Re: [Plugins-writers] Nessus Script ID: 20862 version 1.11: Contain A Bug?

From: Paul Bellefeuille (nessusd@private)
Date: Tue Nov 28 2006 - 08:13:44 PST


>>>You mean you're displaying the value of 'ver' as taken from the 
>>>'CurrentVersion' registry setting, right? Is the plugin also getting the 
>>>name of the EXE correctly?

Yes

>>>>Also, which Mozilla products / versions are involved?

Firefox version 1.0 PR
Thunderbird version 1.0.5
Firefox version 1.5
Thunderbird version 1.5.02

Below contains some addition information.

>From nessusd.dump:

share: C$
exe2: \Program Files\Mozilla Firefox\firefox.exe
fh: [ 0: 16385, 1: 'cLm' ]
ret: [ wValueLength: 52, dwFileFlagsMask: 63, wType: 0, dwFileOS: 4, 
dwFileDateLS: 0, dwStrucVersion: 65536, dwProductVersionLS: 0, Padding1: 0, 
dwFileVersionMS: 65544, dwFileFlags: 0, szKey: 'VS_VERSION_INFO', 
dwFileDateMS: 0, dwProductVersionMS: 65541, dwFileType: 2, wLength: 856, 
dwFileSubtype: 0, dwSignature: -17890115, dwFileVersionLS: 1314073452 ]
children:

Source snipplet:

display("share: ",share,"\n");
display("exe2: ",exe2,"\n");
display("fh: ",fh,"\n");

  ver = NULL;
  if (!isnull(fh))
  {
    ret = GetFileVersionEx(handle:fh);
    CloseFile(handle:fh);

display("ret: ",ret,"\n");

    if (!isnull(ret)) children = ret['Children'];

display("children: ",children,"\n");
    if (!isnull(children))
    {
      varfileinfo = children['VarFileInfo'];
      if (!isnull(varfileinfo)) 

_______________________________________________
Plugins-writers mailing list
Plugins-writers@private
http://mail.nessus.org/mailman/listinfo/plugins-writers



This archive was generated by hypermail 2.1.3 : Tue Nov 28 2006 - 08:23:51 PST