Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: suitable replacement

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Adobe Systems
And, this specific program:
Adobe Flash Player 10.x

This thread has been marked as locked.
David(1) suitable replacement
Member 5th Nov, 2010 17:57
Ranking: 0
Posts: 9
User Since: 4th Aug, 2010
System Score: N/A
Location: N/A
I would like to know if there is a suitable replacement for any of the Abode Flash Players versions because of all of the secuirty issues that will operate in the same manner.

Maurice Joyce RE: suitable replacement
Handling Contributor 5th Nov, 2010 18:25
Score: 11630
Posts: 8,917
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 5th Nov, 2010 18:29
David,
There is no real attractive alternative to using Adobe Flash. Not sure if U are having bother updating. Have included the "full SP" if U are attempting to sort it out.

UPDATING STANDALONE ADOBE FLASH - ALL PSI VERSIONS EXCEPT PSI VERSION 2 (BETA)

Works with Windows XP,Vista & Windows 7 - 32 & 64 Bit systems.
If using Internet Explorer 9 BETA scroll to the bottom for more detail

If U have PSI version 2 (Beta) installed have U tried the auto update feature?
The download link and details are here:

http://secunia.com/community/forum/thread/show/572...

OR

To successfully install Adobe Flash without the USELESS Adobe Download Manager (DLM) go here:

http://fpdownload.adobe.com/get/flashplayer/curren...

& then here if U have any Gecko based (Firefox etc) browsers.

http://fpdownload.adobe.com/get/flashplayer/curren...

The latest version is:10.1.102.64

1. Download & SAVE it to desktop.
2. The installer will appear on the desk top. THE IMPORTANT BIT - Before agreeing to install check these programmes are completely shut down (use the Task Manager if necessary to COMPLETELY EXIT the running process):
a. All Browsers.
b. Windows Messenger.
c. Incredimail.
d. Adobe Free Reader.
e. PSI


3. The new install will then remove all old files during the update process.
4. Complete a PSI rescan & all should be in order.
5. Delete the Flash installer file from the desktop.

POSSIBLE PROBLEMS.
++++++++++++++++++

If U failed to complete 2. above U may well find PSI still shows a vulnerability on the rescan.

SOLUTION

1. Double check all items listed in 2. above are COMPLETELY SHUT DOWN:
2. Navigate to:
32 Bit Systems - C:\Windows\system32\Macromedia\Flash
64 Bit Systems - C:\Windows\sysWOW64\Macromedia\Flash

In these locations U may well find these entries:
FLASH10k or other extensions.OCX - Right click & delete it/them.
FLASH10L.OCX - The latest version which should be retained.


SOLUTION 2

1. Check the path to the vulnerability.

If PSI has found elements of Flash in the C:\i386 folder or on any drive other than C that is an OEM reinstallation partition (normally D drive) or a drive U use solely to backup your work U can safely create an ignore rule. It may also be in the Recycle Bin.

OPTIONAL EXTRA'S
++++++++++++++++

Security. (Fairly important if U care to check what Adobe attempt to store on a PC)
Adobe also have a very bad habit of changing your Flash settings each time they plug vulnerabilities. To change the security settings to your liking & regain control of your PC click here:

http://www.macromedia.com/support/documentation/en...

Click each tab U see & change the settings to your security requirements.

Bloat ware.(Very important if U dislike totally useless programmes installed on your PC)
If you used the Adobe site, rather than FileHippo to update you will also find they try or have installed an unnecessary Download Manager.

It is bloat ware by a third party Company called NOS. If found I would uninstall it via Add/Remove.

IE 9 BETA

If using this browser U need to check this web page:
http://labs.adobe.com/downloads/flashplayer10.html

In essence,U must remove all old versions of Flash prior to installing the new one.
Uninstall using this tool:
http://kb2.adobe.com/cps/141/tn_14157.html

Now return to here:
http://labs.adobe.com/downloads/flashplayer10.html

U will see the option to install both the 32 & 64 Bit versions of Flash.

PSI will pick it up as patched - version number 10.2.161.23. The OCX file is J.


