>>>You mean you're displaying the value of 'ver' as taken from the
>>>'CurrentVersion' registry setting, right? Is the plugin also getting the
>>>name of the EXE correctly?
Yes
>>>>Also, which Mozilla products / versions are involved?
Firefox version 1.0 PR
Thunderbird version 1.0.5
Firefox version 1.5
Thunderbird version 1.5.02
Below contains some addition information.
>From nessusd.dump:
share: C$
exe2: \Program Files\Mozilla Firefox\firefox.exe
fh: [ 0: 16385, 1: 'cLm' ]
ret: [. wValueLength: 52, dwFileFlagsMask: 63, wType: 0, dwFileOS: 4,
dwFileDateLS: 0, dwStrucVersion: 65536, dwProductVersionLS: 0, Padding1: 0,
dwFileVersionMS: 65544, dwFileFlags: 0, szKey: 'VS_VERSION_INFO',
dwFileDateMS: 0, dwProductVersionMS: 65541, dwFileType: 2, wLength: 856,
dwFileSubtype: 0, dwSignature: -17890115, dwFileVersionLS: 1314073452 ]
children:
Source snipplet:
display("share: ",share,"\n");
display("exe2: ",exe2,"\n");
display("fh: ",fh,"\n");
ver = NULL;
if (!isnull(fh))
{
ret = GetFileVersionEx(handle:fh);
CloseFile(handle:fh);
display("ret: ",ret,"\n");
if (!isnull(ret)) children = ret['Children'];
display("children: ",children,"\n");
if (!isnull(children))
{
varfileinfo = children['VarFileInfo'];
if (!isnull(varfileinfo))
_______________________________________________
Plugins-writers mailing list
Plugins-writers@list.nessus.org
http://mail.nessus.org/mailman/listinfo/plugins-writers