Forum Thread: Adobe Bridge Security Patch

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as resolved.
MekonSEC Adobe Bridge Security Patch
Member 29th Feb, 2012 17:50
Ranking: 0
Posts: 3
User Since: 29th Feb, 2012
System Score: N/A
Location: UK
Secunia advises me that Adobe Bridge 1.0.4 requires a manually installed security patch.
When I click on 'Install Solution' I am taken to Adobe's site ....but....German language.
I did school French and Latin but they're not much help.
A search on Adobe's English site produced no results (under both Adobe Bridge 1.0.4 Security Patch and Adobe Bridge Security Patch).
The German link was to Bridge CS5.
I have Photoshop CS2 does anyone know if I can update to Bridge CS5 (I'm not updating Photoshop)? If I can't use a CS5 update does anyone know if there actually is a suitable Security Patch and if so the path to it?

Post "RE: Adobe Bridge Security Patch" has been selected as an answer.
Maurice Joyce RE: Adobe Bridge Security Patch
Handling Contributor 2nd Mar, 2012 11:25
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
For the Adobe Bridge issue can U please supply this information?

FINDING A FILE PATH

From the DASHBOARD page click on SCAN RESULTS.

1. This will list all your programmes with a + to the left of each programme.
2. Click the + sign next to the item that U want help with.
3. This will reveal the path under DETECTED INSTANCES.
4. Below DETECTED INSTANCES you will see this You can double click this row for additional information & options>double click it>a box will appear>look to the RIGHT & U will see TROUBLESHOOT REPORT in BLUE writing under the heading TOOLBOX> click TroubleShoot Report & it will reveal some information in a box>highlight the information revealed from ---START--- to ---END--- & copy it (CTRL+C) then post it to the Forum (CTRL+V)

As an EXAMPLE the end result U post to the Forum should look something like this:
---START---

Program Name:
Adobe Flash Player 11.x

Security State:
Patched

Download Link:
http://fpdownload.adobe.com/get/flashplayer/curren...

Instances Found:
C:\Windows\SysWOW64\Macromed\Flash\Flash11e.ocx, version: 11.1.102.55 (ActiveX)

Last System Scan (localtime):
2. Jan 2012, 23:01

Operating System:
Microsoft Windows 7.

---END---

Update 12 21:50 26/01/2012

I suspect the other upgrade issues can only be answered by Adobe Sales - they will want your money to upgrade!

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+3
-0
MekonSEC RE: Adobe Bridge Security Patch
Member 2nd Mar, 2012 21:42
Score: 0
Posts: 3
User Since: 29th Feb 2012
System Score: N/A
Location: UK
Hello, and thanks for the reply Maurice,

What concerned me is that Adobe Photoshop CS2 is 'End of Life' but has no 'Install Solution' link: Adobe Bridge 1.0.4.6 is End of Life but does have the Install Solution link, That was my starting point.

The info you requested:--

Program Name:
Adobe Bridge 1.x

Security State:
End-of-Life

Download Link:
http://www.adobe.com/dk/products/bridge.html

Instances Found:
C:\Program Files\adobe\Adobe Bridge\Bridge.exe, version: 1.0.4.6

Last System Scan (localtime):
29. Feb 2012, 12:38

Operating System:
Microsoft Windows 7, Microsoft Windows 7

If 1.0.4.6 is the update then I already have it so why 'Install Solution'

I know I can't get CS2 upgraded without paying several hundred Pounds but am not sure of Bridge which I rarely use. You're probably right that it would need a payment to upgrade but then, I thought that the Solution link might simply be a Patch, as indeed there was some time back for CS2. I'm not too keen on uninstalling Bridge unless it really is a strong security risk.

Grateful for your interest and advice.

Regards
MekonSEC





Adobe Bridge 1.x
Quick Facts about Adobe Bridge 1.xThis program was detected as being End-of-Life, which means that the vendor no longer supports this program. It is strongly recommended that you upgrade to a newer version of this program or uninstall it from your PC.Toolbox Install Solution
Re-Scan Program
Add/Remove Programs
Troubleshoot Report
Need help with this program?
Online ReferencesVisit the following links for indepth information and technical details about this program.
Secunia Advisory SA0
Secunia Product Page
Vendor Product Page
Problems / Discussions
Detected Installations, right-click for further options
Was this reply relevant?
+0
-0
Maurice Joyce RE: Adobe Bridge Security Patch
Handling Contributor 2nd Mar, 2012 22:40
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 2nd Mar, 2012 22:41
Thank you for the update.
Having looked here there is clearly no update for your products.
http://www.adobe.com/support/downloads/product.jsp...

I have also checked the Advisory for U here:
http://secunia.com/advisories/product/6152/

Secunia are giving U the best advice in that all your Adobe programmes should be upgraded to safeguard your system given that there is no vendor support. On that basis the vendor will not fix any vulnerabilities that may occur.

That said, U have other options if, after a Risk Assessment U think a risk is worth taking.

With any End of Life programmes the real time options are:

Uninstall the lot - that is extreme.
Upgrade - In this instance expensive.
Ignore Secunia's advice - From the information U have given me of low usage I would choose that option given that the Advisory states it is not currently vulnerable.

Creating an ignore rule is easy:

PROGRAMME EXCLUSION RULE

Open PSI>Scan results>expand any programme by clicking the "+" to the left of the programme entry.
This will reveal DETECTED INSTANCES and below it two Yellow Folders. Click the folder with the RED dot which will create an Ignore Rule for that item.

Hope this helps



--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+2
-0
MekonSEC RE: Adobe Bridge Security Patch
Member 3rd Mar, 2012 00:13
Score: 0
Posts: 3
User Since: 29th Feb 2012
System Score: N/A
Location: UK
Maurice,

Thanks very much for your time and advice

Regards
MekonSEC
Was this reply relevant?
+0
-0
Maurice Joyce RE: Adobe Bridge Security Patch
Handling Contributor 3rd Mar, 2012 01:08
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK

Pleased to see all appears well.

On that basis, I will lock this thread for U sometime tomorrow unless U post back asking for it to be left open.

This will protect your mail box from possible update emails from Forum "tag on" posts

You can of course lock your own threads yourself. Just click the ACCEPT button in the post of the helper who offered U the best solution/advice to solve your problem.

Secunia Support can always reopen threads by applying by email to: support@secunia.com




--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+1
-0

This thread has been marked as locked.