8 replies to this topic

[Tushman]

For those who are running version 11.0.1.152 or earlier, there is a critical vulnerability identified which could cause a crash and potentially allow an attacker to take control of the affected system.  This applies to Windows, Macintosh, Linux and Solaris users.  As far as I know this does not apply for people who are using the version 10.x variants.

Information taken from this site.

For Windows users, here are the links for the stand alone installer.

For Internet Explorer
v11.1.102.55  32-bit version.
v11.1.102.55  64-bit version.

For all other browsers, download links are available here.  Scroll down 1/2 way just past section where it says firewall proxy server environment.

Note that clicking on one of the two links above will start the download for full executable file, which is why I said stand alone installer.

Edited by Tushman, 19 November 2011 - 04:52 PM.

[zlim]

I installed these on November 10th but I have a question for anyone running 64 bit Windows 7.
Must I install both the 32 bit and 64 bit versions for IE since both browsers are included with Win 7? So far, I have only fired up IE 9 (32 bit) to do windows updates. I have never run IE ( (64 bit).
Additional question: Can I uninstall the 64 bit version of IE 9?. I'd love to do that because it is one less thing I need to worry about patching.

[Tushman]

I installed these on November 10th but I have a question for anyone running 64 bit Windows 7.
Must I install both the 32 bit and 64 bit versions for IE since both browsers are included with Win 7? So far, I have only fired up IE 9 (32 bit) to do windows updates. I have never run IE ( (64 bit).
Additional question: Can I uninstall the 64 bit version of IE 9?. I'd love to do that because it is one less thing I need to worry about patching.

Hi Liz, I'm currently running Win 7 64-bit.  These plugins are dependent upon the browser type you're using.  So if you don't plan on using IE 64-bit, then you only need the 32-bit version for Adobe Flash.  The 64-bit version of Adobe Flash is required, actually not always required but it is preferred, if you're using a 64-bit browser.

As far as removing IE v9, I'm not sure you can keep just the 32-bit version.  IE v8 is the default browser for Windows 7.  Did you upgrade it through Windows Update or did you download the full installer?  Come to think of it, I think you may be able to delete the program files located in:
C:\Program Files\Internet Explorer and delete all the files in there.  I've never done this so I'm not 100% sure this will work.  

Notice that I did not say C:\Program Files (x86)\Internet Explorer

Personally I wouldn't worry about it. Just download whatever "updates" it offers through the Windows Update mechanism and you should be fine.  Going so far as to remove IE 64-bit (only) is unnecessary if you keep your system & browser up to date.  (Yes, I know you're very good about doing that).  You will not find security risks that only applies to 64-bit for IE.  It's really not a hassle to keep browsers upto date.

Edited by Tushman, 18 November 2011 - 12:52 PM.

[Corrine]

I agree, leave IE9 64-bit alone.  However, there is no need to install the 64-bit Adobe Flash.  I suggest uninstalling that.  You obviously did fine without the 64-bit Flash, which was just released last month.  (See Finally, Adobe releases a 64-bit Flash Player | ZDNet)

[crp]

This is really getting annoying. 3 times a week I have pc's popping up with messages about downloading patches for Adobe products. I am really starting to wonder if a lot of the problems being placed at Windows feet really are issues caused by Adobe.

[Corrine]

You're right, crp.  From How Windows PCs Get Infected with Malware

How PCs Get Infected
The CSIS study revealed that as much as 99.8 % of all virus/malware infections were a direct result of not updating five specific software packages.  Aside from missing Microsoft security updates, the study revealed the following out of date programs as being the most used by malware:  Java JRE (37%), Adobe Reader and Adobe Acrobat (32%), Adobe Flash (16%) and Microsoft Internet Explorer (10%)

Doing the addition from the CSIS study, Adobe = 48%, Java 37% of infections, totaling a whopping 85%.

Info about Java exploits from the most recent Microsoft Security and Intelligence Report:  Java Exploits.

[mac]

I installed these on November 10th but I have a question for anyone running 64 bit Windows 7.
Must I install both the 32 bit and 64 bit versions for IE since both browsers are included with Win 7? So far, I have only fired up IE 9 (32 bit) to do windows updates. I have never run IE ( (64 bit).
Additional question: Can I uninstall the 64 bit version of IE 9?. I'd love to do that because it is one less thing I need to worry about patching.

According to Adobe's knowledgebase the 64bit D/L will install both the 32bit and 64bit versions if both are present.

Installing Flash Player on a 64-bit browser
To install Flash Player on a 64-bit browser, do the following:

1.Open the browser.
2.Download the installer for Flash Player from Adobe.
3.Install Flash Player.
Note: When you download Flash Player installer from a 64-bit machine, you download the 64-bit Flash Player installer. It installs Flash Player on 32-bit and 64-bit version of the browser if both are present.

Adobe KB article.

[zlim]

Ah, but I do not get mine from Adobe. I go to file hippo, download what I want (32 bit IE and non-IE versions) and put them on a USB stick as I move from computer to computer. I think I'm safe.  

[Tushman]

Ah, but I do not get mine from Adobe. I go to file hippo, download what I want (32 bit IE and non-IE versions) and put them on a USB stick as I move from computer to computer. I think I'm safe.  

You can do the same thing if you download the installer from Adobe's website.  I'm not sure why you would go to another website to get Adobe.  Generally files hosted on filehippo are safe, but I always prefer to get it directly from the source whenever possible.