Security → Adobe Shockwave Player 11.5.6.606

right the download is now available but am still waiting on the release notes which should be available soon
do please remember to untick any tools bars offered in this update

»get.adobe.com/shockwave/

All done here, Nick, less Google Toolbar

Security update available for Shockwave Player
Release date: January 19, 2010

Vulnerability identifier: APSB10-03

CVE number: CVE-2009-4002, CVE-2009-4003

Platform: Windows and Macintosh

SummaryCritical vulnerabilities have been identified in Adobe Shockwave Player 11.5.2.602 and earlier versions, on the Windows and Macintosh operating systems. The vulnerabilities could allow an attacker, who successfully exploits the vulnerabilities, to run malicious code on the affected system. Adobe has provided a solution for the reported vulnerabilities. It is recommended that users update their installations to the latest version using the instructions provided below.

Affected software versionsShockwave Player 11.5.2.602 and earlier versions for Windows and Macintosh

SolutionAdobe recommends Shockwave Player users uninstall Shockwave version 11.5.2.602 and earlier on their systems, restart their systems, and install Shockwave version 11.5.6.606, available here: »get.adobe.com/shockwave/.

What's the difference between Shockwave and Flash?

What''s the difference between Shockwave and Flash?

Both Flash and Shockwave are multimedia players. They can give you extended and predictable abilities across a range of browser brands, versions, and platforms.(Sometimes you might hear someone refer to "Shockwave Flash", but these are actually two different multimedia players.)

Flash has a small player which gives it a wider distribution. Flash is included in every Netscape download. Flash also has a very fast startup time. The way the Flash format interleaves media and instructions also helps it start quickly.

Shockwave has a deeper player. It offers multiuser chat, XML parsing, HTML manipulation, an extensive and fast scripting language, distant file retrieval, programmatic control of vector shapes, and bitmap manipulation. It can do many amazing things which browsers cannot do. Its files also stream, but it does not start instantly like Flash does.

Both are ubiquitous. They are distributed in all popular operating systems, browser CDs, and installed on new computers. Flash files can play on more platforms, in large part because its file format is published.

The Shockwave file format is .DCR, and it is created by the Director authoring application. The Flash file format is .SWF, and is created by Flash, FreeHand, Generator, and other tools.
»kb2.adobe.com/cps/139/tn ··· 971.html
Use Flash for interfaces to sites, for quick impact. Use Shockwave for more complex multimedia work, or for web applications that are beyond the browsers' abilities.

I don't recall Adobe/Macromedia ever making that specific recommendation before, so that's a good thing to know.

Thanks for the info, Nick.

Link to the uninstaller, btw: »www.adobe.com/shockwave/ ··· ates/#sp

Does the uninstaller work for WIN7?

Couldn't tell you. There's no listing for Win7 at the link, I see.

In Vista, I used add/remove to remove shockwave player. I rebooted and used IE to install. I can't install it - I have a lot disabled or set to prompt in IE - I got about 22 prompts then the install page, then about 18 prompts (allowing scripts, etc.) then I got a UAC and the information bar. The information bar only brings up the help in IE - I don't get anything to click on to allow the install. Do I have to change my settings to the default to install this?

Thank you.

Sincerely, Libra

You're going to have to allow ActiveX controls to run in order to install it through IE, Libra.

Maybe download the uninstaller and run it first now anyway, though. Couldn't hurt, I don't think.
Then reboot again.

But I have little knowledge of the Vista workings, so maybe you'd prefer to wait for some more concrete advice.

*Edit- gr

Happy New Year's & thanks again Nick!

Thank you Nick.

Thanks Nick!

Hi AB,

Thanks for your reply. I did allow scripting and active x in all of the prompts, but I noticed a setting in IE that said "allow previously unused Active X controls to run without prompt". That didn't sound safe to me and it's only allow or deny. So I have it denied. Also, I have "automatic prompting for active x" denied. I have other things set to prompt and XAML is denied.

This is IE 7.

I think I'll download the uninstaller in the meanwhile.

Sincerely, Libra

How have you been, Libra? You're looking well.

I'm sure someone with a better knowledge of Vista will have some good advice for you-- but I see your screenshot has a notice from IE about your security settings not allowing ActiveX controls, and you will need to allow the Adobe/Shockwave ActiveX control to run in order to get it installed.

Hi AB!

I'm doing pretty good. I hope you're doing well.

I noticed on the link you provided there seems to be an offline installer - I think I'll try that in the meanwhile. Maybe I can install it offline. In any event, I'll be back.

Sincerely, Libra

Adobe Shockwave • Adobe Flash

I was only able to download the installer for Seamonkey. I seem to have a bigger problem with IE and since this is Vista, I wonder if that's a worse problem. Anyway, I changed my settings in IE:

Allow previously unused Active X controls to run without prompt
Run Active X and plugins

This is in the Admin account. I okayed the settings page twice and closed and reopened the browser. I then tried to install Shockwave again. I got the same results as previously (above) and I refreshed the page - this time I got the information bar to click on and told it to install Active X. Then the page went back to the other information bar stating Active X can't run.

I checked the IE settings AND THE SETTINGS I CHANGED WERE NOT CHANGED! I did this again, closed and reopened and browser
and tried to d/l Shockwave again. The settings didn't change again. I don't know what's going on. Maybe I have to go the Microsoft forum and see if anyone knows why I can't change the settings in IE. I'm running Defensewall HIPS but I don't think that would countrol my admin settings in IE.

So I'm stuck.

EDIT: I finally got it to install. I turned off Defensewall and was then able to change the two settings in IE and did install it. To install in Seamonkey I had to "run as trusted" via Defensewall.

Sincerely, Libra

Thanks muchly, Nick!

Shockwave still exists?!?!

Just joking there but it's been such a long time since I installed it.

Actually, after I replied to Nick, I decided to just uninstall the danged thing and be done with it, instead of repeatedly updating it... I can't recall the last time I used it. If I need it, I know where to get the latest version.

Thanks for the update Nick!

Thanks Nick!
Followed Adobes instructions.
Works well on IE8 and Opera 10.10

Just a reminder for anyone who cares:

If you go to the Shockwave testing page, you can right-click on the animation and de-select if you like any of the three pre-checked boxes regarding sending so-called "anonymous" usage stats, being notified about updates, and allowing backwards compatibility.

»www.adobe.com/shockwave/welcome/

AB, I forgot all about that. While in the process of changing those settings I discovered that although Shockwave appeared to be installed on the XP computer (in IE's Objects) it didn't show up in the test page! I downloaded the uninstaller (thank you for that link too), rebooted, turned off DefenseWall and installed it again. Now it's installed with proper settings. Needless to say, I'm really glad you posted that link!

Sincerely, Libra

I can't see the DIS-advantage of UN-checking "allow backwards compatibility" ? Do you?

Actually, no.
But that's just me and based solely on my own configurations and experiences.

I use a screensaver that requires Shockwave, and I've been using it for maybe three years. It doesn't get updated, and so was obviously created with an older version of Shockwave.
It still works fine with 'allow backwards compatibility' unchecked.

Not only that, but this new release of Shockwave fixes a security vulnerability.
I'm unclear on why I would want to install the newer, more secure version, then allow code to run that takes advantage of an older, less secure version.

But as I said-- that's just me, and just my attitude.