Secunia ONLINE Software Inspector

How to Scan for Common Software Vulnerabilities
Published 20 Aug 2011

Published by

Golden

Featured Tutorial

Screen Capture and Video Editing in High Quality

Online Scanners - Scan Suspicious Files on your PC
How to Scan Suspicious Files using Online Scanners

Portable OS - Carry your OS on an External Drive
How to Create a Portable OS on an External Drive

Peppermint3 - Create Live CD/DVD/USB To Use For Emergency Backup
How to Perform an Emergency Data Backup When Windows 7 Will Not Boot

User Profile - Customize During Installation
How to Customize Default User Profile in Audit Mode

How to Scan for Common Software Vulnerabilities with Secunia ONLINE Software Inspector

Information

Most users are familiar with the concept of protecting their computers against malware by judicious use of antimalware software and Windows Updates. Many users, however, are not aware of the ability of malware to be introduced through 3rd party software that may be running on their systems.

In recent times, malware appears to have an increasing propensity for "piggy-backing" on top of software neccessary to run many browser based applications e.g. Java and Adobe Flash Player. It is therefore becoming increasingly important to ensure that these products are updated regularly as and when the vendors provide updates to address any indentified security flaws in the software.

In addition to the long-standing Personal Software Inspector (PSI) that is installed as a stand alone application, Secunia also has an online version (OSI) that scans for the more common software vulnerabilities via a simple web browser interface, making it an appealing option for quick and easy scanning.

Note

System Requirements

Secunia OSI will run on Windows XP SP2 or later, Windows 2008, Windows Vista and Windows 7. Both 32 and 64 bit flavours are supported.

In order to run Secunia OSI, you will require:

Latest Microsoft Updates Microsoft Update
Sun Java JRE 1.6x or later java.com: Java + You

You can verify which version of Java you are running using Verify Java Version. Alternatively, you can test your Java version and download the latest version using Test & Download Latest Java Version.

Secunia OSI can be run from the following supported browsers - only 32-bit browsers are supported:

Apple Safari for Windows 4.x and later
Google Chrome 4.x and later
Microsoft Internet Explorer 6.x and later
Opera 9.x and alter
Mozilla Firefox 3.x and later

Performing a vulnerability scan using Secunia OSI

Step 1

Open Secunia by opening www.secunia.com/vulnerability_scanning/online/ in your supported web browser. The interface looks like this:

Secunia ONLINE Software Inspector-sec1.png

Step 2

Click the Start Scanner button. If you do not have Java enabled, you will be prompted to enable it, prior to scanning.

Select both Scan Options to allow Secunia to check for software installed to non-default installation locations.

Click Start to start the scanning. Click Stop if you wish to terminate the scan.

Secunia ONLINE Software Inspector-sec2.png

Step 3

Once the scan has been completed, the results will be displayed. In the first example shown below, there are no vulnerabilities that require patching.

Secunia ONLINE Software Inspector-sec3.png

In this next example below, Secunia OSI has detected 2 vulnerabilities (only one shown here) that requires patching. Secunia OSI provides a link to download the latest update for the vulnerability identified.

Secunia ONLINE Software Inspector-sec4.png

Tip

If Secunia OSI alerts you to the fact that your Java requires updating, I recommend exiting Secunia OSI, and then using Control Panel > Programs > Programs and Features to completely uninstall Java, before downloading and installing the latest version from:

Java Downloads for All Operating Systems

- credit goes to Jacee for this recommendation

Secunia OSI provides a basic vulnerability check on only the most common software installations. Whilst this will suffice for most users, for more advanced users you can download and install the stand-alone Secunia Personal Software Inspector (PSI).

The list of programs scanned by Secunia OSI can be found here: www.secunia.com/products/consumer/osi/programs_covered/

I hope this tutorial will help you to keep your software up-to-date, and your system secure.

Regards,

Golden

Need more help? Try searching our extensive help and support site.

20 Aug 2011
marsmimar	Very nicely done, Golden!
My System Specs

20 Aug 2011
Golden	Thanks Mars.
My System Specs

20 Aug 2011
Guy Scharf	The URL has apparently changed. It is now at secunia.com/vulnerability_scanning/online/. I'm having trouble loading the java applet though.
My System Specs

20 Aug 2011
Golden	Thanks Guy - I'll edit the URL. If the Java applet fails to load, then the implication is you don't have Java installed or it requires an update. can you check that from the link to Java in the tutorial? Regards, Golden
My System Specs

20 Aug 2011
Guy Scharf	Yes, it was a java version problem. Some program I installed must have rolled it back from 1.6_26 (which I had before) to 1.6_16, and I didn't get the usual java update message. Anyway, after updating, it works.
My System Specs

20 Aug 2011
Bare Foot Kid	Well done my friend.
My System Specs

20 Aug 2011
Golden	Thanks BFK.
My System Specs

20 Aug 2011
StalkeR	Nice job Golden !
My System Specs

20 Aug 2011
gregrocker	Wow, insecurities here on first machine tested with Firefox, CHrome, Adobe Reader 9 and Flash 10. The download links for latest versions/patches are most helpful. This is a valuable addition. Bookmarked.
My System Specs

Windows 7: Secunia ONLINE Software Inspector

Secunia ONLINE Software Inspector

Secunia ONLINE Software Inspector problems?