Topic 'Re: Adobe Flash Player 11.5.502.110' in forum 'Security' - dslreports.com

Re: Adobe Flash Player 11.5.502.110

Sat, 10 Nov 2012 01:20:49 EDT

rcdailey posted : Thanks for the heads up. I got it.

Re: Adobe Flash Player 11.5.502.110

Sat, 10 Nov 2012 00:29:26 EDT

uridium posted : I usually boot once, maybe twice a day. I mostly select sleep if I'm away from the PC. I will wait and see if/when Secunia PSI warns me that it needs to be patched. If the Automatic updates haven't worked by then I will do it manually from then on. It's no big deal as I visit dslreports every day and Adobe updates are always mentioned if a new version is out. It would just be nice that the Automatic feature would update the same day a patch is released, rather than a few days down the line. :)

Re: Adobe Flash Player 11.5.502.110

Fri, 09 Nov 2012 18:10:10 EDT

Mele20 posted : How often do you boot/reboot? That's when it happens and, yeah, it can take several days or longer to do it automatically.
--
When governments fear people, there is liberty. When the people fear the government, there is tyranny. Thomas Jefferson

Re: Adobe Flash Player 11.5.502.110

Fri, 09 Nov 2012 18:02:57 EDT

uridium posted : I've got Allow Abode to install updates checked and I'm still on 11.4.402.287. I guess it takes a few days to update. :mad: Unless this update is specific to Windows 8.

Re: Adobe Flash Player 11.5.502.110

Fri, 09 Nov 2012 02:41:54 EDT

ltsnow posted : Added the two new files to my nifty little bat file to remove the stuff I don't want:

sc delete AdobeFlashPlayerUpdateSvc
del C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Schtasks /delete /TN "Adobe Flash Player Updater"
del C:\WINDOWS\system32\Macromed\Flash\activex.vch
del C:\WINDOWS\system32\Macromed\Flash\plugin.vch

Also, there is a new beta version 11.5.502.113:

»labs.adobe.com/downloads/flashpl···1-5.html

Re: Adobe Flash Player 11.5.502.110

Thu, 08 Nov 2012 00:15:16 EDT

Mele20 posted :

said by Sindows 7:

Ya what are those?
Somthing to do with certificates?

Read this post earlier in the thread:
»Re: Adobe Flash Player 11.5.502.110

Those two files are for static linking of DRM...Adobe marries Microsoft...what else would you expect? :(
--
When governments fear people, there is liberty. When the people fear the government, there is tyranny. Thomas Jefferson

Re: Adobe Flash Player 11.5.502.110

Wed, 07 Nov 2012 23:53:49 EDT

siljaline posted : Interesting point on the MS take on Flash. I've yet to find a compelling reason to use Silverlight on this Win 7 machine.

Re: Adobe Flash Player 11.5.502.110

Wed, 07 Nov 2012 21:43:19 EDT

Sindows 7 posted :

said by Dustyn:

said by Sindows 7 :

Looks promising... :p
Resolved yet?

Corrupt download I guess, I dont like it though.
My uninstaller wouldn't work either (yes flash was not running) I had to dowload another unistaller.

said by merlock:

OK, so the new version has also put a file that I've never seen: C:\Windows\System32\Macromed\Flash\activex.vch and
C:\Windows\SysWOW64\Macromed\Flash\activex.vch

Any ideas? Still going to quarantine them.

Ya what are those?
Somthing to do with certificates?

Re: Adobe Flash Player 11.5.502.110

Wed, 07 Nov 2012 21:39:52 EDT

Sindows 7 posted :

said by siljaline:

Adobe, now Married to Microsoft moves Flash updates to Patch Tuesday

Says lots for Silverlight.

Re: Adobe Flash Player 11.5.502.110

Wed, 07 Nov 2012 21:38:47 EDT

Sindows 7 posted :

said by Mele20:

Ghostery blocks redirects to ad sites when I try to check to see the current version of Flash and then blocks redirects to MORE, DIFFERENT ad sites after I install the latest version and try to check to see if it is working correctly. I have never seen Ghostery do this in the past.

edit: I see why Ghostery did that. That is that damn HSTS Preload crap shit on Fx 10 ESR. I didn't even notice that Adobe is now HTTPS on Fx. BUT on IE8 I get HTTP for Adobe and the site is filtered through Proxo so I have toggle switches for Adobe Flash. Proxo is bypassed for HTTPS sites, but I guess I am going to finally have to break down and install the files for Proxo to do HTTPS filtering. Damn Mozilla! There has got to be a way to turn this off on Fx. It is NOT in Opera yet although it was reported in this forum as being in Opera 12.02 but that is not true. It's just Mozilla and Google pushing this and it makes for a huge mess in Firefox especially earlier versions of Fx.

