Forum Thread: V10.0.32.18 of Adobe Flash Player still triggers SA35948 security...

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Adobe Systems
And, this specific program:
Adobe Flash Player 10.x

This thread has been marked as locked.
beardd777 V10.0.32.18 of Adobe Flash Player still triggers SA35948 security error in Secunia PSI V1.5.0.0
Member 31st Jul, 2009 03:20
Ranking: 0
Posts: 2
User Since: 11th Feb, 2008
System Score: N/A
Location: N/A
Adobe's update of the Flash Player's "FLASH10C.OCX" ActiveX and "NPSWF32.DLL" plug-in components to version 10.0.32.18, are still listed as "insecure" - with an SAID of: SA35948.

Maurice Joyce RE: V10.0.32.18 of Adobe Flash Player still triggers SA35948 security error in Secunia PSI V1.5.0.0
Handling Contributor 31st Jul, 2009 09:50
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
U do not mention what browser U are using. It certainly clears the insecurity with Windows XP using IE8 but like most things Adobe life is not made easy for users.
I used this method (& always do because of Adobe dross).

To remove all versions of Flash from the C drive of your PC:


1. Download & use the flash Uninstaller from here:

http://kb.adobe.com/selfservice/viewContent.do?ext...

2. Reboot to clear out any left over ocx files.

3. Rescan using PSI - if there are any insecure Flash elements left what is the path to them? (The overview page may look a little odd because it uses Flash for the pictorials)

Note: At this stage,if PSI finds any elements of Flash in the C:\i386 folder or on any drive other than C that is an OEM reinstallation partition (normally D drive) or a drive U use solely to backup your work U can safely create an ignore rule.


4. Reinstall the latest Internet Explorer Flash Player from here:

http://get.adobe.com/flashplayer/?promoid=BUIGP

3A.If U are also using Firefox, Opera and other Gecko-based browsers U need this link as well:

http://get.adobe.com/flashplayer/otherversions/

5. Go to add/remove & U will find Adobe have installed a Download Manager - Just remove it.


--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
Slamgeden RE: V10.0.32.18 of Adobe Flash Player still triggers SA35948 security error in Secunia PSI V1.5.0.0
Member 31st Jul, 2009 10:12
Score: 0
Posts: 181
User Since: 17th Jul 2009
System Score: N/A
Location: N/A
I think they must have updated their rules, it seems to detect it now.

--
Assorted Fnords.
Was this reply relevant?
+0
-0
beardd777 RE: V10.0.32.18 of Adobe Flash Player still triggers SA35948 security error in Secunia PSI V1.5.0.0
Member 31st Jul, 2009 22:42
Score: 0
Posts: 2
User Since: 11th Feb 2008
System Score: N/A
Location: N/A
This problem has been corrected. The Secunia File Signatures have been updated to reflect the newer version of Adobe's ActiveX and plug-in forms of Flash Player. Since I use IE8, Firefox 3.5, and Google's Chrome to test page rendering on client's web sites - I noticed the "insecure" message persisted (yesterday), after I had flushed the older Flash version code from my system.

Today, Adobe updated the Acrobat Reader to version 9.1.3 and PSI still considers it to be "insecure" (SA35949). I expect Secunia to catch-up to this change within the next 24 hours - as well.
Was this reply relevant?
+0
-0
jarome RE: V10.0.32.18 of Adobe Flash Player still triggers SA35948 security error in Secunia PSI V1.5.0.0
Member 4th Aug, 2009 02:52
Score: 0
Posts: 23
User Since: 19th Apr 2009
System Score: N/A
Location: N/A
I updated Flash again, and PSI still says it is insecure. 10.0.22.87 it claims is what I have.
C:\Windows\System32\Macromed\Flash\Flash10b.ocx
I applied the solution twice.
The @#$%^& Adobe downloader always ends with an error message when I close it (aftere it says it succeeded).
Was this reply relevant?
+0
-0
This user no longer exists RE: V10.0.32.18 of Adobe Flash Player still triggers SA35948 security error in Secunia PSI V1.5.0.0
Member 4th Aug, 2009 04:05
What is the error message that apears?

