Secunia results - unsure what to do about results

17 years ago

I ran Secunia. The quick scan showed everything up-to-date. Then I did a more thorough scan and it found several out-of-date vulnerability versions - all of which seem I think are remnants of earlier versions that still exist on my computer.

Here's the list of what I have (just for the programs I'm unsure about where secunia found insecure programs). The ones below were the secure programs it found:

-Microsoft Windows XP home edition Service pack 2

-Adobe REader 8/x 8.1.2.86

-Apple Quicktime 7.x 7.55.90.70

-ITunes 8.x8.0.1.11

- Apple QuickTime 7.x 7.55.90.70

-Adobe Flash Player 10.x 10.0.12.36

-Adobe Flash Player 9.x 9.0.124.0

-Sun Java JRE 1.6.x / 6.x 6.0.70.6 (this is listed 4 times times - all with check marks - do I have extra copies that I should delete? Or are there three for the three browsers I use and something else - Firefox, IE, AOL?)

And here are insecure versions it found and the locations where they are:

-Adobe Flash Player 9.x 9.0.47.0 (Installed on Your System in: C:\i386\Flash9d.ocx). It recommends 9.0.124.0 (which I have and is in the list of secure programs)

-Apple QuickTime 7.x 7.1.6.20 (installed in C:\i386\QuickTime.qts)

- Macromedia Flash Player 6.x 6.0.80.0

(The detected version installed on your system is 6.0.80.0, however, the latest patched version released by the vendor, fixing one or more vulnerabilities, is 6.0.88.0.

Update Instructions:

Update to version 6.0.88.0 or 9.0.47.0. (now I don't understand this recommendation for 9.0.47.0 since that was listed as insecure just 2 lines up - or is Adobe Flash Player and Macromedia Flash Player different)? Anyway this insecure 6.0.80.0 version is located in C:\Program Files\Common Files\AOL\Flasha.ocx)

- Macromedia Flash Player 6.x 6.0.79.0 (recommends that I Update to version 6.0.88.0 or 9.0.47.0. - so same question as above - why recommend 9.0.47.0 if that was found to be insecure). This one is located in C:\Program Files\EarthLink Setup\windows\access\program files\EarthLink TotalAccess\Flash.ocx (I don't use earthlink and never did - must have been pre-loaded on computer)

- Macromedia Flash Player 7.x 7.0.19.0 (recommends that I get the latest patched version released by the vendor, fixing one or more vulnerabilities, is 9.0.124.0. Again, I have this in other locations). This particular file is located in C:\i386\Flash.ocx.

- Sun Java JRE 1.5.x / 5.x 5.0.60.5 (recommens the latest patched version released by the vendor, fixing one or more vulnerabilities, is 5.0.160.2.) Located in C:\i386\java.exe. Now do I need this at all since I seem to have version 6 update 7 already?

Should I just go to the locations where these older versions are and delete them? Or do I need to update the versions for those locations as well?

Hopefully that is clear. Sorry for all the detail, but I figured it was necessary to know whether Secunia is turning up old program files that I should delete - or whether those files are running in some sectors of my computer and need updating there as well.

Thank you.

Lynn.

Sort by:Oldest

Comments (6)

marooma
17 years ago
last modified: 11 years ago
Lynn,

Dell computers uses the c:\i386 for Windows Setup files. The ones showing outdated can be ignored as they aren't in use.
You should be able to remove the Earthlink setup files in the c:\Program Files folder by going to control panel, add/remove programs, add/remove windows components. It should be labeled under Online Services.
I haven't been able to find anything about the c:\Program Files\common files\AOL\flasha.ocx yet but I don't have it on my computer with AOL 7.0.
Macromedia and Adobe flash are the same thing. Adobe bought Macromedia so you will see both names on your computer.
HTH.

