Windows 7 - Secunia ONLINE Software Inspector

Golden

How to Scan for Common Software Vulnerabilities with Secunia ONLINE Software Inspector

Information

Most users are familiar with the concept of protecting their computers against malware by judicious use of antimalware software and Windows Updates. Many users, however, are not aware of the ability of malware to be introduced through 3rd party software that may be running on their systems.

In recent times, malware appears to have an increasing propensity for "piggy-backing" on top of software neccessary to run many browser based applications e.g. Java and Adobe Flash Player. It is therefore becoming increasingly important to ensure that these products are updated regularly as and when the vendors provide updates to address any indentified security flaws in the software.

In addition to the long-standing Personal Software Inspector (PSI) that is installed as a stand alone application, Secunia also has an online version (OSI) that scans for the more common software vulnerabilities via a simple web browser interface, making it an appealing option for quick and easy scanning.

Note

System Requirements

Secunia OSI will run on Windows XP SP2 or later, Windows 2008, Windows Vista and Windows 7. Both 32 and 64 bit flavours are supported.

In order to run Secunia OSI, you will require:

Latest Microsoft Updates Microsoft Update
Sun Java JRE 1.6x or later java.com: Java + You

You can verify which version of Java you are running using Verify Java Version. Alternatively, you can test your Java version and download the latest version using Test & Download Latest Java Version.

Secunia OSI can be run from the following supported browsers:

Apple Safari for Windows 4.x
Google Chrome 4.x
Microsoft Internet Explorer 6.x,7.x and 8.x - IE9.x is NOT currently supported
Opera 9.x and 10.x
Mozilla Firefox 3.x, 3.5.x and 3.6.x

Performing a vulnerability scan using Secunia OSI

Step 1

Open Secunia by opening www.secunia.com/vulnerability_scanning/online/ in your supported web browser. The interface looks like this:

Secunia ONLINE Software Inspector-sec1.png

Step 2

Click the Start Scanner button. If you do not have Java enabled, you will be prompted to enable it, prior to scanning.

Select both Scan Options to allow Secunia to check for software installed to non-default installation locations.

Click Start to start the scanning. Click Stop if you wish to terminate the scan.

Secunia ONLINE Software Inspector-sec2.png

Step 3

Once the scan has been completed, the results will be displayed. In the first example shown below, there are no vulnerabilities that require patching.

Secunia ONLINE Software Inspector-sec3.png

In this next example below, Secunia OSI has detected 2 vulnerabilities (only one shown here) that requires patching. Secunia OSI provides a link to download the latest update for the vulnerability identified.

Secunia ONLINE Software Inspector-sec4.png

Tip

If Secunia OSI alerts you to the fact that your Java requires updating, I recommend exiting Secunia OSI, and then using Control Panel > Programs > Programs and Features to completely uninstall Java, before downloading and installing the latest version from:

Java Downloads for All Operating Systems

- credit goes to Jacee for this recommendation

Secunia OSI provides a basic vulnerability check on only the most common software installations. Whilst this will suffice for most users, for more advanced users you can download and install the stand-alone Secunia Personal Software Inspector (PSI).

The list of programs scanned by Secunia OSI can be found here: www.secunia.com/products/consumer/osi/programs_covered/

I hope this tutorial will help you to keep your software up-to-date, and your system secure.

Regards,

Golden

marsmimar · 08-20-2011

Very nicely done, Golden!

Golden · 08-20-2011

Thanks Mars.

Guy Scharf · 08-20-2011

The URL has apparently changed. It is now at secunia.com/vulnerability_scanning/online/. I'm having trouble loading the java applet though.

Golden · 08-20-2011

Thanks Guy - I'll edit the URL.

If the Java applet fails to load, then the implication is you don't have Java installed or it requires an update. can you check that from the link to Java in the tutorial?

Regards,
Golden

Guy Scharf · 08-20-2011

Yes, it was a java version problem. Some program I installed must have rolled it back from 1.6_26 (which I had before) to 1.6_16, and I didn't get the usual java update message. Anyway, after updating, it works.

Bare Foot Kid · 08-20-2011

Well done my friend.

Golden · 08-20-2011

Thanks BFK.

StalkeR · 08-20-2011

Nice job Golden !

gregrocker · 08-20-2011

Wow, insecurities here on first machine tested with Firefox, CHrome, Adobe Reader 9 and Flash 10. The download links for latest versions/patches are most helpful.

This is a valuable addition. Bookmarked.

Windows 7 - Secunia ONLINE Software Inspector

Secunia ONLINE Software Inspector

Secunia ONLINE Software Inspector problems?