Skip navigation
Kevin Stecyk
Kevin Stecyk
Currently Being Moderated

Secunia & Adobe Acrobat Pro Extended 9.3.1

Feb 19, 2010 12:05 PM

Hi,

 

According to Secunia, my updated version of Adobe Acrobat Extended Pro 9.3.1 is insecure.

 

I have clicked on the Download Solution button on Secunia to obtain the latest Adobe Acrobat Version. After loading the latest version, I still have the following information.

 

Secunia points to the following file: C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat.dll

 

And reports that my version is: 9.3.0.148

 

Yet, when I fire up my Adobe Acrobat Extended and then go Help | About, I see the version is 9.3.1.

 

When Adobe updates Acrobat, does it leave insecure files behind?  Is there anything I can do to ensure that my version of Adobe Acrobat is completely secure?  How do I get Secunia to recognize my updated and, I hope, secure version?

 

Sincerely,

Kevin

Attachments:
2052 Views   8 Replies   Latest reply: Kevin Stecyk, Feb 22, 2010 7:53 AM
 
Replies
  • Bill@VT
    Currently Being Moderated
    1. Bill@VT,
    Feb 19, 2010 12:28 PM   in reply to Kevin Stecyk
    Report

    Except for a few issues with JavaScript, Acrobat has been a lot more secure than many other programs from what I have seen. Some of the least secure are the OFFICE products that get patched every few days to fix security holes. Even there, the security holes are typically related to scripting. Several anti-virus programs flag Acrobat as a problem. That is why it is recommended to disable anti-virus during installation. That does not help answer your question, but I am not sure there is an answer that will totally meet with your satisfaction.

     
    |
    Mark as:
  • Kevin Stecyk
    Currently Being Moderated
    2. Kevin Stecyk,
    Feb 19, 2010 12:46 PM   in reply to Bill@VT
    Report

    Hi Bill,

     

    I suspect that its latest version 9.3.1 is secure, at least for now.

     

    My concern is that, for whatever reason, Secunia continues to think I have a prior version (9.3.0.148).

     

    I had a similar problem with Flash.  To solve my Adobe Flash problem, I used an Adobe uninstaller to completely remove Flash and then reinstall the latest version from Adobe web site.

     

    I can't do that with my Adobe Acrobat Pro Extended.  I need to get incremental upgrades through the upgrade process.

     

    I have a hunch that the upgrades don't remove all the prior detritus from prior versions and that is tripping up the Secunia security.

     

    I am hoping someone else has encountered the same issues and has found a solution.

     

    Sincerely,

    Kevin

     
    |
    Mark as:
  • Bill@VT
    Currently Being Moderated
    3. Bill@VT,
    Feb 19, 2010 9:42 PM   in reply to Kevin Stecyk
    Report

    I suspect it is not a security issue, but something in the Acrobat files that looks like a virus to your package. Such an issue is difficult to find.

     
    |
    Mark as:
  • Kevin Stecyk
    Currently Being Moderated
    4. Kevin Stecyk,
    Feb 20, 2010 8:51 AM   in reply to Bill@VT
    Report

    Others are experiencing this problem as well.  Here's a post over at the Secunia forum:

     

    http://secunia.com/community/forum/thread/show/3545/acrobat_pro_9_3_0_ 9_3_1_update_not_detected

     

    I hope someone finds an answer.

     
    |
    Mark as:
  • Kevin Stecyk
    Currently Being Moderated
    5. Kevin Stecyk,
    Feb 20, 2010 12:32 PM   in reply to Kevin Stecyk
    Report

    For those interested, here's Adobe's security bulletin:

     

    http://www.adobe.com/support/security/bulletins/apsb10-07.html

     
    |
    Mark as:
  • baumgrenze
    Currently Being Moderated
    6. baumgrenze,
    Feb 21, 2010 9:47 PM   in reply to Kevin Stecyk
    Report

    Kevin,

     

    Use Windows Explorer to find your acrobat.ext files. Right click the file and select properties. Under the General Tab you will see a Description. Press on and open the Version Tab and look at the version information and see if it coincides with the version you expect to find there.

     

    I am hassling a parallel issue in Acrobat 8 Professional. I opened Help/Check For Updates and selected the 8.2.1 (CPSID_50570) update that was offered. I downloaded, installed, rebooted, navigated to acrobat.exe and I find that while the General Tab tells me I have 8.2, the Version Tab tells me that it is 8.2.0.81. Secunia says that is unsecure.

     
    |
    Mark as:
  • Kevin Stecyk
    Currently Being Moderated
    7. Kevin Stecyk,
    Feb 22, 2010 7:48 AM   in reply to baumgrenze
    Report

    Hi,

     

    An employee from Secunia replied on the Secunia thread and indicated that they changed their rules for Adobe Acrobat.  Now, everything is fine.

     

    Here's the Secunia thread: http://secunia.com/community/forum/thread/show/3545

     

    I hope this helps others.

     

    Sincerely,

    Kevin

     
    |
    Mark as:
  • Kevin Stecyk
    Currently Being Moderated
    8. Kevin Stecyk,
    Feb 22, 2010 7:53 AM   in reply to Kevin Stecyk
    Report

    As indicated in my prior comment, Secunia has changed its rules for Adobe Acrobat.  My problem is now solved.

     

    http://secunia.com/community/forum/thread/show/3545

     

    Edit: I needed to add this additional message to indicate that my problem is now solved.  I wrote my previous reply in response to baumgrenze.  However, my question was still classified as unsolved.  So when I indicated that my problem was solved, I was prompted for a concluding response.

     

    Message was edited by: Kevin H. Stecyk

     
    |
    Mark as:
Actions

More Like This

  • Retrieving data ...

Bookmarked By (0)

Answers + Points = Status

  • 10 points awarded for Correct Answers
  • 5 points awarded for Helpful Answers
  • 10,000+ points
  • 1,001-10,000 points
  • 501-1,000 points
  • 5-500 points