Difference between revisions of "Flash Player"

From WPKG | Open Source Software Deployment and Distribution
Jump to: navigation, search
(SECURITY - Adobe Flash Player security settings for "Clickjacking" vulnerability (APSA08-08))
(Updated to Flash Player 10 for Firefox and Internet Explorer)
Line 1: Line 1:
 +
== Adobe Flash Player 10 for Firefox ==
 +
 +
Installer packaged as an executable, installs as a plugin.
 +
 +
<source lang="xml">
 +
<package id="flashplayer10firefox" name="Adobe Flash Player 10 for Firefox" revision="1" reboot="false" priority="0">
 +
  <check type="file" condition="versiongreaterorequal" path="%WINDIR%\system32\Macromed\Flash\NPSWF32.dll" value="10.0.12.36"/>
 +
  <install cmd='%SOFTWARE%\Flash\install_flash_player_10.exe /S' />
 +
  <upgrade cmd='%SOFTWARE%\Flash\install_flash_player_10.exe /S' />
 +
  <remove cmd='%WINDIR%\system32\Macromed\Flash\uninstall_plugin.exe /S'/>
 +
</package>
 +
</source>
 +
 +
It's good to kill Firefox application process before installing, since the installer won't work with browser running. To do this add to code:
 +
<source lang="xml">
 +
<install cmd="taskkill /F /IM Firefox.exe">
 +
<exit code="0" />
 +
<exit code="128" />
 +
</install>
 +
</source>
 +
And of course:
 +
<source lang="xml">
 +
<upgrade cmd="taskkill /F /IM Firefox.exe">
 +
<exit code="0" />
 +
<exit code="128" />
 +
</upgrade>
 +
</source>
 +
 +
 +
== Adobe Flash Player 10 for Internet Explorer ==
 +
 +
 +
Installer packaged as .msi, installs as an ActiveX.
 +
 +
You have to apply for a Distribution License before you can download from Adobe website. Beware that the license does not allow you to share the download link, so read the terms carefully.
 +
 +
<source lang="xml">
 +
<package id="flashplayer10ie" name="Adobe Flash Player 10 for Internet Explorer" revision="1" reboot="false" priority="0">
 +
  <check type="logical" condition="and">
 +
    <check type="file" condition="versiongreaterorequal" path="%WINDIR%\system32\Macromed\Flash\Flash10a.ocx" value="10.0.12.36"/>
 +
    <check type="uninstall" condition="exists" path="Adobe Flash Player 10 ActiveX"/>
 +
  </check>
 +
  <install cmd='msiexec /q /i %SOFTWARE%\Flash\install_flash_player_10_active_x.msi'>
 +
    <exit code="3010" reboot="true" />
 +
  </install>
 +
  <upgrade cmd='msiexec /q /i %SOFTWARE%\Flash\install_flash_player_10_active_x.msi'>
 +
    <exit code="3010" reboot="true" />
 +
  </upgrade>
 +
  <remove cmd='MsiExec.exe /qn /X{2BD2FA21-B51D-4F01-94A7-AC16737B2163}'/>
 +
</package>
 +
</source>
 +
 +
 +
 
== Adobe Flash Player 9.0.124.0 for Firefox ==
 
== Adobe Flash Player 9.0.124.0 for Firefox ==
  
Line 29: Line 83:
 
</upgrade>
 
</upgrade>
 
</source>
 
</source>
 +
 +
  
 
== Adobe Flash Player 9.0.124.0 for Internet Explorer ==
 
== Adobe Flash Player 9.0.124.0 for Internet Explorer ==

Revision as of 15:42, 15 October 2008

Adobe Flash Player 10 for Firefox

Installer packaged as an executable, installs as a plugin. 

