| Author |
Topic: The Secunia Software Inspector has been updated, on Feb 6 |
Wiz Feinberg
From:
Mid-Michigan, USA
|
Posted 4 Feb 2008 8:27 am |
|
Secunia has just updated the detections used in their Software Inspector, to detect insecure versions of several commonly installed applications. It will also warn you about any missed WIndows Updates.
I just got my report from the Secunia Software Inspector and learned that Java has been updated to version 6.0.4.0, which I didn't know until now. I will be updating my Java VM and removing the previous, insecure version and you should do the same.
_________________
"Wiz" Feinberg, Moderator SGF Computers Forum
Security Consultant
Twitter: @Wizcrafts
Main web pages: Wiztunes Steel Guitar website | Wiz's Security Blog | My Webmaster Services | Wiz's Security Blog
Last edited by Wiz Feinberg on 6 Feb 2008 9:09 am; edited 1 time in total |
|
|
 |
Wiz Feinberg
From:
Mid-Michigan, USA
|
Posted 4 Feb 2008 8:59 am Updating your Java Virtual Machine
|
|
As I mentioned in my previous post, the Secunia Software Inspector revealed that my Java Virtual Machine needed to be updated. The correct procedure may not be obvious to everybody, so I'll spell it out for you.
First, run the Secunia Software Inspector, using the link in the previous post. It will show you what software on your computer needs to be updated and will provide clickable links to the correct download locations. If you need to update your Java VM, click the link to java.com/... where you will have the options to download the version of Java for various operating systems and browsers. If you only use one browser you will see a button offering you an online update. That will be your fasted method of getting the new JVM. After allowing the installation, which is signed by Sun Corporation, restart your browser and you'll be up to date.
However, if you use Firefox and Internet Explorer, and maybe Opera, you will need to select a manual download of the complete offline installer, weighing in at 15 Mb. Download it, the close all open browsers and run the installer, using administrator level privileges. When installation has completed, open both browsers and go to http://java.com/en and click the text link labeled "Do I have Java?" The landing page has a button to Verify your Java version. Use it on all browsers.
After you have successfully updated your Java VM, you must uninstall all previous versions, which are now insecure. Go to Control Panel > Add/Remove Programs and highlight any versions of the Java VM or "JRE" prior to the current version (6.0.4.0) and uninstall them. This includes any leftover version 5 VM's. You will not need to reboot. If you are running as a less privileged user you can switch users to an admin account to uninstall the old versions, then log off and back to your regular account.
The same technique applies to updating Flash and Shockwave, if you have older versions of those.
_________________
"Wiz" Feinberg, Moderator SGF Computers Forum
Security Consultant
Twitter: @Wizcrafts
Main web pages: Wiztunes Steel Guitar website | Wiz's Security Blog | My Webmaster Services | Wiz's Security Blog |
|
|
|
Bent Romnes
From:
London,Ontario, Canada
|
Posted 4 Feb 2008 3:23 pm
|
|
Hi Wiz,
I ran the scan and was told that I needed Flash and Java, which I dl'd and installed after uninstalling the old versions.
Then for the fun of it, I had Secunia scan my PC again, and it still detected both of the old plug-ins.
I double checked in Add/Remove Programs but they are not to be found there.
Is this just a Secunia glitch or something? By the way I re-started the system before the second scan.
Thanks Wiz, it's a great little website.
Bent |
|
|
|
Wiz Feinberg
From:
Mid-Michigan, USA
|
|
|
|
Bent Romnes
From:
London,Ontario, Canada
|
Posted 4 Feb 2008 7:24 pm
|
|
This is what Secunia found. In my c/windows.system32/flash folder there are some of what can be leftovers and new stuff.
There are: Flashplayer.xpt, NPSWF32.dll This has the new version number so I should leave it, right?
uninstall_plugin, flash.ocx, install (text document),
NPSWF32_flashUtil(it also relates to version 9.x
So except for the 2 that relate to the new flash version, can I delete the rest to see if that works? |
|
|
|
Wiz Feinberg
From:
Mid-Michigan, USA
|
Posted 4 Feb 2008 7:34 pm
|
|
Bent;
Set your folder View options to Details, so you can see the dates. The new files will have today's or yesterdays date, while the others will be from 2007. Delete the old ones, leaving just todays updates. Check at the Flash and Java sites to make sure your plug-ins are still working afterward.
