Adobe AIR?

[Rube Bumpkin]

Does Anyone have any info about Adobe AIR? It was tagged as insecure by
Secunia. I Googled it, and it's some sort of runtime solution that
allows web applications to run outside the browser.

I don't know exactly when it was installed on my system (I have 4 kids),
or why. When I removed it, with Add/Remove, my PC suddenly rebooted. I'm
running my weekly scans, and may know more soon.

Since the removal and reboot, Secunia is still finding it, so it look
likw I'll be doing some scrubbing.

RB

[siljaline]

Rube Bumpkin wrote:
> Does Anyone have any info about Adobe AIR? It was tagged as insecure by
> Secunia. I Googled it, and it's some sort of runtime solution that
> allows web applications to run outside the browser.
>
> I don't know exactly when it was installed on my system (I have 4 kids),
> or why. When I removed it, with Add/Remove, my PC suddenly rebooted. I'm
> running my weekly scans, and may know more soon.
>
> Since the removal and reboot, Secunia is still finding it, so it look
> likw I'll be doing some scrubbing.

Secunia is false-flagging it, it's fluff and bundled with a recent Adobe Flash Player
Upgrade - likely Flash Player 10 ActiveX.
See >
http://www.adobe.com/products/air/faq/

Assuming XP, you might want to consider setting-up limited user accounts for
the Kids so they can't download whatever fluff is required as they randomly smurf
the Net.

Silj

--
"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_

[Andy Walker]

siljaline wrote:

>Rube Bumpkin wrote:
>> Does Anyone have any info about Adobe AIR? It was tagged as insecure by
>> Secunia. I Googled it, and it's some sort of runtime solution that
>> allows web applications to run outside the browser.
>>
>> I don't know exactly when it was installed on my system (I have 4 kids),
>> or why. When I removed it, with Add/Remove, my PC suddenly rebooted. I'm
>> running my weekly scans, and may know more soon.
>>
>> Since the removal and reboot, Secunia is still finding it, so it look
>> likw I'll be doing some scrubbing.
>
>Secunia is false-flagging it, it's fluff and bundled with a recent Adobe Flash Player
>Upgrade - likely Flash Player 10 ActiveX.
>See >
>http://www.adobe.com/products/air/faq/
>
>Assuming XP, you might want to consider setting-up limited user accounts for
>the Kids so they can't download whatever fluff is required as they randomly smurf
>the Net.
>
>Silj

It also loads with Adobe Reader 9.

[siljaline]

Andy Walker wrote:
> siljaline wrote:
>
>>Rube Bumpkin wrote:
>>> Does Anyone have any info about Adobe AIR? It was tagged as insecure by
>>> Secunia. I Googled it, and it's some sort of runtime solution that
>>> allows web applications to run outside the browser.
>>>
>>> I don't know exactly when it was installed on my system (I have 4 kids),
>>> or why. When I removed it, with Add/Remove, my PC suddenly rebooted. I'm
>>> running my weekly scans, and may know more soon.
>>>
>>> Since the removal and reboot, Secunia is still finding it, so it look
>>> likw I'll be doing some scrubbing.
>>
>>Secunia is false-flagging it, it's fluff and bundled with a recent Adobe Flash Player
>>Upgrade - likely Flash Player 10 ActiveX.
>>See >
>>http://www.adobe.com/products/air/faq/
>>
>>Assuming XP, you might want to consider setting-up limited user accounts for
>>the Kids so they can't download whatever fluff is required as they randomly smurf
>>the Net.
>>
>>Silj
>
> It also loads with Adobe Reader 9.

Thanks, Andy - it is fluff, just dumped it off my box, appears to be of no consequence.
To Flash enabled sites.

Silj

--
"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_

[Alan]

siljaline wrote:
> Andy Walker wrote:
>> siljaline wrote:
>>
>>> Rube Bumpkin wrote:
>>>> Does Anyone have any info about Adobe AIR? It was tagged as insecure by
>>>> Secunia. I Googled it, and it's some sort of runtime solution that
>>>> allows web applications to run outside the browser.
>>>>
>>>> I don't know exactly when it was installed on my system (I have 4 kids),
>>>> or why. When I removed it, with Add/Remove, my PC suddenly rebooted. I'm
>>>> running my weekly scans, and may know more soon.
>>>>
>>>> Since the removal and reboot, Secunia is still finding it, so it look
>>>> likw I'll be doing some scrubbing.
>>> Secunia is false-flagging it, it's fluff and bundled with a recent Adobe Flash Player
>>> Upgrade - likely Flash Player 10 ActiveX.
>>> See >
>>> http://www.adobe.com/products/air/faq/
>>>
>>> Assuming XP, you might want to consider setting-up limited user accounts for
>>> the Kids so they can't download whatever fluff is required as they randomly smurf
>>> the Net.
>>>
>>> Silj
>> It also loads with Adobe Reader 9.
>
> Thanks, Andy - it is fluff, just dumped it off my box, appears to be of no consequence.
> To Flash enabled sites.
>
> Silj
>
You only need AIR if you run an application that requires it.
E.g., if you subscribe to NFL Ticket with DirectV and access the
games via the NFL SUpercast application on a computer then you
would need AIR.