If this post has solved your problem could you please select the ACCEPT option. This will lock the thread and stop you & I from receiving unnecessary update emails.

Update 23 11:33 05/11/2010


--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-0
David(1) RE: suitable replacement
Member 5th Nov, 2010 18:29
Score: 0
Posts: 9
User Since: 4th Aug 2010
System Score: N/A
Location: N/A
Thank you for the prompt response. What I have determined through further investigation is that Secunia is not recognizing the fact that I have the latest version of Adobe Flash Player installed on my computer. I do not know how to resolve this issue.
Was this reply relevant?
+0
-0
Maurice Joyce RE: suitable replacement
Handling Contributor 5th Nov, 2010 18:32
Score: 11630
Posts: 8,917
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Clearly U had something running & the old OCX file remains. Find it & delete as follows:

REMOVE OLD ADOBE (FORMERLY MACROMEDIA) OCX FILES.

If Flash was running when an update was attempted it will not remove all of the old (and vulnerable) files.

To remove these files:

COMPLETELY EXIT (using Task Manager if necessary:

a. All Browsers.
b. Windows Messenger.
c. Incredimail
d. All Adobe products
e. PSI unless using Version 2 BETA.

Now navigate to here:

32 Bit Systems - C:\Windows\system32\Macromedia\Flash

64 Bit Systems - C:\Windows\sysWOW64\Macromedia\Flash

In these locations U may well find these entries:
FLASH10k or other extensions.OCX - Right click & delete it/them.

FLASH10L.OCX - The latest version (10.1.102.64) which should be retained.[/b]

Empty the Recycle Bin (or remove any Flash items from the bin) complete a full PSI rescan & all will be in order.

Update 1 11:27 05/11/2010



--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-0
Leendert Kip suitable replacement
Member 5th Nov, 2010 20:08
Score: 65
Posts: 520
User Since: 22nd Jan 2009
System Score: 100%
Location: NL
Last edited on 5th Nov, 2010 20:11
Hi Maurice. I know very well that lot of users have problems everytime Adobe Flash is updated. What I don't understand is why they cannot use auto update to solve their problems. As far as I can remember I have seen two updates recently which were handled correct by auto update. Today there was a new update 10.1.102.64 which went smoothly. I first saw that the update was scheduled and some time later processed. I then checked for possible files left from the previous version, which were not present.

--
PC: JJ Computer Services
Intel Core I3 2100 3.1Ghz
DDR3 Kingston ValueRam 4GB 1333
Windows 7 Home Premium 64bits SP1
Secunia PSI 3.0.0.9016
Internet Explorer 9
Mozilla Firefox 31NL

Laptop: MSI GT780DX
Intel Core I5-2450
DDR3 RAM 6GB
Windows 7 Home Premium 64bits SP1
Secunia PSI 3.0.0.9016
Internet Explorer 11
Mozilla Firefox 31NL
Was this reply relevant?
+0
-0
Maurice Joyce RE: suitable replacement
Handling Contributor 5th Nov, 2010 21:37
Score: 11630
Posts: 8,917
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 5th Nov, 2010 21:39
They can - look at my first solution where they are asked if they have tried version 2 & invited to try it.

Some have not got the BETA version so auto is not available.

Many others on this Forum have stated,like me, that they would NEVER use any auto updater & allow any vendor, including Microsoft, to take control.

I agree - my XP test machine has auto running for BETA test purposes - Flash updated perfectly which makes PSI ideal, once RTM, for those that find manual patching difficult.

Also note there is a sting to the tale with Flash. Auto updaters do not change the security settings which to me is part of the procedure.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
Anthony Wells RE: suitable replacement
Expert Contributor 5th Nov, 2010 22:19
Score: 2434
Posts: 3,317
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 5th Nov, 2010 22:22
I also took the chance and used the "auto-update" for Flash in the (latest) Beta .

It was set to prompt me first so I could control the start . Closed browsers and left the PSI running - nothing else is/was using Flash . The PSI tarted the first ActiveX download/install immediately and then continued downloaded the NPAPI . Plenty of notation of the process and pretty quick ; all in all a real boon for those who struggle with downloads .

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability