navigation bar left navigation bar right

Secunia CSI7
navigation left tab Advisories navigation right tab
navigation left tab Research navigation right tab
navigation left tab Forums navigation right tab
navigation left tab Create Profile navigation right tab
navigation left tab Our Commitment navigation right tab
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: CSI incorrectly identifies chrome version 9 as version 8

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Google
And, this specific program:
Google Chrome 8.x

This thread has been marked as resolved.
ddrescher CSI incorrectly identifies chrome version 9 as version 8
Member 29th Jan, 2011 03:42
Ranking: 0
Posts: 1
User Since: 15th Sep, 2010
System Score: N/A
Location: N/A
CSI incorrectly identifies chrome version 9 as version 8

Post "RE: CSI incorrectly identifies chrome version 9 as version 8" has been selected as an answer.
mogs RE: CSI incorrectly identifies chrome version 9 as version 8
Expert Contributor 29th Jan, 2011 11:46
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
Hello.
Don't know much 'bout CSI....but the latest Stable release of Chrome is 8.0.55.237 for all platforms. The previous Stable version appears to have been 8.0.552.224
Chrome 9.0.597.83 is the current Beta version, and 10.0.648.6 the Dev version; neither of which are monitored by psi at least.
It seems likely that you havn't removed the previous version manually; and it is continuing to be detected.
Hope this is of some help......regards,


--
Was this reply relevant?
+1
-0
This user no longer exists RE: CSI incorrectly identifies chrome version 9 as version 8
Member 31st Jan, 2011 15:21
Hi,

Secunia does not monitor or track beta versions, in neither the CSI or PSI versions.

Since Google Chrome is 'unable' to clean up after itself when installing new versions, what you are seeing is most likely an update leftover, and the CSI is not detecting the beta at all.

hope this helps.
Was this reply relevant?
+0
-0
DGWilkie RE: CSI incorrectly identifies chrome version 9 as version 8
Member 5th Feb, 2011 06:37
Score: 0
Posts: 2
User Since: 20th Aug 2008
System Score: N/A
Location: US
Chrome Version 9 is no longer beta, but is still identified as V8 by PSI. PSI doesn't see the new V9 folder in AppData. Instead it's looking in the old V8 folder which isn't removed by Chrome when Chrome upgrades itself to the new release. PSI needs to see the new V9 folder.
Was this reply relevant?
+0
-0
mogs RE: CSI incorrectly identifies chrome version 9 as version 8
Expert Contributor 5th Feb, 2011 08:05
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
@DGWilkie.
Hello.
Stable Channel Update
| 09:00
Labels: Stable updates
The stable channel has been updated to 9.0.597.84 for all platforms


As this has occurred within the last day or so, it's possible Secunia rules need to be changed. It often happens over a weekend, and is sorted on the Monday.
It is still the case tho', that you need to remove the older version/file manually.
Hope this helps......regards,

--
Was this reply relevant?
+1
-0
billegate RE: CSI incorrectly identifies chrome version 9 as version 8
Member 5th Feb, 2011 10:04
Score: 8
Posts: 17
User Since: 5th Jan 2008
System Score: N/A
Location: FR
hello same problem for me even if I delete the 8.0 repertory Psi still indicates that my google chrome is 8 and I have the 9 version????
psi indication
C:\Documents and Settings\Daniel\Local Settings\Application Data\Google\Chrome\Application\8.0.552.237\chrome. dll, version: 8.0.552.237
this repertory does not exist anymore!!


--
billegate
Was this reply relevant?
+0
-0
mogs RE: CSI incorrectly identifies chrome version 9 as version 8
Expert Contributor 5th Feb, 2011 10:59
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
@billegate
Hello......just checked......Chrome 9 is showing in Secunia advisories here :-
http://secunia.com/advisories/product/34150/
I'm not familiar with how CSI works exactly; but have you rebooted/rescanned following removal of the older version ?
Hope the foregoing helps........regards,

--
Was this reply relevant?
+1
-0
lvirden RE: CSI incorrectly identifies chrome version 9 as version 8
Member 5th Feb, 2011 12:16
Score: 0
Posts: 1
User Since: 8th Dec 2008
System Score: N/A
Location: US
This morning, when my home version of secunia scanned my system, it identified chrome 8 as being end of life. When I clicked the install update, it took me to google chrome's install and 9 was installed. I rescanned, and 8 continues to be flagged because it wasn't uninstalled. When I tried to get more info, it sent me to the control panel for uninstall programs - which shows only one version of chrome. I tried to delete chrome 8 folder under chrome and vista refused to let me, even though i am logged in as admin... sigh
Was this reply relevant?
+0
-0
mogs RE: CSI incorrectly identifies chrome version 9 as version 8
Expert Contributor 5th Feb, 2011 12:25
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
Hello Ivirden.
I too have had the odd occasion when Vista has refused to allow me to delete the older version of Chrome ( tho' as you can see below, I use Dev and Canary builds ).....I think it occurs because the system still finds the files useful for a short while....some time later when I 've gone to delete....it's been allowed.
Hope this helps.......regards,

--
Was this reply relevant?
+0
-0
billegate RE: CSI incorrectly identifies chrome version 9 as version 8
Member 5th Feb, 2011 15:41
Score: 8
Posts: 17
User Since: 5th Jan 2008
System Score: N/A
Location: FR
yes eveything has been checked and reboot there is only chrome 9 and psi tells me that chrome 8 is still there. I dont understand,is it a bug in psi?

