Forum Thread: Must Silverlight v.4.0.60531.0 be removed

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
JL Krol Must Silverlight v.4.0.60531.0 be removed
Member 20th Dec, 2011 16:54
Ranking: 4
Posts: 61
User Since: 10th Dec, 2008
System Score: N/A
Location: US
Was notified that Silverlight v.4.0.60531.0 is an "end of life: program. Since my laptop's OS cannot use Microsoft.NET Framework v.4.0x, what do I do? Don't want my Secunia PSI score affected by this program.

OPTIONS:
1) Continue to use the Silverlight version I have, or
2) Remove it from my computer.

Thanks for your input.
JL Krol
Toshiba Satellite A105-S4074 with 2 GB RAM
XP Media Center Edition / SP3

Maurice Joyce RE: Must Silverlight v.4.0.60531.0 be removed
Handling Contributor 20th Dec, 2011 17:39
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
I have cut & pasted this from another post I created.

16th Dec, 2011 10:39

Silverlight is managed by Microsoft. As of last night they are still offering Version 4 via Windows Update because, if fully patched, it is not vulnerable.

Secunia have declared it End Of Life & supplied I link to the Silverlight site to update as & when which in line with their stance here:
http://secunia.com/products/consumer/PSI/faq/#q5

The Secunia EoL declaration does not appear to be in line with Microsoft's Lifecycle Policy here:
http://support.microsoft.com/gp/lifean45#sl4

Only Secunia Support can answer why there is a sudden "urge to purge" version 4 when Microsoft are still offering it via Windows Update. This is why U have not been "officially" notified by Windows Update - no doubt it will follow in due course.

Secunia have still not clarified their decision on declaring it End of Life as U will see here:
http://secunia.com/community/forum/thread/show/118...

U can safely create an ignore rule if U do not wish to update direct from here:

http://www.microsoft.com/silverlight/





--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+1
-0
JL Krol RE: Must Silverlight v.4.0.60531.0 be removed
Member 20th Dec, 2011 18:20
Score: 4
Posts: 61
User Since: 10th Dec 2008
System Score: N/A
Location: US
Thanks, Maurice. Yes, it is important that Secunia PSI addresses the matter of subscribers being able to maintain an accurate assessment of their security. The end-of-life program I use is not a security threat to XP Media Center/SP3---only a threat to other OS versions. Microsoft needs to be more responsive in a timely fashion to Secunia.

JL Krol
Was this reply relevant?
+0
-0
Maurice Joyce RE: Must Silverlight v.4.0.60531.0 be removed
Handling Contributor 20th Dec, 2011 19:35
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 20th Dec, 2011 19:36


--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+1
-0
This user no longer exists RE: Must Silverlight v.4.0.60531.0 be removed
Member 21st Dec, 2011 09:00
Hi,

The Silverlight 4.x product should not be shown as insecure as per the information provided by the vendor, and if you run a full rescan now this should not be indicated by the results.

Hope this helps.
Was this reply relevant?
+0
-0
Maurice Joyce RE: Must Silverlight v.4.0.60531.0 be removed
Handling Contributor 21st Dec, 2011 11:30
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 21st Dec, 2011 12:33
Unfortunately version 4..0.60831.0 has now been complelety removed from the scanning process.

Two full rescans on my XP SP3 & Windows 7 SP1 32 Bit test PC's it indicate I have not got Silverlight installed on either which I have.

Have U now stopped tracking version 4?

I full PSI rescan on my main Windows 7 SP 64Bit Platform reveals I have version 5.0.60401.0 installed which is correct.

EDIT:
Perhaps I should point out I use PSI versions 1.5.0.2, 2.0.0.3003 & 2.0.0.4003 for these tests.

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
This user no longer exists RE: Must Silverlight v.4.0.60531.0 be removed
Member 21st Dec, 2011 14:57
Hi,

Are you certain the program was not automatically removed when you installed 5.x?
Was this reply relevant?
+0
-0
Maurice Joyce RE: Must Silverlight v.4.0.60531.0 be removed
Handling Contributor 21st Dec, 2011 15:49
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 21st Dec, 2011 15:58
Not exactly sure what U mean.

I have done a clean install of version 4 direct from Windows Update.

Since the Secunia change version 4 is no longer scanned & therefore does not show in the Scan Result page as patched.

EDIT:

I have just rescanned my test PC which only has version 4 installed & can confirm that have a full PSI scan it is not showing in the Scan Result page as patched.

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+1
-0
This user no longer exists RE: Must Silverlight v.4.0.60531.0 be removed
Secunia Official 21st Dec, 2011 16:28
Last edited on 21st Dec, 2011 16:29
JL Krol RE: Must Silverlight v.4.0.60531.0 be removed
Member 21st Dec, 2011 16:49
Score: 4
Posts: 61
User Since: 10th Dec 2008
System Score: N/A
Location: US
Thank you everyone for your input. As stated in my initial post, my OS cannot use Microsoft.NET Framework v.4, which I've been told is needed for Silverlight v.5x. My laptop has v.4.0.60531.0 installed (never was uninstalled).

I just rescanned with PSI like some of you stated, and my version of Silverlight is no longer being detected by PSI as "end-of life," but says "PATCHED." (Hurrah!) WHY did it ever show up in Secunia PSI as "end of life?"

Thus, my issue has been resolved, and this case is closed. Thank you very much for all your help. HAPPY HOLIDAYS EVERYONE!

JL Krol
Toshiba Satellite A105-S4074 (2 GB RAM, 32 bit)
XP Media Center Edition / SP3
USA
Was this reply relevant?
+0
-0
joenamherst RE: Must Silverlight v.4.0.60531.0 be removed
Member 21st Dec, 2011 17:30
Score: 0
Posts: 3
User Since: 30th Nov 2009
System Score: N/A
Location: US
What is Silverlight and why do I need it?
Microsoft says that Silverlight 5 is not compatible with my 64 bit system. However I have Silverlight 4 .

--
Joe
Was this reply relevant?
+0
-0
Maurice Joyce RE: Must Silverlight v.4.0.60531.0 be removed
Handling Contributor 21st Dec, 2011 18:24
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 22nd Dec, 2011 00:42
Joe,
As U can see above the originator is now happy that his problem is completely resolved.

He could lock this thread at any time. I would advise U create your own thread.

@JL Krol.
Happy Christmas to U to. I agree all is now back in order now that Secunia have changed their scanning rules.

EDIT:

Original problem resolved & case closed by the originator.

Thread locked at: 22:44 21/12/2011

If required, this thread can be reopened for the originator by contacting Secunia Support at: support@secunia.com


--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+1
-0

This thread has been marked as locked.