Opera 12.02 says the https (HSTS Preload crap) version of Adobe's Flash "about" page is INSECURE. Opera asked me about two nasty ad sites that were using certs from Cert Authorities that I have UNtrusted in Certificate Manager. That explains Ghostery blocking them on Fx 10. Fx 10 simply accepted the certs without first asking me about them even though I have those Cert Authorities UNtrusted on Fx also. Fx is now completely unreliable when it comes to HSTS Preload sites.

Adobe has insecure stuff on thier own site?

Re: Adobe Flash Player 11.5.502.110

Wed, 07 Nov 2012 20:21:49 EDT

siljaline posted : Adobe, now Married to Microsoft moves Flash updates to Patch Tuesday

Re: Adobe Flash Player 11.5.502.110

Wed, 07 Nov 2012 20:21:32 EDT

Juggernaut posted : I'm getting tired of the Adobe constant update crap with Flash. I think it's time to just do an uninstall, and be done. :huh:
--
I'm not anti-social, I just don't like stupid people.

Re: Adobe Flash Player 11.5.502.110

Wed, 07 Nov 2012 20:04:26 EDT

Mele20 posted : It had that and another ADS but I didn't check it closely and I have deleted those files so I can't look at it now.

Re: Adobe Flash Player 11.5.502.110

Wed, 07 Nov 2012 19:40:27 EDT

OZO posted : Do you mean :Zone.Identifier ADS?

Re: Adobe Flash Player 11.5.502.110

Wed, 07 Nov 2012 18:40:09 EDT

Mele20 posted : There are two ADS files included in both of those (activex.vch and plugin.vch). I could have deleted just the ADS but I too don't do DRM stuff so I deleted both entire files not just the hidden ADS files.
--
When governments fear people, there is liberty. When the people fear the government, there is tyranny. Thomas Jefferson

Re: Adobe Flash Player 11.5.502.110

Wed, 07 Nov 2012 17:08:11 EDT

Libra posted : Thanks antdude! I installed it on three computers.

Sincerely, Libra

Re: Adobe Flash Player 11.5.502.110

Wed, 07 Nov 2012 14:33:20 EDT

OZO posted :

said by LaRRY_PEpPeR:

said by StuartMW:

Here's some actual figures from files (.exe) I have.

(32-bit only)11.1.102.63           3,767,45611.1.102.63 (IE)      3,804,320 (32/64-bit)11.4.402.287 (IE)     9,575,86411.4.402.287         10,220,472 (32/64-bit)11.5.502.110 (IE)    15,734,20011.5.502.110         16,361,912

The latest installers are about 1.6x bigger.

»helpx.adobe.com/en/flash-player/···features

"• Static linking of DRM (Desktop only)*

* Note: Static linking of DRM contributes to the increase in size of the Flash Player binary."

LaRRY_PEpPeR , thank you for the reference. I'm not going to watch DRM protected porn. Now both files (activex.vch and plugin.vch) are removed. I'm trying to keep my computers DRM-free.

--
Keep it simple, it'll become complex by itself...

Re: Adobe Flash Player 11.5.502.110

Wed, 07 Nov 2012 10:26:35 EDT

therube posted : I could be wrong, but it seems in the past, after install, you were given the option on how you want to update. Now it looks like if you are already set for automatic updates, you are no longer provided that dialog. If you have turned off automatic updates, then you are still prompted.

Re: Adobe Flash Player 11.5.502.110

Wed, 07 Nov 2012 10:18:44 EDT

LaRRY_PEpPeR posted :

said by StuartMW:

Here's some actual figures from files (.exe) I have.

(32-bit only)11.1.102.63           3,767,45611.1.102.63 (IE)      3,804,320 (32/64-bit)11.4.402.287 (IE)     9,575,86411.4.402.287         10,220,472 (32/64-bit)11.5.502.110 (IE)    15,734,20011.5.502.110         16,361,912

The latest installers are about 1.6x bigger.

»helpx.adobe.com/en/flash-player/···features

"• Static linking of DRM (Desktop only)*

* Note: Static linking of DRM contributes to the increase in size of the Flash Player binary."

Re: Adobe Flash Player 11.5.502.110

Wed, 07 Nov 2012 10:16:45 EDT

antdude posted :

said by therube:

Perhaps something to do with DRM?

»www.adobe.com/go/flashaccess_cp
which rolls over to
»www.adobe.com/misc/pdfs/FlashAccess_CP.pdf
which isn't there

Adobe Flash Access Runtime and DRM

Adobe Access / FAQ

(If I can't watch my porn unrestricted, I just won't watch!)

