Closed Bug 520443 Opened 16 years ago Closed 16 years ago

Plugin Check reports current Adobe Acrobat Reader 9.1.3 be Potentially Vulnerable

Categories

(addons.mozilla.org Graveyard :: Plugins, defect)

Product:
addons.mozilla.org Graveyard
Component:
Plugins
Platform:
x86_64
Windows 7
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
VERIFIED FIXED

People

(Reporter: olav.seyfarth, Unassigned)

References

(
URL
)

Details

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729) Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.1; de; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729) When I let Acrobat Reader check itself for Updates, it reports "No Updates available" and that seems correct since 9.1.3 is the last version I know of. Nevertheless https://www-trunk.stage.mozilla.com/en-US/plugincheck/ reports that the Acrobat Reader Plugin is "Potentially Vulnerable". Reproducible: Always Steps to Reproduce: 1. open https://www-trunk.stage.mozilla.com/en-US/plugincheck/ 2. reports "Adobe Acrobat PDF Plug-In For Firefox and Netscape is Potentially Vulnerable" 3. open Adobe Acrobat Reader itself 4. Help-Menu -> "Check for Updates" reports "No updates available" Actual Results: Either the Plugin(!) really still is vulnerable or the Plugin Check report is wrong. Expected Results: Plugin Check should be consistent with Self-Assessment. Mozilla Firefox and Adobe Acrobat Reader are german versions. AddOns: NoScript 1.9.9.01 (mozilla.com allowed), RequestPolicy 0.5.8 (googleapis.com allowed), BetterPrivacy 1.29 (disable DOM storage)
Same result with NoScript, RequestPolicy and BetterPrivacy disabled. BTW: <HEAD><TITLE> reads "Plug-In" whereas <BODY><H2> and all text on the page uses "Plugin".
9.1.3 is indeed the latest version for Windows, afaict.
Component: Other → www.mozilla.com
QA Contact: other → www-mozilla-com
Component: www.mozilla.com → Plugins
Product: Websites → addons.mozilla.org
QA Contact: www-mozilla-com → plugin-listings
Status: UNCONFIRMED → NEW
Ever confirmed: true
The core issue is that Acrobat and some other plugins don't expose version information in either the name or description field of the navigator.plugins object. See Bug#519234 Fix: For Adobe Acrobat and other plugins where no version is detected, Client is now skipping pfs2 request and not displaying the plugin.
Status: NEW → RESOLVED
Closed: 16 years ago
Resolution: --- → FIXED
Product: addons.mozilla.org → addons.mozilla.org Graveyard
You need to log in before you can comment on or make changes to this bug.