_________________
"Wiz" Feinberg, Moderator SGF Computers Forum
Security Consultant
Twitter: @Wizcrafts
Main web pages: Wiztunes Steel Guitar website | Wiz's Security Blog | My Webmaster Services | Wiz's Security Blog |
|
|
|
Bent Romnes
From:
London,Ontario, Canada
|
Posted 5 Feb 2008 8:03 am
|
|
Wiz,
Persistence paid off, but man was that a dog to install/uninstall. I must have deleted some files I shouldn't have. Had a hard time making Java work. It took a complete wipe-out of all the old stuff and then installed the new version, uninstall it and re-install.
I must have screwed up on a grand scale. Finally, everything seems back to normal. I hope this Java version lasts a while...
Thanks for your help Wiz.
Bent |
|
|
|
Steinar Gregertsen
From:
Arendal, Norway, R.I.P.
|
Posted 5 Feb 2008 8:19 am
|
|
Firefox hangs on that site and I have to do a "Ctrl+alt+del" to get out of there......
Steinar
_________________
"Play to express, not to impress"
Website - YouTube |
|
|
|
Bent Romnes
From:
London,Ontario, Canada
|
Posted 5 Feb 2008 8:43 am
|
|
Steinar,
In what way does it hang?
In my case, it seemed to hang when I had it check to see if I had Java installed.But it just took it's time checking.
Also, make sure you do what Wiz mentioned: With Firefox you need to do a manual download of Java.
In my case, Secunia and Firefox handled this automatically and switched me over to manual download.
Don't know if this addresses your problem... |
|
|
|
Steinar Gregertsen
From:
Arendal, Norway, R.I.P.
|
Posted 5 Feb 2008 8:57 am
|
|
It says "Firefox does not respond" (roughly - I have the Norwegian version) and the progress indicator just keeps spinning.
Steinar
_________________
"Play to express, not to impress"
Website - YouTube |
|
|
|
Bent Romnes
From:
London,Ontario, Canada
|
Posted 5 Feb 2008 9:51 am
|
|
| Steinar,what screen are you in exactly, when you get that message? |
|
|
|
Steinar Gregertsen
From:
Arendal, Norway, R.I.P.
|
Posted 5 Feb 2008 10:08 am
|
|
I follow the link in Wiz's first post.
Steinar
_________________
"Play to express, not to impress"
Website - YouTube |
|
|
|
Bent Romnes
From:
London,Ontario, Canada
|
Posted 5 Feb 2008 12:25 pm
|
|
In that case, I am afraid I can't help you because it hasn't happened to me. Just to be sure...Are you getting the automatic updates from Firefox?
Also, is your windows set so that Secunia can be allowed to scan your system?
Your best bet is to get the answers from Wiz.
Sorry I couldn't help.
Bent |
|
|
|
Steinar Gregertsen
From:
Arendal, Norway, R.I.P.
|
Posted 5 Feb 2008 12:47 pm
|
|
| Bent Romnes wrote: |
Sorry I couldn't help.
Bent |
No problem - thanks for trying! 
Steinar
_________________
"Play to express, not to impress"
Website - YouTube |
|
|
|
Wiz Feinberg
From:
Mid-Michigan, USA
|
|
|
|
Steinar Gregertsen
From:
Arendal, Norway, R.I.P.
|
Posted 5 Feb 2008 2:21 pm
|
|
| Wiz Feinberg wrote: |
| The Wiz Is Here. |
Well, when I follow the link in your first post Firefox freeze up, and when/if I click anywhere I get the message "Firefox does not respond" leaving me with no other option than "Ctrl+alt+del" to get out of there..
Steinar
_________________
"Play to express, not to impress"
Website - YouTube |
|
|
|
Steinar Gregertsen
From:
Arendal, Norway, R.I.P.
|
Posted 5 Feb 2008 2:25 pm
|
|
Hm..... works fine in IE7, checked Firefox and I have enabled Java. Strange. In IE7 I can see the "Start now" button, it is not visible in FF..
Steinar
_________________
"Play to express, not to impress"
Website - YouTube |
|
|
|
Wiz Feinberg
From:
Mid-Michigan, USA
|
Posted 5 Feb 2008 3:01 pm
|
|
| Steinar Gregertsen wrote: |
Hm..... works fine in IE7, checked Firefox and I have enabled Java. Strange. In IE7 I can see the "Start now" button, it is not visible in FF..
Steinar |
Try re-downloading and reinstalling Firefox, or...disable some Add-on extensions. They are sometimes notorious for causing problems.
