1053409 - Adobe Flash Player - plugins vulnerable 2014-08-12 - APSB14-18

Status: RESOLVED FIXED

(Plugin Check :: Database, defect)

Description

[DJ-Leith]

Security updates available for Adobe Flash Player
Release date: August 12, 2014
Vulnerability identifier: APSB14-18
http://helpx.adobe.com/security/products/flash-player/apsb14-18.html

Adobe Flash Player
http://www.adobe.com/software/flash/about/

The about page - lists current versions.

Note: the versions are different for Windows vs Mac vs Linux
AND ALSO vs browser.

Please add the plugins to the Database.

I can't find a bugzilla bug for this but I have seen, today 2014-08-13,
Pluging check report:
14.0.0.145 - on Windows 7 - on Fx 31 and Fx 33 "vulnerable" – correct.
14.0.0.179 - on Windows 7 - on Fx 31 and Fx 33 "Up to Date" (with green button) - correct.
14.0.0.176 - on Windows 7 - on Internet Explorer 9 (32bit) "Up to Date"
(on a blue button - why blue not green?) - correct.

DJ-Leith

Comment 1

[DJ-Leith]

https://bug1020133.bugzilla.mozilla.org/attachment.cgi?id=8472632

Screenshot of
Flash 14.0.0.176 - on Windows 7 - on Internet Explorer 9 (32bit) "Up to Date"
(on a blue button - why blue not green?) - correct.

See "Improve Adobe Acrobat plugin reporting"
bug 1020133 comment # 15 onwards for more screenshots taken today
(shows Adobe Flash and Adobe Reader results).

DJ-Leith

Comment 2

[Schalk Neethling [:espressive]]

(In reply to DJ-Leith from comment #0)
> Security updates available for Adobe Flash Player
> Release date: August 12, 2014
> Vulnerability identifier: APSB14-18
> http://helpx.adobe.com/security/products/flash-player/apsb14-18.html
> 
> Adobe Flash Player
> http://www.adobe.com/software/flash/about/
> 
I did some DB updates on the 12th of the DB related to Flash. Are the results you are seeing what you expect (seems to be) or are you saying there is some that are reported incorrectly?

Comment 3

[DJ-Leith]

(In reply to Schalk Neethling [:espressive] from comment #2)
> I did some DB updates on the 12th of the DB related to Flash.
I kind of concluded that you, or someone, had.
However, I could not find a bug in bugzilla, about updating the Database, so I filed this one.

I said, in comment # 0:
> I can't find a bugzilla bug for this ...
I meant "for adding Security updates available for Adobe Flash Player
Release date: August 12, 2014
Vulnerability identifier: APSB14-18
http://helpx.adobe.com/security/products/flash-player/apsb14-18.html "


Schalk, you asked in comment # 2:
> Are the results you are seeing what you expect (seems to be) or are you saying
> there is some that are reported incorrectly?
I have only tested what I reported in comment # 0.
I have not seen any 'wrong' results for Flash.
So, Windows results seem to be very good.

If you are happy that you have made all the changes to the Database
and if Linux and Mac 'get the correct results' - all happen to have
different versions of Flash at this point of time, feel free to close this bug.

Is there a cross reference to 'what you did on the 12th'?


Finally, I posted the link for the IE9 result because I thought
all "Up to Date" buttons would be / should be green.

Maybe I don't understand the 'colour scheme',
are you using different colours for 'IE reporting'?

As always, happy to help when I can.  You and Carsten Book have a
never ending task keeping the plugincheck service going.

DJ-Leith

PS
Did you see Alice Wyman's link, in bug 1037743 comment # 8,
showing OTHERS who have also spent a lot of time trying to understand
versions of QuickTime Player and Apple's documentation (or lack of).

I did not know of:
https://wiki.mozilla.org/QA/Desktop_Firefox/Plugins/Blocklisting/Apple_Quicktime#Production

Comment 4

[Schalk Neethling [:espressive]]

(In reply to DJ-Leith from comment #3)
> (In reply to Schalk Neethling [:espressive] from comment #2)
> > I did some DB updates on the 12th of the DB related to Flash.
> I kind of concluded that you, or someone, had.
> However, I could not find a bug in bugzilla, about updating the Database, so
> I filed this one.
> 

Ah yes, there was a confidential security bug files by someone from Adobe that prompted the update.

> If you are happy that you have made all the changes to the Database
> and if Linux and Mac 'get the correct results' - all happen to have
> different versions of Flash at this point of time, feel free to close this
> bug.

From what I have seen, and the fact that there are no bugs that have been opened, I am going to close this one but, if you should run into anything please reopen this bug.

>
> Finally, I posted the link for the IE9 result because I thought
> all "Up to Date" buttons would be / should be green.
> 
> Maybe I don't understand the 'colour scheme',
> are you using different colours for 'IE reporting'?
> 

No, I think this is just something left over from the pre plugincheck page redesign.

> 
> PS
> Did you see Alice Wyman's link, in bug 1037743 comment # 8,
> showing OTHERS who have also spent a lot of time trying to understand
> versions of QuickTime Player and Apple's documentation (or lack of).
> 
> I did not know of:
> https://wiki.mozilla.org/QA/Desktop_Firefox/Plugins/Blocklisting/
> Apple_Quicktime#Production

I did, thanks a lot for pointing this out.