Terry
ravencajun Zone 8b TX
17 years ago
last modified: 11 years ago
Lynn you do need to get the flash update for each type of browser you have, I have firefox and IE so I had to get one for each USING that browser to get it and download it, when you go to the flash update page it will have an option that says are you using a different operating system or browser click there to select the one you are using at that time and install it for that one, then go back using the other browser etc.
Related Discussions
Seeded lawn in August, have soil test results, what do I do now?
Q
Comments (2)
Head on over to your local Clemson Extension office and have a talk with your agent. Don't worry about your analysis being old -- especially if you haven't done anything to your soil. Other Key questions: What type of grasses are you trying to grow -- Centipede takes a totally different care regime than Fescue or Bahia... What is your soil PH What soil type do you have? Now.... Looking at my recent analysis -- those are all Lbs/Acre -- not PPM measurements... P looks really low K looks medium low Ca should be plenty Mg is probably OK My guess is that you are going to be using some sort of balanced "premium" slow release fertilizer with minor elements -- like a 10-10-10 slow release or a 17-17-17 slow release... But It is going to be totally dependent on the type of grass and your soil type. Thanks
...See More
Soil Test Results - what to do?
Q
Comments (11)
Driven through St. Tammany Parish many, many times. You have a very similar geography (low, flat and wet) as where I am, 50 miles south of Houston. My guess would be that you're ~ 25 feet above sea level? However, from your soil test results, your soils are about as opposite of mine as can be. Your description of your soil is very consistent with the Stough series description. It is noted as being very strongly acidic, and below about 8" indicates signs of frequent or typical anaerobic conditions, probably from the high natural water levels. You have a couple of distinct issues, one being drainage, the other being the soil test results. On drainage, given your geography and the natural soil water levels, there probably isn't much you can do to improve soil drainage via percolation directly - the underlying soil is what it is. If you pick a spot for a bed an amend it you can improve the local drainage, until the surrounding and underlying soil stops it , then your improved bed becomes the "bathtub" of sorts. You may be able to help your situation out a bit by re-evaluating the lot grading and surface water flow in high rainfall periods. For a gardening situation your better bet would be a raised bed, with enough depth that the underlying poor drainage won't be a problem. Doing that you can construct the soil in the bed to be what best suits your needs. As for your soil test, I'm curious why you chose Dr. Good Earth rather than the LSU Ag Center lab? Did the sample come from just the bed area, or is it representative of a broader view of your landscape? If the results are representative, the very low pH helps explain the low Ca and Mg levels. My thinking is focus on correcting the pH using dolomitic limestone, which should take care of both Ca and Mg, then retest. The amount is dependent upon soil type, and this is where the LSU AG Center and the local extension service can be a great help with a specific recommendation, but it will probably be something like 100 lbs per thousand square feet. With the pH corrected, the P and K levels can be supplemented via common fertilizer options, or using organic amendments. Of course if you build a raised bed, that will likely be different soil. With soil like that it would probably be worthwhile to test the soil broadly, if you haven't already done so, and working to get the pH toward ~ 6.5. For any future tests I would encourage to use the LSU labs, as they have local knowledge, can guide you on appropriate amendments and amounts to use. I would also encourage you to add the micronutrient test in the future. I suggest that because the Stough series description notes a lot of variations in both iron (Fe) and manganese (Mn) concentrations. Here is a link that might be useful: LSU AgCenter Soil Testing This post was edited by TXEB on Thu, Aug 1, 13 at 20:52
...See More
Soil test results, what do they mean?
Q
Comments (16)
Bob, yes, I agree I need to leach the soil. In my research it seems that for the levels that I have it could take 3 years to get it back to normal levels. But I'm not sure that was in sand where it happens faster. Zackey, I agree. I have tried a couple of emails. I think I need to try to get someone on the phone if I can get past the menus. Vegtech, I hear you about the local extension agency. I called and they directed me to a book about growing roses. I have been studying growing roses in S. Fl. for 13 years. Not exactly what I needed.
...See More
Secunia Results - do I need to update Safari
Q
Comments (2)
if you do not use safari which is an apple browser then get rid of it, likely it was on some other update you did from apple that it had safari checked and you missed un checking it in the install process they pull that often with itunes and safari. generally if secunia tells you there are newer updates they are good to do for security reasons. If you have the programs on your pc then you should do the updates because vulnerabilities can be found in any kind of program. There is a big one right now in Adobe which does not yet have a patch out to fix it but they will hopefully have one soon, there are updates now for flash so those should be done for all browsers. I just did an update for quicktime today in fact. Everyone really needs to be extremely cautious of PDF files right now till this adobe patch comes out, I would not open any in the browser but instead download to disc and scan them well prior to opening them.
...See More
lynnalexandra
Original Author
17 years ago
last modified: 11 years ago
Thanks Terry and Ravencajun. I have some follow-up questions.