<package id="flashplayer10firefox" name="Adobe Flash Player 10 for Firefox" revision="1" reboot="false" priority="0">
  <check type="file" condition="versiongreaterorequal" path="%WINDIR%\system32\Macromed\Flash\NPSWF32.dll" value="10.0.12.36"/>
  <install cmd='%SOFTWARE%\Flash\install_flash_player_10.exe /S' />
  <upgrade cmd='%SOFTWARE%\Flash\install_flash_player_10.exe /S' />
  <remove cmd='%WINDIR%\system32\Macromed\Flash\uninstall_plugin.exe /S'/>
</package>

It's good to kill Firefox application process before installing, since the installer won't work with browser running. To do this add to code: 

<install cmd="taskkill /F /IM Firefox.exe">
			<exit code="0" />
			<exit code="128" />
</install>

And of course: 

<upgrade cmd="taskkill /F /IM Firefox.exe">
			<exit code="0" />
			<exit code="128" />
</upgrade>


Adobe Flash Player 10 for Internet Explorer

Installer packaged as .msi, installs as an ActiveX.

You have to apply for a Distribution License before you can download from Adobe website. Beware that the license does not allow you to share the download link, so read the terms carefully. 

<package id="flashplayer10ie" name="Adobe Flash Player 10 for Internet Explorer" revision="1" reboot="false" priority="0">
  <check type="logical" condition="and">
    <check type="file" condition="versiongreaterorequal" path="%WINDIR%\system32\Macromed\Flash\Flash10a.ocx" value="10.0.12.36"/>
    <check type="uninstall" condition="exists" path="Adobe Flash Player 10 ActiveX"/>
  </check>
  <install cmd='msiexec /q /i %SOFTWARE%\Flash\install_flash_player_10_active_x.msi'>
    <exit code="3010" reboot="true" />
  </install>
  <upgrade cmd='msiexec /q /i %SOFTWARE%\Flash\install_flash_player_10_active_x.msi'>
    <exit code="3010" reboot="true" />
  </upgrade>
  <remove cmd='MsiExec.exe /qn /X{2BD2FA21-B51D-4F01-94A7-AC16737B2163}'/>
</package>


Adobe Flash Player 9.0.124.0 for Firefox

You are encouraged to upgrade for security reasons: http://www.adobe.com/support/security/bulletins/apsb08-11.html and then to apply the security settings for "Clickjacking" vulnerability (APSA08-08) defined below.

Installer packaged as an executable, installs as a plugin. Sometimes it is upgraded only on the second run of wpkg, it must be a timing issue between installing over previous version and checking conditions. 

<package id="flashplayerfirefox" name="Adobe Flash Player for Firefox" revision="1" reboot="false" priority="0">
  <depends package-id="firefox"/>
  <check type="file" condition="versiongreaterorequal" path="%WINDIR%\system32\Macromed\Flash\NPSWF32.dll" value="9.0.124.0"/>
  <install cmd='%SOFTWARE%\Flash\install_flash_player.exe /S' />
  <upgrade cmd='%SOFTWARE%\Flash\install_flash_player.exe /S' />
  <remove cmd='%WINDIR%\system32\Macromed\Flash\uninstall_plugin.exe /S'/>
</package>

It's good to kill Firefox application process before installing, since the installer won't work with browser running. To do this add to code: 

<install cmd="taskkill /F /IM Firefox.exe">
			<exit code="0" />
			<exit code="128" />
</install>

And of course: 

<upgrade cmd="taskkill /F /IM Firefox.exe">
			<exit code="0" />
			<exit code="128" />
</upgrade>


Adobe Flash Player 9.0.124.0 for Internet Explorer

You are encouraged to upgrade for security reasons: http://www.adobe.com/support/security/bulletins/apsb08-11.html and then to apply the security settings for "Clickjacking" vulnerability (APSA08-08) defined below.

Installer packaged as .msi, installs as an ActiveX. You can download it from http://fpdownload.macromedia.com/get/flashplayer/current/licensing/win/install_flash_player_active_x.msi - make sure you comply with the license: http://www.adobe.com/licensing/distribution/.

The line "Adobe Flash Player 9 ActiveX" in Control Panel's Add/Remove Programs doesn't show any minor version, so both this line and the detailed ocx's file version have to be checked with a logical and condition. 