Activate ADVANCED then go to Adobe then click on + to expand the information then click on Open Folder then manualy delete Flash10b.ocx
Was this reply relevant?
+0
-0
Maurice Joyce RE: V10.0.32.18 of Adobe Flash Player still triggers SA35948 security error in Secunia PSI V1.5.0.0
Handling Contributor 4th Aug, 2009 10:35
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 4th Aug, 2009 10:36
Jarome,
If U followed my solution at what point did the insecurity appear?
At stage 3 did PSI give U a clean bill of health?

If not, U should have cleared it before proceeding.

If it did then U know that during the reinstallation process Adobe reloaded Flash10b.ocx onto your system.

I believe it is the latter because Adobe have once again added yet another piece of bloatware called a Download Manager (DLM)created by NOS Microsystems Ltd. My tests show this reintroduces this file onto your system.

@Yokenny has given U one solution which will work. Once done I strongly advise U complete stage 5 of my solution & remove the useless DLM from your system.

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
jarome RE: V10.0.32.18 of Adobe Flash Player still triggers SA35948 security error in Secunia PSI V1.5.0.0
Member 4th Aug, 2009 15:03
Score: 0
Posts: 23
User Since: 19th Apr 2009
System Score: N/A
Location: N/A
Well, over night, the Flash insecurity disappeared, even though I had rescanned it several times.
Was this reply relevant?
+0
-0
MomsHugs RE: V10.0.32.18 of Adobe Flash Player still triggers SA35948 security error in Secunia PSI V1.5.0.0
Member 14th Aug, 2009 04:42
Score: 0
Posts: 21
User Since: 8th Feb 2009
System Score: N/A
Location: N/A
Last edited on 15th Aug, 2009 00:47
Maurice ~ Thank you! Thank you!

These insecurities are already a headache. When Adobe doesn't 'get it' & clean up errors, then it becomes a huge time waster. Had your 'fix' not been posted, I probably wouldn't have bothered.

UPDATE - Adobe cleaned up, Firefox patched & PSI scan 100%
Can't thank you enough, Maurice, except I will now BUY Secunia.

Oh... & recommend Secunia to U.S. readers of Moms Hugs: From the Middle of the Road in America - Thinking outside the box... inside creatively -- http://momshugs.blogspot.com

GRACIAS!Ciao ~ Moms Hugs
Was this reply relevant?
+0
-0
Anselm RE: V10.0.32.18 of Adobe Flash Player still triggers SA35948 security error in Secunia PSI V1.5.0.0
Member 14th Aug, 2009 10:08
Score: 7
Posts: 40
User Since: 7th Jul 2008
System Score: N/A
Location: DE
I haven't so much luck:

Adobe Flash Player 10.x (ActiveX Control) Version Detected 10.0.22.87. The Adobe page http://www.adobe.com/de/shockwave/welcome/ shows 10.0.32.18. I guess it's a PSI problem and no Adobe problem. I just wonder that Flash10b.ocx has the date 03.02.2009 (DD.MM.YYYY). I used the uninstaller before reinstalling.

Thanks in advance, Anselm

--
Secunia PSI 3.0
Windows 7 Professional 64 Bit SP1
Intel Core i5-2430M CPU 2.4 GHz 8 GB RAM
Was this reply relevant?
+0
-0
Maurice Joyce RE: V10.0.32.18 of Adobe Flash Player still triggers SA35948 security error in Secunia PSI V1.5.0.0
Handling Contributor 14th Aug, 2009 10:18
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
It is not a PSI problem. It is very much the useless Adobe.

Flash10b.ocx is the insecure version - the secure one is 10c.ocx.

Your link leads to Shockwave. If U really need this programme use this link to uninstall & reinstall it.

http://kb2.adobe.com/cps/142/tn_14224.html

U must close all browsers & programmes using Flash to be successful.

