1023838 - Plugin check falsely reporting Adobe Flash 13.0.0.214 is up to date when it is vulnerable

Status: RESOLVED FIXED

(Websites :: plugins.mozilla.org, defect)

Description

[rml123]

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:30.0) Gecko/20100101 Firefox/30.0 (Beta/Release)
Build ID: 20140605174243

Steps to reproduce:

Run plugin check


Actual results:

Adobe Flash PlayerShockwave Flash 13.0.0.214 is reported as Up to Date but the green up-to-date button informs me that version 14.0.0.125 is available. According to adobe's security bulletin, this is a vulnerable plugin

http://helpx.adobe.com/security/products/flash-player/apsb14-16.html 



Expected results:

Status should be "vulnerable", not "up-to-date" Green "up-to-date" button should be red "Update now". Link under the button is already correct.

Comment 1

[Alice Wyman]

Attachment: screenshot-PluginCheckFx29

I see this in both Firefox 29 (screenshot attached) and Firefox 30.

Comment 2

[Alice Wyman]

Attachment: screenshot-PluginCheckFx30

Here's a screenshot for Firefox 30 (both screenshots are from today, both are on the same Windows 7 computer)

Comment 3

[DJ-Leith]

I can also confirm.

The plugin database needs to be updated.

Security updates available for Adobe Flash Player
Release date: June 10, 2014
Vulnerability identifier: APSB14-16
http://helpx.adobe.com/security/products/flash-player/apsb14-16.html

> * Users of Adobe Flash Player 13.0.0.214 and earlier versions for Windows and Macintosh
>   should update to Adobe Flash Player 14.0.0.125.
> 
> * Users of Adobe Flash Player 11.2.202.359 and earlier versions for Linux should update
>   to Adobe Flash Player 11.2.202.378.

I am CCing Carsten Book as he often adds plugins to the database.

Also, bug 978505 comment # 7 has some recent information, and links, about
Adobe's ESR version of Flash.

DJ-Leith

Comment 4

[Schalk Neethling [:espressive]]

Plugin database has been updated for Mac, Windows and Linux.

Comment 5

[DJ-Leith]

Thanks Schalk,

Flash 13.0.0.214 now correctly reported as "vulnerable" on Fx 30 and Aurora, on Windows 7.

DJ-Leith