Secunia PSI security scan raises some questions

[leoliver]

Hi Everyone,

I ran a scan with Secunia PSI v1.0.0.1 software . For those who haven't
heard of
Secunia PSI ( http://secunia.com/ ) it's freeware that searches for insecure
or UN-patched software that could be exploited by hackers.
My Secunia PSI scan gave highly critical level 4 security warnings for
old versions of Windows Media player that were detected on my computer . I'm
using WMP 11,
but Secunia PSI found both a Windows Media Player 5.x , at
c:\I386\MPLAY32.EXE and at c:\WINDOWS\SYSTEM32\mplay32.exe .
Also, a Microsoft Windows Media Player 6.x , at c:\I386\MPLAYER2.EXE , and
at c:\Program Files\Windows Media Player\mplayer2.exe .
There was also a Microsoft Windows Media Player 8.x , at
c:\I386\WMPLAYER.EXE .
I only show a WMP 11 , and a WMP Firefox plug in as installed WMP programs .
So why are files from other WMP versions still on my computer ? Does WMP 11
require them ? Or if there not needed can they be safely installed ?
Feed back will be appreciated .
Thank You.

 

[David H. Lipman]

From: "leoliver" <[email protected]>



| Hi Everyone,

| I ran a scan with Secunia PSI v1.0.0.1 software . For those who haven't
| heard of
| Secunia PSI ( http://secunia.com/ ) it's freeware that searches for insecure
| or UN-patched software that could be exploited by hackers.
| My Secunia PSI scan gave highly critical level 4 security warnings for
| old versions of Windows Media player that were detected on my computer . I'm
| using WMP 11,
| but Secunia PSI found both a Windows Media Player 5.x , at
| c:\I386\MPLAY32.EXE and at c:\WINDOWS\SYSTEM32\mplay32.exe .
| Also, a Microsoft Windows Media Player 6.x , at c:\I386\MPLAYER2.EXE , and
| at c:\Program Files\Windows Media Player\mplayer2.exe .
| There was also a Microsoft Windows Media Player 8.x , at
| c:\I386\WMPLAYER.EXE .
| I only show a WMP 11 , and a WMP Firefox plug in as installed WMP programs .
| So why are files from other WMP versions still on my computer ? Does WMP 11
| require them ? Or if there not needed can they be safely installed ?
| Feed back will be appreciated .
| Thank You.


Just delete those files deemd to have vulnerabilities.

 

[Nepatsfan]

Hi Everyone,

I ran a scan with Secunia PSI v1.0.0.1 software . For those who haven't
heard of
Secunia PSI ( http://secunia.com/ ) it's freeware that searches for
insecure
or UN-patched software that could be exploited by hackers.
My Secunia PSI scan gave highly critical level 4 security warnings for
old versions of Windows Media player that were detected on my computer .
I'm
using WMP 11,
but Secunia PSI found both a Windows Media Player 5.x , at
c:\I386\MPLAY32.EXE and at c:\WINDOWS\SYSTEM32\mplay32.exe .
Also, a Microsoft Windows Media Player 6.x , at c:\I386\MPLAYER2.EXE ,
and
at c:\Program Files\Windows Media Player\mplayer2.exe .
There was also a Microsoft Windows Media Player 8.x , at
c:\I386\WMPLAYER.EXE .
I only show a WMP 11 , and a WMP Firefox plug in as installed WMP
programs .
So why are files from other WMP versions still on my computer ? Does WMP
11
require them ? Or if there not needed can they be safely installed ?
Feed back will be appreciated .
Thank You.

First off, those are legitimate Windows files. I'd guess that they're part
of Windows XP to maintain compatibility with older types of media files.

The files located in the C:\I386 folder can probably be deleted but I think
you'll find that if you try to delete the other files they'll simply be
replaced by Windows File Protection.

I just ran Secunia PSI v1.0.0.1 on this computer and those files showed up
under the Patched tab. My guess is that your computer is missing an update
or two from Microsoft. You might want to right click each file and select
Properties from the menu. Click on the Version tab and see if they match the
following info.

C:\WINDOWS\system32\mplay32.exe Version 5.1.2600.5512

C:\Program Files\Windows Media Player\mplayer2.exe Version 6.4.9.1126

Just out of curiosity, did you click on the Download Solution button for
those files?

Good luck

Nepatsfan

 

[leoliver]

". Click on the Version tab and see if they match the
following info."
The versions numbers matched .

"Just out of curiosity, did you click on the Download Solution button
for
those files? "
The "Download Solution button" was greyed out on those files. It had no
solutions available

 

[Allan]

Hi Everyone,

I ran a scan with Secunia PSI v1.0.0.1 software . For those who haven't
heard of
Secunia PSI ( http://secunia.com/ ) it's freeware that searches for
insecure
or UN-patched software that could be exploited by hackers.
My Secunia PSI scan gave highly critical level 4 security warnings for
old versions of Windows Media player that were detected on my computer .
I'm
using WMP 11,
but Secunia PSI found both a Windows Media Player 5.x , at
c:\I386\MPLAY32.EXE and at c:\WINDOWS\SYSTEM32\mplay32.exe .
Also, a Microsoft Windows Media Player 6.x , at c:\I386\MPLAYER2.EXE ,
and
at c:\Program Files\Windows Media Player\mplayer2.exe .
There was also a Microsoft Windows Media Player 8.x , at
c:\I386\WMPLAYER.EXE .
I only show a WMP 11 , and a WMP Firefox plug in as installed WMP
programs .
So why are files from other WMP versions still on my computer ? Does WMP
11
require them ? Or if there not needed can they be safely installed ?
Feed back will be appreciated .

For all problems encountered using Secunia PSI they have established a
"community forum" which you can join (registration required).
http://secunia.com/community/profile/
The Secunia PSI may not always be completely accurate but it can certainly
help you to identify "unpatched" software along with other products such as
Belarc Advisor or F-Secure Health Check.

 

[Nepatsfan]

It sounds as if you have the latest versions of those files on your
computer. As has already been suggested, you might want to post a question
on the Secunia forum asking why those files are being flagged as a problem.

BTW, I ran Secunia PSI on two other XP installations and neither reported a
problem with those files. They're listed on the Patched tab when you run the
program in the Advanced Interface Mode.

Nepatsfan