Ugh. I thought it had some DRM before?
--
Ant @ AQFL.net and AntFarm.ma.cx. Please do not IM/e-mail me for technical support. Use this forum or better, »community.norton.com ! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer.

Re: Adobe Flash Player 11.5.502.110

Wed, 07 Nov 2012 10:14:32 EDT

antdude posted :

said by StuartMW:

Thanks. I actually checked for updates about an hour ago...

»www.free-codecs.com/download/Ado···ayer.htm told me there were newer versions. :D

Re: Adobe Flash Player 11.5.502.110

Wed, 07 Nov 2012 10:10:36 EDT

therube posted : Perhaps something to do with DRM?

»www.adobe.com/go/flashaccess_cp
which rolls over to
»www.adobe.com/misc/pdfs/FlashAccess_CP.pdf
which isn't there

Adobe Flash Access Runtime and DRM

Adobe Access / FAQ

(If I can't watch my porn unrestricted, I just won't watch!)

Re: Adobe Flash Player 11.5.502.110

Wed, 07 Nov 2012 04:53:04 EDT

Mele20 posted : Ghostery blocks redirects to ad sites when I try to check to see the current version of Flash and then blocks redirects to MORE, DIFFERENT ad sites after I install the latest version and try to check to see if it is working correctly. I have never seen Ghostery do this in the past.

edit: I see why Ghostery did that. That is that damn HSTS Preload crap shit on Fx 10 ESR. I didn't even notice that Adobe is now HTTPS on Fx. BUT on IE8 I get HTTP for Adobe and the site is filtered through Proxo so I have toggle switches for Adobe Flash. Proxo is bypassed for HTTPS sites, but I guess I am going to finally have to break down and install the files for Proxo to do HTTPS filtering. Damn Mozilla! There has got to be a way to turn this off on Fx. It is NOT in Opera yet although it was reported in this forum as being in Opera 12.02 but that is not true. It's just Mozilla and Google pushing this and it makes for a huge mess in Firefox especially earlier versions of Fx.

Opera 12.02 says the https (HSTS Preload crap) version of Adobe's Flash "about" page is INSECURE. Opera asked me about two nasty ad sites that were using certs from Cert Authorities that I have UNtrusted in Certificate Manager. That explains Ghostery blocking them on Fx 10. Fx 10 simply accepted the certs without first asking me about them even though I have those Cert Authorities UNtrusted on Fx also. Fx is now completely unreliable when it comes to HSTS Preload sites.

--
When governments fear people, there is liberty. When the people fear the government, there is tyranny. Thomas Jefferson

Re: Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 23:01:48 EDT

OZO posted : It looks like it's a database. But why Flash needs a database?

I'll put both files (activex.vch and plugin.vch) into Quarantine folder and see how it goes...
--
Keep it simple, it'll become complex by itself...

Re: Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 21:40:56 EDT

merlock posted : OK, so the new version has also put a file that I've never seen: C:\Windows\System32\Macromed\Flash\activex.vch and
C:\Windows\SysWOW64\Macromed\Flash\activex.vch

Any ideas? Still going to quarantine them.

Re: Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 21:06:27 EDT

TekWest posted : I just logged on to ask when do they update the "Flash Player Distribution" page but they just did! lol

Thanks guys! :)

Re: Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 18:52:24 EDT

pokesph posted : got it and updated both my Firefox and IE browsers.

Thanks

Re: Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 17:51:34 EDT

Dustyn posted : Thank you! :)
And thanks for the distribution link.

Re: Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 17:51:02 EDT

Dustyn posted :

said by Sindows 7 :

Looks promising... :p
Resolved yet?

Re: Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 17:30:50 EDT

OZO posted : They've explained the previous growth with packing both 32 and 64 versions in one package. But what is this time? What else did they include into the package? They certainly did, but that is it?
--
Keep it simple, it'll become complex by itself...

Re: Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 17:23:28 EDT

StuartMW posted : Here's some actual figures from files (.exe) I have.

(32-bit only)11.1.102.63           3,767,45611.1.102.63 (IE)      3,804,320 (32/64-bit)11.4.402.287 (IE)     9,575,86411.4.402.287         10,220,472 (32/64-bit)11.5.502.110 (IE)    15,734,20011.5.502.110         16,361,912

The latest installers are about 1.6x bigger.

--
Don't feed trolls--it only makes them grow!

Re: Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 16:53:37 EDT

OZO posted : Got it updated over v11.4.402.265.
Why the new packages are almost x2 bigger?
--
Keep it simple, it'll become complex by itself...

Re: Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 15:53:07 EDT

StuartMW posted :

said by redwolfe_98:

"For users of Flash Player 10.3.183.29 and earlier versions for Windows and Macintosh, who cannot update to Flash Player 11.5.502.110, Adobe has made available the update Flash Player 10.3.183.43"

You've made Mele20 's day :D
--
Don't feed trolls--it only makes them grow!