--
billegate
Was this reply relevant?
+0
-0
mogs RE: CSI incorrectly identifies chrome version 9 as version 8
Expert Contributor 5th Feb, 2011 15:58
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
@billegate.
So you are using psi not CSI ? What version are you using ? Right click on the tray icon and About..to find.
Are you saying that when you re-scan, psi still detects Chrome 8 with the same file path (even tho' you've deleted): and doesn't pick up Chrome 9 at all ?
Have you checked the version of Chrome by clicking on the Wrench/Spanner ( top right); and then About ?

--
Was this reply relevant?
+0
-0
mogs RE: CSI incorrectly identifies chrome version 9 as version 8
Expert Contributor 5th Feb, 2011 16:10
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
@billegate
You need to delete the File Folder.....emboldened in the copy of your post below :-


hello same problem for me even if I delete the 8.0 repertory Psi still indicates that my google chrome is 8 and I have the 9 version????
psi indication
C:\Documents and Settings\Daniel\Local Settings\Application Data\Google\Chrome\Application\8.0.552.237\ chrome. dll, version: 8.0.552.237
this repertory does not exist anymore!!

Hope this helps........


--
Was this reply relevant?
+0
-0
DGWilkie RE: CSI incorrectly identifies chrome version 9 as version 8
Member 5th Feb, 2011 16:21
Score: 0
Posts: 2
User Since: 20th Aug 2008
System Score: N/A
Location: US
While I think Secunia needs to incorporate their own solution for this problem, it can be solved by following Mog's suggestion to get rid of whatever V8 folder is leftover by Chrome's installation routines. Follow the link provided in Secunia's analysis of your particular machine. In my case it was in C:\Users\...\AppData\Local\Google\Chrome\Applicati on\8.0.552.237. All I did was rename Chrome.dll and Secunia immediately re-identified my Chrome installation as V9 and up-to-date.
Was this reply relevant?
+0
-0
Maurice Joyce RE: CSI incorrectly identifies chrome version 9 as version 8
Handling Contributor 5th Feb, 2011 17:26
Score: 11830
Posts: 9,072
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Secunia, as a vulnerability checker, have provided the solution. They have found that the vendor (Google) have not removed an older version of their programme which is vulnerable before installing a new one.

The answer lies with Google to devise a proper method to do this like most other good vendors.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
mogs RE: CSI incorrectly identifies chrome version 9 as version 8
Expert Contributor 5th Feb, 2011 17:50
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
I agree with Maurice to some extent........having said that, there are four versions of Chrome, and if a user decides he/she wants to hang on to the previous Stable/Beta/Dev plus a Canary build.....there's not always a reason to remove the previous. Providing a smooth silent update from before psi 2.0, and only having to remove one folder has never seemed a hardship to me ( three a day sometimes!!!)....some say it's contributed to Chrome's success...and having made the net a little more secure in the process !!

--
Was this reply relevant?
+1
-0
billegate RE: CSI incorrectly identifies chrome version 9 as version 8
Member 5th Feb, 2011 19:08
Score: 8
Posts: 17
User Since: 5th Jan 2008
System Score: N/A
Location: FR
Last edited on 5th Feb, 2011 19:40
thanks Moqs but this folder does not existe anymore and sÚcunia mentionned that it is still there!!
secunia psi tray version 2

--
billegate
Was this reply relevant?
+0
-0
mogs RE: CSI incorrectly identifies chrome version 9 as version 8
Expert Contributor 5th Feb, 2011 20:55
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
Last edited on 5th Feb, 2011 20:56
@billegate

This is what I do.......maybe it will help you :-
Start/Computer/C/username/AppData/Local/Goo gle/Chrome/Application.....At this point you should see both the new version number/file folder, and the older/previous
to delete. I suspect what you are doing, is going further and deleting an item in the file folder.....and Secunia is continuing to detect the remainder.
Have you got psi 2.0 configured to show the Secure Browsing feature ?