[Rube Bumpkin]

Andy Walker wrote:
> siljaline wrote:
>
>> Rube Bumpkin wrote:
>>> Does Anyone have any info about Adobe AIR? It was tagged as insecure by
>>> Secunia. I Googled it, and it's some sort of runtime solution that
>>> allows web applications to run outside the browser.
>>>
>>> I don't know exactly when it was installed on my system (I have 4 kids),
>>> or why. When I removed it, with Add/Remove, my PC suddenly rebooted. I'm
>>> running my weekly scans, and may know more soon.
>>>
>>> Since the removal and reboot, Secunia is still finding it, so it look
>>> likw I'll be doing some scrubbing.
>> Secunia is false-flagging it, it's fluff and bundled with a recent Adobe Flash Player
>> Upgrade - likely Flash Player 10 ActiveX.
>> See >
>> http://www.adobe.com/products/air/faq/
>>
>> Assuming XP, you might want to consider setting-up limited user accounts for
>> the Kids so they can't download whatever fluff is required as they randomly smurf
>> the Net.
>>
>> Silj
>
> It also loads with Adobe Reader 9.

Aha! It was me. Secunia also told me to upgrade to Reader 9.

[Rube Bumpkin]

<SNIP>
> Assuming XP, you might want to consider setting-up limited user accounts for
> the Kids so they can't download whatever fluff is required as they randomly smurf
> the Net.
>
> Silj
>

I did that, at one point, but then I spent a lot of time installing
stuff that they needed. I travel a lot on business, so I'm quite often
gone Monday to Friday. LUA's were a real PITA.

The kids have gotten pretty good. One is now at university (in
engineering), and her on-campus job is computer tech support. Another
has his own laptop, and went through a couple of infections. Now he runs
scans more often than I do.

RB

[David H. Lipman]

From: "Rube Bumpkin" <Someone@somewhere.world>

| Does Anyone have any info about Adobe AIR? It was tagged as insecure by
| Secunia. I Googled it, and it's some sort of runtime solution that
| allows web applications to run outside the browser.

| I don't know exactly when it was installed on my system (I have 4 kids),
| or why. When I removed it, with Add/Remove, my PC suddenly rebooted. I'm
| running my weekly scans, and may know more soon.

| Since the removal and reboot, Secunia is still finding it, so it look
| likw I'll be doing some scrubbing.

| RB

** Secunia is not "false-flagging" which was suggested.



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

US-CERT Current Activity

Adobe Releases Update for AIR

Original release date: November 18, 2008 at 8:03 am Last revised:
November 18, 2008 at 8:03 am


Adobe has released a security bulletin to address a vulnerability in
Adobe AIR. This vulnerability can be triggered if an Adobe AIR
application loads data from an untrusted source. Exploitation of this
vulnerability may allow a remote attacker to execute JavaScript code
with elevated privileges.

US-CERT encourages users to review Adobe Security Bulletin APSB08-23 and
upgrade to Adobe AIR 1.5 to help mitigate the risks.

Relevant Url(s):
< http://get.adobe.com/air/ >

< http://www.adobe.com/support/securit...apsb08-23.html >

====
This entry is available at
http://www.us-cert.gov/current/index...update_for_air

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iQEVAwUBSSLDKHIHljM+H4irAQJg0QgAkQkwIQH+6jLMglb0Yc TAhrOXuamafclL
+vj7YDTcfxZYtH/LWHoMwblN0JPaRXC2+Ksk6u4JB/xskZHeuFa7IlZx3qt7TUHx
zMS7viMmu8JHNO9wXOL+fKKSo7xTtxDMH3naDvuFwXUOdmoNue eCABqlv8a4F5hX
UUPDs3EPj4N64M6+8JNmrsddwG7gTo04GQOQ0wdZEtwfcOyGmh NB7x/q8O9qCEyx
XXjIOotLTmprIu4M2hk3/WGND3M05nRIYd4UgtVExEITB+tdvSKRBjUVSch9a4eB
tXZVChtVGbZqehZzTB+Mn7rGEvS1Bv9DQpWB+Xro/Hp11xDnlAsMDg==
=P/ZU
-----END PGP SIGNATURE-----


This comes bundled with Adobe Reader 9 if you download the installer from www.adobe.com.
However you can download the unbundled Adode Reader installer from the Adobe FTP server.

I am also afraid it may be bundled in Adobe Acrobat 9.
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Air

To what degree... I don't know.



--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

[siljaline]

Rube Bumpkin wrote:
> <SNIP>
>> Assuming XP, you might want to consider setting-up limited user accounts for
>> the Kids so they can't download whatever fluff is required as they randomly smurf
>> the Net.

> I did that, at one point, but then I spent a lot of time installing
> stuff that they needed. I travel a lot on business, so I'm quite often
> gone Monday to Friday. LUA's were a real PITA.
>
> The kids have gotten pretty good. One is now at university (in
> engineering), and her on-campus job is computer tech support. Another
> has his own laptop, and went through a couple of infections. Now he runs
> scans more often than I do.

Noted, yes - LUA's _are_ a PITA.

Good luck!

Silj


--
"Arguing with anonymous strangers on the Internet is a sucker's game
because they almost always turn out to be -- or to be indistinguishable from
-- self-righteous sixteen-year-olds possessing infinite amounts of free time."
- Neil Stephenson, _Cryptonomicon_

[Kayman]

On Sun, 23 Nov 2008 16:48:50 -0500, siljaline wrote:

> Noted, yes - LUA's _are_ a PITA.

I am using LUA since day 1 or so and don't share your sentiments at all.
Would you (or anybody else) please elaborate?
TIA