587356 - Highly Critical accoring to kaspersky antivirus proactive software

Status: RESOLVED WORKSFORME

(Firefox :: General, defect)

Description

[Tor Steffensen]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.1; nb-NO; rv:1.9.2) Gecko/20100115 Firefox/3.6
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.1; nb-NO; rv:1.9.2) Gecko/20100115 Firefox/3.6

Kasper just report vulnerable applications File: C:\Programfiles (x86)\Mozilla Firefox\firefox.exe

Reproducible: Always

Steps to Reproduce:
1. several scann with kaspersky for vulnerabillities
2. Kaspersky report error SA 40720
3. After several deleted FF and new installation kasper still report this!



I don't know, now the FF wont uninstall or overwrite,kasper report this as highly critical,i have paste link to full report from kaspersky list of scanning report.

http://www.securelist.com/en/advisories/40720

My FF are Norwegian language-here are the link where it was downloaded from-

http://firefox.no/

Comment 1

[Ludovic Hirlimann [:Usul]]

You need to update to the latest version of Firefox use Help -> check for updates.

Comment 2

[Daniel Veditz [:dveditz]]

firefox.no appears to be a legitimate community site, and their download links point at the official Mozilla download server. If you want to be sure, however, go to http://www.mozilla.com/en-US/firefox/all.html

Your version of Firefox, if it's really 3.6 as listed above, is several security updates out of date. If you are going back to the firefox.no site and redownloading I'm not sure how that happens because that site is currently offering the latest version of Firefox. The Kaspersky alert has not found a specific infection in Firefox, it is merely telling you that your copy is old and missing those security updates. The updates were preventive in measure, there were no known attacks, but you are at risk should someone start exploiting the old vulnerabilities.

There is nothing else wrong with your copy of Firefox, so reinstalling the same version is not fixing the problem. Go back to firefox.no or the www.mozilla.com link above and get a newer copy. If you had the old version because you had disabled updates you should re-enable them (and the same for all your software). If updates were disabled because you don't have administrator rights on your machine you should talk with whomever set up your machine for you.

If your firefox is out of date you should check out your plugins as well, computer criminals have been exploiting plugins almost exclusively for the past year, leaving browser vulnerabilities alone for the most part. visit https://www.mozilla.com/en-US/plugincheck/

If you need more help please see http://support.mozilla.com/

Kaspersky doesn't alert for up-to-date copies of Firefox --> worksforme.

Comment 3

[Tor Steffensen]

Yes,i've download FF 3.6.8 from Firefow.no now, this was really a new version,and kasdper is calme now,but the old ff 3.6 had a strange behavier the last couple of days,it was unstable to scroll up and down (when surfing),and had a weird problem to handle ''flash player'' and other stuff,so i thought it was infected some kind of a way,and when kasper marked it.

But it was a FF 3.6 as stated on the Norwegian site,the new one are alså stated 3.6,but in the install wizard 3.6.8 came up,so this a kind of confusing thing,not to tag full versions,and firefox even marked the download file with ''3.6 (2) that is usual an indication of that you already have dowloaded the software on your computer,so it's confusing not to tag the full name of the product.

Well,sorry to bother you guys with this,but now it seem to everything works ok again:)) Regards from Tor Steffensen.