_________________
"Wiz" Feinberg, Moderator SGF Computers Forum
Security Consultant
Twitter: @Wizcrafts
Main web pages: Wiztunes Steel Guitar website | Wiz's Security Blog | My Webmaster Services | Wiz's Security Blog |
|
|
|
Steinar Gregertsen
From:
Arendal, Norway, R.I.P.
|
Posted 5 Feb 2008 5:08 pm
|
|
Tried both, didn't help. No problem in IE7 or Opera, so it's obviously an exclusive FF problem.
Does it really matter,- can't I just launch the test via IE7?
Steinar
_________________
"Play to express, not to impress"
Website - YouTube |
|
|
|
Wiz Feinberg
From:
Mid-Michigan, USA
|
Posted 5 Feb 2008 6:14 pm
|
|
| Steinar Gregertsen wrote: |
Tried both, didn't help. No problem in IE7 or Opera, so it's obviously an exclusive FF problem.
Does it really matter,- can't I just launch the test via IE7?
Steinar |
Yes, you can use either of those browsers. However, there is something drastically wrong with your Firefox installation, that needs fixing. I use Firefox exclusively, to browse and to run the Secunia Software Inspector. I can tell you that the Software Inspector uses Java Virtual Machines to do its job. If the Java plug-in for Firefox is far out of date, or damaged, the inspector cannot run in Firefox.
_________________
"Wiz" Feinberg, Moderator SGF Computers Forum
Security Consultant
Twitter: @Wizcrafts
Main web pages: Wiztunes Steel Guitar website | Wiz's Security Blog | My Webmaster Services | Wiz's Security Blog |
|
|
|
Steinar Gregertsen
From:
Arendal, Norway, R.I.P.
|
Posted 5 Feb 2008 6:55 pm
|
|
Can it be a Firefox/Vista Business hiccup?
_________________
"Play to express, not to impress"
Website - YouTube |
|
|
|
Wiz Feinberg
From:
Mid-Michigan, USA
|
|
|
|
Wiz Feinberg
From:
Mid-Michigan, USA
|
Posted 6 Feb 2008 9:07 am Secunia Software Inspector updated again, on Feb 6
|
|
I just got notice that the Software Inspector was updated today, this time to detect out-dated Adobe Acrobat Reader installations. The Acrobat reader had some serious vulnerabilities, which have just been patched, by Adobe. If you run the Secunia Software Inspector it will tell you if your version needs updating and will provide you with a link to the download page.
FYI: The new version of Adobe Reader is 8.1.2.x
You can also update Adobe Reader from within the open application, via Help > Check for Updates. This update requires admin privileges.
_________________
"Wiz" Feinberg, Moderator SGF Computers Forum
Security Consultant
Twitter: @Wizcrafts
Main web pages: Wiztunes Steel Guitar website | Wiz's Security Blog | My Webmaster Services | Wiz's Security Blog |
|
|
|
Bent Romnes
From:
London,Ontario, Canada
|
Posted 6 Feb 2008 9:41 am
|
|
Wiz, I did it. Secunia sent me an email and away i went
Adobe reader no prob
Skype no prob
But that pesky Java...
On the previous check, I finally got rid of teh old one and installed the new one.
Now, Secunia is telling me I still have the old, insecure version.
Would it be cause for concern or can I just ignore it, since I know I have the correct one? |
|
|
|
Wiz Feinberg
From:
Mid-Michigan, USA
|
Posted 6 Feb 2008 9:45 am
|
|
| Bent Romnes wrote: |
Wiz, I did it. Secunia sent me an email and away i went
Adobe reader no prob
Skype no prob
But that pesky Java...
On the previous check, I finally got rid of teh old one and installed the new one.
Now, Secunia is telling me I still have the old, insecure version.
Would it be cause for concern or can I just ignore it, since I know I have the correct one? |
Bent;
For the security of your PC you should uninstall all previous versions of Java, which could be targeted by malware seeking a way in. This can be done after the newest version is installed. Eventually, Sun will see to it that as the new version of Java is installed - the old ones will be uninstalled simultaneously. However, until that fine days arrives, we are going to have to remove them manually (Via Control Panel > Add/Remove Programs).
_________________
"Wiz" Feinberg, Moderator SGF Computers Forum
Security Consultant
Twitter: @Wizcrafts
Main web pages: Wiztunes Steel Guitar website | Wiz's Security Blog | My Webmaster Services | Wiz's Security Blog |
|
|
|