Re: Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 15:49:12 EDT

redwolfe_98 posted : "For users of Flash Player 10.3.183.29 and earlier versions for Windows and Macintosh, who cannot update to Flash Player 11.5.502.110, Adobe has made available the update Flash Player 10.3.183.43" :)
- - - - - - - - - - -
"Adobe would like to thank the following individuals and organizations for reporting the relevant issues and for working with Adobe to help protect our customers:

Mateusz Jurczyk, Gynvael Coldwind, and Fermin Serna of the Google Security Team (CVE-2012-5274, CVE-2012-5275, CVE-2012-5276, CVE-2012-5277, CVE-2012-5279, CVE-2012-5280)

Eduardo Vela Nava of the Google Security Team (CVE-2012-5278)"

Re: Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 15:40:24 EDT

siljaline posted : Thanks, antdude

Adobe Ships Election Day Security Update for Flash

• As always, beware of third-party toolbars, Google Chrome, etc.

Re: Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 15:29:51 EDT

art22gg posted : Thanks antdude... :D

Re: Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 15:26:16 EDT

Sindows 7 posted :

Re: Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 13:53:56 EDT

therube posted : So that is just wonderful!

Adobe, Mozilla, Opera & IE 9 & below are at 11.5.502.110.
IE 10 uses 11.3.376.12.
& Chrome, who knows.

Well surely that won't lead to confusion.
And MS has clearly identified just which exploits are covered by their release. Glad it makes it easy to confirm that everything noted in the Adobe notes corresponds with MS's :huh:.

Re: Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 13:18:57 EDT

StuartMW posted : Win8 IE10 flash updates.

Update for Internet Explorer Flash Player for Windows 8 (KB2770041)

Update for Internet Explorer Flash Player for Windows 8 x64 (KB2770041)
--
Don't feed trolls--it only makes them grow!

Re: Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 12:25:50 EDT

angussf posted :

said by Blackbird:

said by angussf:

Nothing on the Adobe Security Bulletins page yet, so we don't know why this was released.

It's up now... Security updates available for Adobe Flash Player - Release date: November 6, 2012 - Vulnerability identifier: APSB12-24

@Blackbird -- Yep:

Adobe has released security updates for Adobe Flash Player 11.4.402.287 and earlier versions for Windows and Macintosh, Adobe Flash Player 11.2.202.243 and earlier versions for Linux, Adobe Flash Player 11.1.115.20 and earlier versions for Android 4.x, and Adobe Flash Player 11.1.111.19 and earlier versions for Android 3.x and 2.x. These updates address vulnerabilities that could cause a crash and potentially allow an attacker to take control of the affected system.

Adobe recommends users update their product installations to the latest versions:

* Users of Adobe Flash Player 11.4.402.287 and earlier versions for Windows and Macintosh should update to Adobe Flash Player 11.5.502.110.

--
Angus S-F
GeoApps, Tucson, Arizona, USA
»geoapps.com/
»www.linkedin.com/in/angussf
»geoapps.blogspot.com/

Re: Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 11:30:37 EDT

planet posted : Thank you antdude,
The installation file certainly grew, almost 16 MB now...whew!

Re: Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 11:17:26 EDT

StuartMW posted : Well I guess ya should all ignore my election predictions then... :D
--
Don't feed trolls--it only makes them grow!

Re: Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 11:15:28 EDT

Blackbird posted :

said by angussf:

Nothing on the Adobe Security Bulletins page yet, so we don't know why this was released.

It's up now... Security updates available for Adobe Flash Player - Release date: November 6, 2012 - Vulnerability identifier: APSB12-24
--
"Is life so dear, or peace so sweet, as to be purchased at the price of chains and slavery? Forbid it, Almighty God!" -- P.Henry, 1775

Re: Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 11:10:48 EDT

StuartMW posted : Well they release a new version every few weeks just for the hell of it :D

Since the minor version number bumped from 4 to 5 I suspect some non-security change.
--
Don't feed trolls--it only makes them grow!

Re: Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 10:53:05 EDT

angussf posted : Nothing on the Adobe Security Bulletins page yet, so we don't know why this was released.

Re: Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 10:48:46 EDT

Triple Helix posted : Thanks antdude .

TH ;)

Re: Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 09:52:25 EDT

StuartMW posted : Thanks. I actually checked for updates about an hour ago...
--
Don't feed trolls--it only makes them grow!

Adobe Flash Player 11.5.502.110

Tue, 06 Nov 2012 09:38:15 EDT

antdude posted : »get.adobe.com/flashplayer/
»www.adobe.com/special/products/f···on3.html

Thanks to »www.free-codecs.com/download/Ado···ayer.htm ... ;)