<package id="flashplayerie" name="Adobe Flash Player for Internet Explorer" revision="1" reboot="false" priority="0">
  <check type="logical" condition="and">
    <check type="file" condition="versiongreaterorequal" path="%WINDIR%\system32\Macromed\Flash\Flash9f.ocx" value="9.0.124.0"/>
    <check type="uninstall" condition="exists" path="Adobe Flash Player 9 ActiveX"/>
  </check>
  <install cmd='msiexec /q /i %SOFTWARE%\Flash\install_flash_player_active_x.msi'>
    <exit code="3010" reboot="true" />
  </install>
  <upgrade cmd='msiexec /q /i %SOFTWARE%\Flash\install_flash_player_active_x.msi'>
    <exit code="3010" reboot="true" />
  </upgrade>
  <remove cmd='MsiExec.exe /qn /X{58BAA8D0-404E-4585-9FD3-ED1BB72AC2EE}'/>
</package>


Adobe Flash Player security settings for "Clickjacking" vulnerability (APSA08-08)

Waiting for the next version of Flash Player to be available, you are strongly encouraged to apply the following settings for security reasons: http://www.adobe.com/support/security/advisories/apsa08-08.html.

According to bulletin and to the "Adobe Flash Player Administration Guide" (you find the link in the same security bulletin):

  • create a file named "mms.cfg"
  • write in this file the lines containing the "ParameterName = ParameterValue" pairs you need, "AVHardwareDisable = 1" in this APSA08-08 case
  • deploy it with the following WPKG package
<package id="flash-settings" name="Adobe Flash Player settings for APSA08-08 vulnerability" revision="1" reboot="false" priority="0" execute="once">
  <install cmd='%COMSPEC% /c copy /Y "%SOFTWARE%\Flash\settings\mms.cfg " "%WINDIR%\system32\Macromed\Flash\" ' />
</package>

Or you could just integrate this line with the installation packages above, if you do not want to keep it as a separate package.


Adobe Flash Player 9.0.115.0 for Firefox

Installer packaged as an executable, installs as a plugin. 

<package id="flashplayerfirefox" name="Adobe Flash Player for Firefox" revision="1" reboot="false" priority="0">
  <depends package-id="firefox"/>
  <check type="file" condition="versiongreaterorequal" path="%WINDIR%\system32\Macromed\Flash\NPSWF32.dll" value="9.0.115.0"/>
  <install cmd='%SOFTWARE%\Flash\install_flash_player /S' />
  <upgrade cmd='%SOFTWARE%\Flash\install_flash_player /S' />
  <remove cmd='%WINDIR%\system32\Macromed\Flash\uninstall_plugin.exe /S'/>
</package>

Adobe Flash Player 9.0.115.0 for Internet Explorer

Installer packaged as .msi, installs as an ActiveX. The line "Adobe Flash Player 9 ActiveX" in Control Panel's Add/Remove Programs doesn't show any minor version, so both this line and the detailed ocx's file version have to be checked with a logical and condition. 

<package id="flashplayerie" name="Adobe Flash Player for Internet Explorer" revision="1" reboot="false" priority="0">
  <check type="logical" condition="and">
    <check type="file" condition="versiongreaterorequal" path="%WINDIR%\system32\Macromed\Flash\Flash9e.ocx" value="9.0.115.0"/>
    <check type="uninstall" condition="exists" path="Adobe Flash Player 9 ActiveX"/>
  </check>
  <install cmd='msiexec /q /i %SOFTWARE%\Flash\install_flash_player_active_x.msi'>
    <exit code="3010" reboot="true" />
  </install>
  <upgrade cmd='msiexec /q /i %SOFTWARE%\Flash\install_flash_player_active_x.msi'>
    <exit code="3010" reboot="true" />
  </upgrade>
  <remove cmd='MsiExec.exe /qn /X{8E9DB7EF-5DD3-499E-BA2A-A1F3153A4DF8}'/>
</package>


Adobe Flash Player 9.0.47.0 for Firefox

Installer packaged as an executable, installs as a plugin. Didn't test if the uninstall_plugin.exe in the remove line removes both this and Internet Explorer Flash Player ActiveX. 