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
Anselm RE: V10.0.32.18 of Adobe Flash Player still triggers SA35948 security error in Secunia PSI V1.5.0.0
Member 14th Aug, 2009 11:01
Score: 7
Posts: 40
User Since: 7th Jul 2008
System Score: N/A
Location: DE
on 14th Aug, 2009 10:18, Maurice Joyce wrote:
It is not a PSI problem. It is very much the useless Adobe


I wasted some more hours with the wonderful Adobe software. PSI doesn't show the unsecure message anymore. I wonder how that will be next Friday when I run PSI again.

Thanks for helping,

Anselm



--
Secunia PSI 3.0
Windows 7 Professional 64 Bit SP1
Intel Core i5-2430M CPU 2.4 GHz 8 GB RAM
Was this reply relevant?
+0
-0
Anselm RE: V10.0.32.18 of Adobe Flash Player still triggers SA35948 security error in Secunia PSI V1.5.0.0
Member 14th Aug, 2009 12:57
Score: 7
Posts: 40
User Since: 7th Jul 2008
System Score: N/A
Location: DE
The story didn't com to an end. Secunia PSI requires the Adobe Flash Player by itself to show the Program Overview and the Historic Development: "Cannot display graph, as Adobe Flash Player does not appear to be installed in Internet Explorer on your computer, or the version installed is older than version 8.x. _Install Flash for Internet Explorer_". I don't use Internet Explorer often, but to see PSI's graphics I clicked to the link. The installation lets IE8 hang. After several trials IE8 and Adobe Flash Player seem to work, but PSI still doesn't show grahics. Any idea?

Regards, Anselm


--
Secunia PSI 3.0
Windows 7 Professional 64 Bit SP1
Intel Core i5-2430M CPU 2.4 GHz 8 GB RAM
Was this reply relevant?
+0
-0
Maurice Joyce RE: V10.0.32.18 of Adobe Flash Player still triggers SA35948 security error in Secunia PSI V1.5.0.0
Handling Contributor 14th Aug, 2009 13:14
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
I assume U have sorted out the flash element within Shockwave?

Have U sorted out flash for IE & any Gecko browsers U have installed?

Try this if Shockwave is sorted.

To remove all versions of Flash from the C drive of your PC:


1. Download & use the flash Uninstaller from here:

#####Before actually running the uninstaller it is a good idea to close all browsers,PSI and any other programme U think may be using Flash #####

http://kb2.adobe.com/cps/141/tn_14157.html

2. Reboot to clear out any left over ocx files.

3. Rescan using PSI - if there are any insecure Flash elements left what is the path to them? U should not proceed to stage 4 until all U clear any problems found.(The PSI overview page may look a little odd because it uses Flash for the pictorials)

Note: At this stage,if PSI finds any elements of Flash in the C:\i386 folder or on any drive other than C that is an OEM reinstallation partition (normally D drive) or a drive U use solely to backup your work U can safely create an ignore rule.


4. Reinstall the latest Internet Explorer Flash Player from here:

http://www.filehippo.com/download_flashplayer_ie/

4A.If U are also using Firefox, Opera and other Gecko-based browsers U need this link as well:

http://www.filehippo.com/download_flashplayer_fire...

5. Go to add/remove & double check Adobe have not installed the useless Adobe Download Manager - if U see an entry remove it.


--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
Anselm RE: V10.0.32.18 of Adobe Flash Player still triggers SA35948 security error in Secunia PSI V1.5.0.0
Member 21st Aug, 2009 10:28
Score: 7
Posts: 40
User Since: 7th Jul 2008
System Score: N/A
Location: DE
Last edited on 21st Aug, 2009 10:29
on 14th Aug, 2009 13:14, Maurice Joyce wrote:
I assume U have sorted out the flash element within Shockwave?

Have U sorted out flash for IE & any Gecko browsers U have installed?

A miracle healing seems to have happened. I wasn't quite sure what you mean with sorting out the flash element, so I shifted solving the problems to today. I run PCI's scan, got no unsecure message and Flash and Shockwave Player seem to work correctly.

Thank you anyway,

Anselm

--
Secunia PSI 3.0
Windows 7 Professional 64 Bit SP1
Intel Core i5-2430M CPU 2.4 GHz 8 GB RAM
Was this reply relevant?
+0
-0

This thread has been marked as locked.