Forum Thread: Songbird

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Mozilla Foundation
And, this specific program:
Songbird 1.x

This thread has been marked as locked.
davidbassplayer Songbird
Member 16th Feb, 2014 05:24
Ranking: 2
Posts: 20
User Since: 13th Feb, 2008
System Score: N/A
Location: N/A
PSI says my version of Songbird is "end of life".
I removed the current version and fetched the newest from getSongbird.net, namely version 2.2.0-2453 according to their web site. I installed the new version but Secunia still sees 1.9..2-3987.

When I run Songbird and click Help|about I see version listed as Songbird 2.2.0, Build 2453 (20130204082828)
I will use an ignore rule until hear from someone here about what to do.

64bit W7 SP1
4 GB RAM
AMD 4 core processor.

Maurice Joyce RE: Songbird
Handling Contributor 16th Feb, 2014 10:55
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 16th Feb, 2014 11:13
Did you run a full PSI scan after the update?

I would reverse the ignore action then carry out a full PSI scan. If Songbird is still in error which path does PSI give you to the problem?

FINDING A FILE PATH USING PSI

VERSION 2


From the DASHBOARD page click on SCAN RESULTS.

1. This will list all your programmes with a + to the left of each programme.
2. Click the + sign next to the item that U want help with.
3. This will reveal the path under DETECTED INSTANCES.
4. Below DETECTED INSTANCES you will see this You can double click this row for additional information & options>double click it>a box will appear>look to the RIGHT & U will see TROUBLESHOOT REPORT in BLUE writing under the heading TOOLBOX> click TroubleShoot Report & it will reveal some information in a box>highlight the information revealed from ---START--- to ---END--- & copy it (CTRL+C) then post it to the Forum (CTRL+V)

VERSION 3
This version does not have such an easy method to publish the path.

Open PSI>once open select Show Programs.
You will now see a page full of programme icons or a list.
Right click on the programme in error>select Show Details - that will open a box showing the path & version number of the offending file.
You now have 3 options:
1. Write down the exact file path & install version - return to the Forum & type that information.
2. Take a screen shot & publish that.


Last Reviewed 09:54 16/02/2014

EDIT

I have just noticed the Songbird V2 does not appear to be on the Secunia database.

https://secunia.com/advisories/product/SOFT_S/#lis...

If solution 1 proves fruitless you will need to suggest the new version to Secunia.

SUGGESTING A NEW PROGRAMME TO SECUNIA

Secunia do not accept programmes versions in ALPHA(Includes Google Canary/Dev & Mozilla Aurora) or BETA.

PSI Version 3
1. Open PSI>show programmes - U should see all your programmes listed by an icon or list presentation.
2. Click Add Program (top right of page)
3. Fill out the details requested & click Send Data.

PSI Version 2

1. From the DASHBOARD page click on RESULTS.
2. On the RESULTS page look above the tab INSTALL SOLUTION & U will see a green icon & ARE YOU MISSING A PROGRAM?
3. Click it. Fill out the details requested.
4. Click SUGGEST SOFTWARE.

PSI Version 1

1. Open the PATCHED or SECURE BROWSING tab.
2. Scroll to the bottom where U will see a link in blue ink "Program Missing? Suggest It Here!"
3. Click the link & then fill out the details in the boxes that appear(the important bit is the FILE SELECTION).
4. Click Suggest Program.

If requested, Secunia respond by email that the programme has been added to their database. A full PSI scan should reveal it.

Last Reviewed 10:12 16/02/2014








--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
ax89 RE: Songbird
Member 17th Feb, 2014 17:21
Score: 1
Posts: 5
User Since: 29th May 2009
System Score: N/A
Location: CA
on 16th Feb, 2014 05:24, davidbassplayer wrote:
PSI says my version of Songbird is "end of life".
I removed the current version and fetched the newest from getSongbird.net, namely version 2.2.0-2453 according to their web site. I installed the new version but Secunia still sees 1.9..2-3987.

When I run Songbird and click Help|about I see version listed as Songbird 2.2.0, Build 2453 (20130204082828)
I will use an ignore rule until hear from someone here about what to do.

64bit W7 SP1
4 GB RAM
AMD 4 core processor.

I get the same warning and I have Songbird 2.1.0.

I did Properties on the songbird.exe file and I see that it reports the version that Secunia is reporting. Therefore I think an ignore rule is a good bet. Too bad you can't put an expiry on an ignore rule (to remind us to check it later).
Was this reply relevant?
+0
-0
Maurice Joyce RE: Songbird
Handling Contributor 17th Feb, 2014 18:43
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK

I have tried to get this programme on the database for you via Secunia Support. It proved impossible because:

1. The vendor appears to have issued an update from V1 to V2 but has not changed the meta data.

2. Version 1 & 2 of this programme are not supported (discontinued). This is part of a reply I got from Secunia Support - "Songbird 2.x" has not been added to the database, as the vendor has discontinued support for the product. In effect this means that Secunia are no-longer tracking this programme for vulnerabilities.

This is the link I used to install version 2.2.0-2453

http://sourceforge.net/projects/songbird.mirror/?s...

Once installed the main EXE file data reveals this:

https://1ncuig.bn1302.livefilestore.com/y2p_Bww1YO...

You will note the File Version remains at 1.9.2.3987

In addition, many of the vendor links contained in files & folders in Windows Explorer for this programme return a 404 error which further supports the view that this programme has been abandoned.

http://en.wikipedia.org/wiki/Songbird_%28Media_Pla...

By using Windows Explorer you could try their support email link if you want further clarification or some websites from their licence agreement which can be located on your PC here:

C:\Program Files (x86)\Songbird\LICENSE.html












--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0

This thread has been marked as locked.