thread for problems scanning Adobe Reader using the OSI , while you mention using the "advanced" mode which is in the PSI .

This thread may close at any time , so I will reply to you back at the other thread you are posting in :-

http://secunia.com/community/forum/thread/show/522...

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability