Secunia Logo  


Secunia PSI WorldMap
 
Forum Thread: KB956357 is installed, yet PSI claims it is insecure
You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Problems and Questions Regarding 3rd Party Programs

Relating to this vendor:
Microsoft
And, this specific program:
Microsoft Word 2003

xerces8
KB956357 is installed, yet PSI claims it is insecure
by xerces8 on 10th Dec, 2008 15:40
Posts: 13

User Since: 27th Oct, 2008

Secunia System Score: N/A

Location: N/A
PSI claims MS Word 2003 is vulnerable, reference is http://secunia.com/advisories/30285/

But after downloading the solution (http://www.microsoft.com/downloads/details.aspx?Fa...)
the status is same, PSI still claims vulnerability.

The installation path is c:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE , so it is now a backup or else.

MUff1N
RE: KB956357 is installed, yet PSI claims it is insecure
by MUff1N on 10th Dec, 2008 16:09, last edited on 10th Dec, 2008 16:09
Posts: 10

User Since: 4th Dec, 2008

Secunia System Score: N/A

Location: N/A
I've got the exact same problem, so you're not alone on this.
I'm not sure if this is an MS problem, or it's a PSI problem but the update was successfully installed yet PSI says it's insecure on my machine as well & this ISN'T a backup location either.
I've "tried" to resolve this problem with no luck & I'm about ready to uninstall PSI because of this...really irritating. :-|

KingTutt
RE: KB956357 is installed, yet PSI claims it is insecure
by KingTutt on 10th Dec, 2008 16:27
Posts: 1

User Since: 11th Sep, 2008

Secunia System Score: N/A

Location: N/A
I've got this problem, too.
First I installed the patch using windows update. AS PSI blamed the program still as insecure I downloaded the file again and installed it again manually. But it is still blamed by PSI after that.
It seems to be a BUG in PSI database. Probably the entry in the PSI database, which is checked to see if a program version is up to date, is simply wrong.

EagleAl
RE: KB956357 is installed, yet PSI claims it is insecure
by EagleAl on 10th Dec, 2008 16:39, last edited on 10th Dec, 2008 16:39
Posts: 12

User Since: 24th Nov, 2008

Secunia System Score: N/A

Location: N/A
on 10th Dec, 2008 16:09, MUff1N wrote:
I've got the exact same problem, so you're not alone on this.
I'm not sure if this is an MS problem, or it's a PSI problem but the update was successfully installed yet PSI says it's insecure on my machine as well & this ISN'T a backup location either.
I've "tried" to resolve this problem with no luck & I'm about ready to uninstall PSI because of this...really irritating. :-|


I've got the same problem, too. Gotta admit though: I've been using PSI for quite some time now, and this is the first 'glitch' I've ever recalled. I'm not gonna throw the baby out with the bathwater because of this. I mean, c'mon, PSI has a pretty good track record im my experience with it. I'm sure they'll issue some sort of fix for this soon.

MUff1N
RE: KB956357 is installed, yet PSI claims it is insecure
by MUff1N on 10th Dec, 2008 17:19, last edited on 10th Dec, 2008 17:19
Posts: 10

User Since: 4th Dec, 2008

Secunia System Score: N/A

Location: N/A
OK, if figured out what the problem is here...
It's PSI's Database being incorrect on the version.
PSI states the insecure version for MS Word is 11.0.8237.0 when in fact this is the patched version it is updated to!!!
The installer package version is 11.0.8237.0 for the update patch.
So if you are getting this message don't worry about it as MS word is patched if you got v11.0.8237.0 installed OK ;)

MUff1N
RE: KB956357 is installed, yet PSI claims it is insecure
by MUff1N on 10th Dec, 2008 17:19, last edited on 10th Dec, 2008 17:19
Posts: 10

User Since: 4th Dec, 2008

Secunia System Score: N/A

Location: N/A
Oops...sorry about the double post, didn't mean to do that.

EagleAl
RE: KB956357 is installed, yet PSI claims it is insecure
by EagleAl on 10th Dec, 2008 17:30
Posts: 12

User Since: 24th Nov, 2008

Secunia System Score: N/A

Location: N/A
on 10th Dec, 2008 17:19, MUff1N wrote:
OK, if figured out what the problem is here...
It's PSI's Database being incorrect on the version.
PSI states the insecure version for MS Word is 11.0.8237.0 when in fact this is the patched version it is updated to!!!
The installer package version is 11.0.8237.0 for the update patch.
So if you are getting this message don't worry about it as MS word is patched if you got v11.0.8237.0 installed OK ;)


Nice detective work!

pawprivate
RE: KB956357 is installed, yet PSI claims it is insecure
by pawprivate on 10th Dec, 2008 19:47
Posts: 1

User Since: 30th Nov, 2008

Secunia System Score: N/A

Location: N/A
Thanks to you all!

I suspected that if I checked this forum - I would eventually get an answer.

Zman
RE: KB956357 is installed, yet PSI claims it is insecure
by Zman on 10th Dec, 2008 20:09
Posts: 3

User Since: 21st Feb, 2008

Secunia System Score: N/A

Location: N/A
Same problem here, but isn't it interesting when I run the Secunis on-line software inspector, I get all green checks!!

poutnikl
RE: KB956357 is installed, yet PSI claims it is insecure
by poutnikl on 10th Dec, 2008 20:46
Posts: 33

User Since: 8th May, 2008

Secunia System Score: N/A

Location: N/A
Similar problem occurs for other apps too, e.g. VLC player.

moHansen
RE: KB956357 is installed, yet PSI claims it is insecure
by moHansen on 10th Dec, 2008 20:50
Posts: 2

User Since: 23rd Jul, 2008

Secunia System Score: N/A

Location: N/A
For me, its the same. I also have installed kB956357, and yet PSI still claiming its - microsoft word 2003 - i sinsecure! I have tryed several times to reinstall the update, but Microsoft just say - all is OK. You have it installed allready...
mo-od

evilbobthebob
RE: KB956357 is installed, yet PSI claims it is insecure
by evilbobthebob on 10th Dec, 2008 21:02
Posts: 1

User Since: 3rd Dec, 2008

Secunia System Score: N/A

Location: N/A
Same problem...Guess we'll have to leave it until the database is updated properly.

Sagitar
RE: KB956357 is installed, yet PSI claims it is insecure
by Sagitar on 10th Dec, 2008 21:15
Posts: 5

User Since: 25th Sep, 2008

Secunia System Score: N/A

Location: N/A
I have a similar problem with Word in Office 2000. After reading this thread I will investigate in more detail.

Slinky
RE: KB956357 is installed, yet PSI claims it is insecure
by Slinky on 10th Dec, 2008 23:51
Posts: 7

User Since: 17th Feb, 2008

Secunia System Score: 100%

Location: Citrus Springs, US
Just completed an online scan then a manual scan thru PSI and the MS insecure showed that it had been installed and patched. I'm now showing no insecure programs. Everyone might want to try this approach.

poutnikl
RE: KB956357 is installed, yet PSI claims it is insecure
by poutnikl on 11th Dec, 2008 09:40
Posts: 33

User Since: 8th May, 2008

Secunia System Score: N/A

Location: N/A
Now my Word 2003 is OK after today new PSI manual scan, without any further Office update inbetween. So Secunia updated PSI database.

thesun
RE: KB956357 is installed, yet PSI claims it is insecure
by thesun on 14th Dec, 2008 04:24
Posts: 2

User Since: 9th Dec, 2008

Secunia System Score: N/A

Location: N/A
guys. just re-scan it and it should be listed as safe. just a temporary bug