Skip to main content
Participant
June 25, 2018
Question

Adobe Flash Security Alert

  • June 25, 2018
  • 2 replies
  • 746 views

Hi,

A security scan has return ed multiple instances of:

Adobe Flash Player <= 29.0.0.113 (APSB18-08) (108958)

The solution is to Upgrade to Adobe Flash Player version 29.0.0.140 or later.All servers (2012 R2) are on a later version than 29.0.0.140 and when i look in the registry it shows the correct version.

However when i query the version via a PowerShell script it returns an old version of 28.xxxxx which is probably why the security alert is being generated.

Anyone have any ideas why the PowerShell script would be retruning false results? It has to be collecting the data from somewhere and obviously thinks it is accurate.

Thanks

    This topic has been closed for replies.

    2 replies

    jeromiec83223024
    Inspiring
    June 25, 2018

    Also, the current Flash Player version is 30.0.0.113.  We'd strongly recommend that you keep Flash Player current to the extent possible.

    _maria_
    Legend
    June 25, 2018

    It's possible the different versions are for different Flash Player types (e.g. ActiveX for IE, NPAPI for Firefox, PPAPI for Chromium-based browsers).

    Microsoft embeds Flash Player ActiveX in IE on Server 2012 and all updates are distributed via Windows Update.

    when i look in the registry it shows the correct version

    Which registry entry are you looking at?

    i query the version via a PowerShell script it returns an old version of 28.xxxxx

    What registry entries is the PowerShell script using to check the version?

    The Flash Player Settings Manager Updates tab will display which Flash Player types are installed and the version for each type. Please post a screenshot of this.  To open the Flash Player Settings Manger, go to Control Panel\All Control Panel Items\Programs and Features > Flash Player and then click on the Updates tab

    Participant
    June 25, 2018

    Flash Player and Flash Player ActiveX are both 30.0.0.113 (this months patching has just been done so Security Updates are done every month.

    This is where I check in the reg:

    When I run a script querying the reg using Get-ItemProperty -Path HKLM:\Software\Macromedia\FlashPlayer it returns 18.0.0.203

    I have also checked all versions of flash.ocx in System32 and SysWOW64.

    No Firefox, Chrome or other browsers are installed.

    Thanks for your help

    Participant
    June 26, 2018

    I should add the Security Scan returns the version as:

    Installed version : 28.0.0.137

    I have resolved the problem with the PowerShell script. It was returning the wrong version from the location i was running it.

    What is the last Security Update released for windows Server 2008 R2 with IE 11 the version installed is 28.0.0.126