Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: secunia behind and preventing flash updates

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
CSI

This thread has been marked as resolved.
ebucklew secunia behind and preventing flash updates
Member 16th Mar, 2011 20:15
Ranking: 1
Posts: 25
User Since: 1st Jan, 1970
System Score: N/A
Location: N/A
Well there has been a flash update out for over two weeks now (10.2.152.32)
came out on 02-28-11

I am not happy with not being able to update without secunia letting me....meaning when I scan my network....nothing shows as needing an update, because version 10.2.151.26....is shown as secure!....

so then I can't create an update....this is does not help me keep things secure!

the msi download is here....

http://fpdownload.macromedia.com/get/flashplayer/c...

this is directly from adobe and it is the updated file...


Post "RE: secunia behind and preventing flash updates" has been selected as an answer.
Anthony Wells RE: secunia behind and preventing flash updates
Expert Contributor 17th Mar, 2011 11:59
Score: 2428
Posts: 3,316
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 17th Mar, 2011 12:11
Hi ,

Whilst you wait for someone from CSI support to reply , you should know that the version ...26 is the latest "secure" version and that .....32 is/was a bug fix and so , as such , is not recognised as a required security patch/update by Secunia .

If you wish to know how to update a programme within the CSI when it is a bug fix/eye candy update and not a "security" update you could contact them at CSC@secunia.com if they do not pick up^this thread .

hope that helps .

Anthony

EDIT : you should note that there is a current O day exploit as described here :-

http://secunia.com/advisories/43751/

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+1
-0
gjjean RE: secunia behind and preventing flash updates
Contributor 17th Mar, 2011 14:25
Score: 192
Posts: 197
User Since: 9th Apr 2010
System Score: 100%
Location: LB
@ ebucklew

Will you please provide your OS version and other programs you use to the forum so we can help sort your problem.

As per the advisory mentioned by Anthony Wells, I have scanned my computer and secunia didnít see any anomaly in it. Here a screenshot:

http://i56.tinypic.com/2iu3nr.jpg

As for the problem, you can visit the following site and see if it fixes your annoyances.

http://kb2.adobe.com/cps/839/cpsid_83952.html

Good luck.


--
HP pavilion DV6
Win 7 64bit - SP1
IE10 + MSSE4.3.215
Was this reply relevant?
+1
-0
Anthony Wells RE: secunia behind and preventing flash updates
Expert Contributor 17th Mar, 2011 14:35
Score: 2428
Posts: 3,316
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hi John ,

The OP is using the CSI , so I cannot help further as I do not use it .

AS for SA43751 it is displayed in the "secure browsing" module of the PSI and is a highly critical O-day exploit ; I do not know how this problem is advised to Secunia's CSI clients .

Take care

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+2
-0
gjjean RE: secunia behind and preventing flash updates
Contributor 17th Mar, 2011 15:13
Score: 192
Posts: 197
User Since: 9th Apr 2010
System Score: 100%
Location: LB
Hello Anthony

After a second read of the original post I realised that hi was scanning a (NETWORK), and Iím sorry.

I hope that someone from Secunia will clarify this matter (The Advisory).

@ ebucklew

Maybe your problem is due to another fault like MS update to SP1 or IE9 like in this site:

http://forums.adobe.com/thread/821734?tstart=0

Wish that will help.


--
HP pavilion DV6
Win 7 64bit - SP1
IE10 + MSSE4.3.215
Was this reply relevant?
+0
-0
lcorreia RE: secunia behind and preventing flash updates
Secunia Official 17th Mar, 2011 15:19
Score: 0
Posts: 50
User Since: 6th Oct 2009
System Score: N/A
Location: Copenhagen, DK
Hello

Thanks for your post.

In fact version 10.2.152.32 is not a security patch:
http://kb2.adobe.com/cps/890/cpsid_89050.html#main...

As such the Secunia CSI will not flag the previous version as being Insecure.

Version 10.2.152.26 is the latest secure version according to:
http://secunia.com/advisories/43267/

If having any further questions please contact our Customer Support Center, CSC@Secunia.com

Thanks,
/Luis
Secunia
ebucklew RE: secunia behind and preventing flash updates
Member 22nd Mar, 2011 19:33
Thanks everyone for your help! :)

IMHO....The fact that it is not a security patch...does not mean it should not patch it anyway. I did make due with pdq deploy to finish updating those pc's that are either outdated or not patched.

There was not problem with the wsus-secunia setup....it was just that secunia did not see it as a threat, therefore no update to be created. But there was an update that could be distributed.

But as I checked today....secunia has an update now and that is being distributed....so now everything is fine.
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability