>>>You mean you're displaying the value of 'ver' as taken from the >>>'CurrentVersion' registry setting, right? Is the plugin also getting the >>>name of the EXE correctly? Yes >>>>Also, which Mozilla products / versions are involved? Firefox version 1.0 PR Thunderbird version 1.0.5 Firefox version 1.5 Thunderbird version 1.5.02 Below contains some addition information. >From nessusd.dump: share: C$ exe2: \Program Files\Mozilla Firefox\firefox.exe fh: [ 0: 16385, 1: 'cLm' ] ret: [ wValueLength: 52, dwFileFlagsMask: 63, wType: 0, dwFileOS: 4, dwFileDateLS: 0, dwStrucVersion: 65536, dwProductVersionLS: 0, Padding1: 0, dwFileVersionMS: 65544, dwFileFlags: 0, szKey: 'VS_VERSION_INFO', dwFileDateMS: 0, dwProductVersionMS: 65541, dwFileType: 2, wLength: 856, dwFileSubtype: 0, dwSignature: -17890115, dwFileVersionLS: 1314073452 ] children: Source snipplet: display("share: ",share,"\n"); display("exe2: ",exe2,"\n"); display("fh: ",fh,"\n"); ver = NULL; if (!isnull(fh)) { ret = GetFileVersionEx(handle:fh); CloseFile(handle:fh); display("ret: ",ret,"\n"); if (!isnull(ret)) children = ret['Children']; display("children: ",children,"\n"); if (!isnull(children)) { varfileinfo = children['VarFileInfo']; if (!isnull(varfileinfo)) _______________________________________________ Plugins-writers mailing list Plugins-writers@private http://mail.nessus.org/mailman/listinfo/plugins-writers
This archive was generated by hypermail 2.1.3 : Tue Nov 28 2006 - 08:23:51 PST