--
Was this reply relevant?
+1
-0
pottertd RE: CSI incorrectly identifies chrome version 9 as version 8
Member 5th Feb, 2011 21:02
Score: 2
Posts: 4
User Since: 17th Jun 2008
System Score: N/A
Location: N/A
I also has PSI detecting the old version 8 when 9 was installed. Yes, Google Chrome did neglect to remove the old 8.x folder, so I deleted this manually. Even after reboot PSI still says the offending software dll is still there, however after a few minutes it has now corrected itself, so I think the problem may be over if you give it a little time.
Was this reply relevant?
+2
-0
billegate RE: CSI incorrectly identifies chrome version 9 as version 8
Member 5th Feb, 2011 22:27
Score: 8
Posts: 17
User Since: 5th Jan 2008
System Score: N/A
Location: FR
No I did not delete an item but the whole folder as usual . Yes PSI 2.0 is configured to show the secure browsing feature. And to aswer to Pottertd I gave enough time (2 days should be enough...lol)

--
billegate
Was this reply relevant?
+0
-0
Maurice Joyce RE: CSI incorrectly identifies chrome version 9 as version 8
Handling Contributor 5th Feb, 2011 22:47
Score: 11830
Posts: 9,072
User Since: 4th Jan 2009
System Score: N/A
Location: UK
@billegate

Complete a full PSI scan. If the problem is still showing what path does PSI give U?

FINDING A FILE PATH - PSI VERSION 2

From the DASHBOARD page click on SCAN RESULTS.

1. This will list all your programmes with a + to the left of each one.
2. Click the + sign next to the item that U want help with.
3. This will reveal the path under DETECTED INSTANCES.
4. Highlight it then copy (CTRL+C) then paste (CTRL+V)) that path back to the Forum.



ALL OTHER PSI VERSIONS

To locate the exact file that the Secunia PSI has detected, use or switch to the ADVANCED interface, then :

1 Click on the + sign of the programme to "expand' it.
2 Click on Technical Details in the Toolbox to see the installation path of the detected file. (Copy (CTRL+C) & paste (CTRL+V)) the Installation Path of the file back to the Forum.


Update 6 22:33 29/01/2011



--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
billegate RE: CSI incorrectly identifies chrome version 9 as version 8
Member 5th Feb, 2011 23:18
Score: 8
Posts: 17
User Since: 5th Jan 2008
System Score: N/A
Location: FR
I have already mentioned the path indicated by PSI,it is:
C:\Documents and Settings\Daniel\Local Settings\Application Data\Google\Chrome\Application\8.0.552.237\
and this folder does not exist anymore

--
billegate
Was this reply relevant?
+0
-0
Maurice Joyce RE: CSI incorrectly identifies chrome version 9 as version 8
Handling Contributor 5th Feb, 2011 23:25
Score: 11830
Posts: 9,072
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Of course it exists otherwise PSI would not have found it on the scan U have just completed. PSI checks the meta data of your PC rather than make things up.

Click on the + next to that entry. Use the Open Folder option (yellow folder without a dot) & delete this entry WHICH WILL BE THERE:

C:\Documents and Settings\Daniel\Local Settings\Application Data\Google\Chrome\Application\8.0.552.237\


--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
billegate RE: CSI incorrectly identifies chrome version 9 as version 8
Member 6th Feb, 2011 00:02
Score: 8
Posts: 17
User Since: 5th Jan 2008
System Score: N/A
Location: FR
in fact the open folder does not open anything

--
billegate
Was this reply relevant?
+0
-0
Maurice Joyce RE: CSI incorrectly identifies chrome version 9 as version 8
Handling Contributor 6th Feb, 2011 00:19
Score: 11830
Posts: 9,072
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 6th Feb, 2011 00:20
To confirm,what U are saying is:

1. U carried out a full PSI scan as requested by me?

2. As a result of that scan, PSI version 2.0.0.3001, produced the fact that this C:\Documents and Settings\Daniel\Local Settings\Application Data\Google\Chrome\Application\8.0.552.237\ was showing as vulnerable?

3. U opened the file location as prescribed by PSI & no file entry was showing in Windows Explorer?








--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-0
billegate RE: CSI incorrectly identifies chrome version 9 as version 8
Member 6th Feb, 2011 08:30
Score: 8
Posts: 17
User Since: 5th Jan 2008
System Score: N/A
Location: FR
Last edited on 6th Feb, 2011 09:02
hello Maurice
this morning I tried a full scan and now PSI indicate that everything is ok. It means that a file re scan is not enough in certain case. Thanks for your assistance.
PS:I also confirm point 2 and point 3 before full scan
re Ps: I have also noticed that Chrome does not appear in secure browser,it should be there?

--
billegate
Was this reply relevant?
+0
-0
Maurice Joyce RE: CSI incorrectly identifies chrome version 9 as version 8
Handling Contributor 6th Feb, 2011 11:32
Score: 11830
Posts: 9,072
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Correct - that is why I asked U to complete a full rescan & report back. Matters not, U are all fixed now which is the main point.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-1

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


Secunia is a member of FIRST Secunia is a member of EDUcause Secunia is a member of The Open Group Secunia is a member of FS-ISAC
 
Secunia © 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer
follow Secunia on Facebook follow Secunia on Twitter follow Secunia on LinkedIn follow Secunia on YouTube follow Secunia Xing follow Secunias RSS feed follow Secunia on Google+