Vulnerability Scan - confused?

melbury

Just ran this scan (Kaspersky) and it is showing three vulnerabilities under "vulnerable applications" that it recommended to be fixed, but it doesn't explain how to fix them.

They are:

Google Chrome
ID: SA52983

Adobe Flashplayer
ID: SA52391

Adobe Flashplayer
ID: SA52391 (same as above?)

It gives the option of "details" or "add to exclusions" but I honestly don't understand either:o

I have run a full scan and a full malwarebytes scan but they are not picking up anything.

Does anyone understand what this is and how I can fix it?

Many thanks.

waddler_8

It's reporting a version of flash player integrated into chrome could be exploited by malicious code to aid in the download and installation of malware - It doesn't mean you are infected in any way.

Ensure you update chrome.

http://support.google.com/chrome/bin/answer.py?hl=en&answer=95414

http://googlechromereleases.blogspot.dk/2013/04/stable-channel-update.html

http://www.securelist.com/en/advisories/52983

http://www.adobe.com/support/security/bulletins/apsb13-11.html

.

JJ_Egan

Just check the relevant apps for an update . Otherwise as they are known apps ignore .

jje

melbury

Many thanks for replies.

I can't find exactly which version of Adobe Reader X I have, but must say I haven't had an update message for ages.

Is there an easy way of checking for Adobe updates, or should I uninstall it and then put it on again?

waddler_8

It's adobe flash player - not reader.

http://helpx.adobe.com/flash-player/kb/find-version-flash-player.html (2.)

melbury

waddler_8 wrote: »

It's adobe flash player - not reader.

http://helpx.adobe.com/flash-player/kb/find-version-flash-player.html (2.)

Many thanks.

When I click on the link I can see a red ball, which I assume is the film they are referring to and so presumably that means I do have flash player installed.

The box in step 2 that contains information in red, does that info relate specifically to my computer, or is it what my computer should say? Is this link able to determine the version that is actually installed?

I have checked Chrome and that says it is up to date, so I can't understand why I am getting these vulnerability messages:(

waddler_8

melbury wrote: »

The box in step 2 that contains information in red, does that info relate specifically to my computer...

Yes. that pertains to the version you have installed.

It should read 11.7.700.169

melbury wrote: »

I have checked Chrome and that says it is up to date, so I can't understand why I am getting these vulnerability messages

Download SecurityCheck and save it to your Desktop.

Link

• Double click SecurityCheck to run it (XP), or right click & choose "Run as Administrator" (Vista, Win7)
• Follow the on-screen instructions.
• When finished, a Notepad document should open called checkup.txt
• Post the contents of that here.

melbury

waddler_8 wrote: »

Yes. that pertains to the version you have installed.

It should read 11.7.700.169



Download SecurityCheck and save it to your Desktop.

Link

• Double click SecurityCheck to run it (XP), or right click & choose "Run as Administrator" (Vista, Win7)
• Follow the on-screen instructions.
• When finished, a Notepad document should open called checkup.txt
• Post the contents of that here.

Kaspersky doesn't like this and says not to download it????

waddler_8

It's perfectly safe - the developer (Chris Fistonich - aka screen317) works for Malwarebytes.

http://forums.malwarebytes.org/index.php?showuser=1886

Otherwise you may be able to check the version of flash player installed by accessing the Local Settings Manager through the Windows control panel.

Click Start > Settings > Control Panel > Flash Player > Advanced tab > Check Now

.

melbury

Thanks, have done this and it says:

Plug-in version 11.6.602.180

However, on the earlier link it showed the latest version as being on my computer 11.7.700.169, so am a bit confused:(

I don't have Javascript so does that make a difference?

Jivesinger

This link tells you which version of Flash player you're running:
http://www.adobe.com/software/flash/about/

Bear in mind that if you use more than one browser (eg. Chrome and Internet Explorer) they can both have their own separate Flash Player installations, which can be on different versions.

So I suggest you check this link on every browser on your PC.

Edit: just seen your latest post. I think the version confusion may be because you have more than one browser and therefore more than one version of Flash installed.