- for the flash update page, where do I find that page? is it the link I get with secunia scan results? If I go to that link (the secunia results are on my firefox browser now), can I also get the IE and AOL versions there (and will they install in the proper place) - OR - do I have to go through each browser to the update page and download the flash update from within each browser?

- For the insecure older versions of files located in the dell setup files c:\i386 - can I delete them? they may not be doing any harm, but if I don't need them, I'd rather get rid of them. that way when I do this scan in the future, I won't get results that show insecure files - or maybe if I do this way in the future and I forget what that location means, it will be nice to not have to deal with it.

- do I need all 4 versions of Java version 6, update 7

- for the flashplayer in AOL software, it is only suggesting updating to version 6.0.88.0 or 9.0.47.0 (and this 9.0.47.0 was found to be insecure in it's other locations). Could it be that AOL needs an earlier version of flash? perhaps the newer version 9.0.124.0 isn't compatible with AOL?

Thanks.
Lynn.
marooma
17 years ago
last modified: 11 years ago
Lynn,

AOL uses the same one that is downloaded for Internet Explorer. You go to the same webpage and the webpage "detects" your browser and gives you the one you need.
Normally when I have files that I'm not 100 percent sure I can delete, I rename them, or make a temporary folder and drag them to it. Then if I don't have any problems over a period of time, I delete them.
I did find two posts today that said it was safe to delete the flasha.ocx in the c:\Program Files\Common Files\AOL folder.
Someone else will have to answer the other questions. As far as my system, one of the first things I do is remove the Java altogether. I have found little call for it and most websites are moving away from Java and goint to Flash exclusively.

Terry
ravencajun Zone 8b TX
17 years ago
last modified: 11 years ago
this page should give you all the flash links you need including the update page.
Flash Player update

and the link to Corrines blog article about it with links also
Adobe Flash: Critical Update
On-line Settings Manager, this shows how to set your flash manager

I would not touch anything in the i386 folder.

you have to go to the flash update page with each individual browser IE and Firefox for sure and get the flash version for that browser and install it from that browser. This is a screen shot of how it looks, see where it says Different operating system or browser? right under where it says that one is for IE? that is where you click to get the different one like for firefox.

I know nothing about AOL can not help you with any of that sorry.
ravencajun Zone 8b TX
17 years ago
last modified: 11 years ago
I forgot one link you may want this is the one you can go to that will show you exactly what version you have installed.
http://www.adobe.com/shockwave/welcome/

Secunia results - unsure what to do about results

Comments (6)

marooma

ravencajun Zone 8b TX

Related Discussions

lynnalexandra
Original Author

marooma

ravencajun Zone 8b TX

ravencajun Zone 8b TX

COMPANY

BUSINESS SERVICES

GET HELP

CONNECT WITH US

Secunia results - unsure what to do about results

Comments (6)

marooma

ravencajun Zone 8b TX

Related Discussions

lynnalexandraOriginal Author

marooma

ravencajun Zone 8b TX

ravencajun Zone 8b TX

COMPANY

BUSINESS SERVICES

GET HELP

CONNECT WITH US

lynnalexandra
Original Author