<package id="flashplayerfirefox" name="Adobe Flash Player for Firefox" revision="1" reboot="false" priority="0">
  <depends package-id="firefox"/>
  <check type="file" condition="versiongreaterorequal" path="%WINDIR%\system32\Macromed\Flash\NPSWF32.dll" value="9.0.47.0"/>
  <install cmd='%SOFTWARE%\Flash\install_flash_player /S' />
  <upgrade cmd='%SOFTWARE%\Flash\install_flash_player /S' />
  <remove cmd='%WINDIR%\system32\Macromed\Flash\uninstall_plugin.exe /S'/>
</package>

Adobe Flash Player 9.0.47.0 for Internet Explorer

Installer packaged as .msi, installs as an ActiveX. The line "Adobe Flash Player 9 ActiveX" in Control Panel's Add/Remove Programs doesn't show any minor version, so both this line and the detailed ocx's file version have to be checked with a logical and condition. 

<package id="flashplayerie" name="Adobe Flash Player for Internet Explorer" revision="1" reboot="false" priority="0">
  <check type="logical" condition="and">
    <check type="file" condition="versiongreaterorequal" path="%WINDIR%\system32\Macromed\Flash\Flash9d.ocx" value="9.0.47.0"/>
    <check type="uninstall" condition="exists" path="Adobe Flash Player 9 ActiveX"/>
  </check>
  <install cmd='msiexec /q /i %SOFTWARE%\Flash\install_flash_player_active_x.msi'>
    <exit code="3010" reboot="true" />
  </install>
  <upgrade cmd='msiexec /q /i %SOFTWARE%\Flash\install_flash_player_active_x.msi'>
    <exit code="3010" reboot="true" />
  </upgrade>
  <remove cmd='MsiExec.exe /qn /X{786547F9-59BB-4FA3-B2D8-327FF1F14870}'/>
</package>


Older versions

Note: Recent versions of Flash for Firefox seem to install in a different directory than indicated below. You may need to change the check to: 

<check type="file" condition="versiongreaterorequal" path="%WINDIR%\system32\Macromed\Flash\NPSWF32.dll" value="9.0.45.0"/>

<check type="file" condition="versiongreaterorequal" path="%WINDIR%\system32\Macromed\Flash\Flash9c.ocx" value="9.0.45.0"/>


Here's the silent installers for the Adobe Flash Player 9 for IE and Firefox. Uninstalling the Firefox plugin is missing, since Adobe's uninstall_flash_player.exe removes both plugins, which is not our goal here. If you want to install a newer version (this is for 9.0.16.0), don't forget to change the value in the 'check type' tag. For downloading the .msi version (for the IE ActiveX control), Adobe has an easy registration procedure, but if you smart enough, you can find out how to download without registration :) 

<package
   id="flashplayerfirefox"
   name="Flash Player Firefox"
   revision="90160"
   reboot="false"
   priority="0">
 
   <depends package-id="firefox"/>
 
   <check type="file" condition="versiongreaterorequal" path="%PROGRAMFILES%\Mozilla Firefox\plugins\NPSWF32.dll" value="9.0.16.0"/>
   <install cmd='%SOFTWARE%\Flash\install_flash_player /S' />
   <upgrade cmd='%SOFTWARE%\Flash\install_flash_player /S' />
</package>


<package
   id="flashplayerie"
   name="Flash Player IE"
   revision="90160"
   reboot="false"
   priority="0">
 
   <check type="logical" condition="and">
     <check type="file" condition="versiongreaterorequal" path="%WINDIR%\system32\Macromed\Flash\Flash9.ocx" value="9.0.16.0"/>
     <check type="uninstall" condition="exists" path="Adobe Flash Player 9 ActiveX"/>
   </check>
 
   <install cmd='msiexec /q /i  %SOFTWARE%\Flash\install_flash_player_active_x.msi'>
     <exit code="0" />
     <exit code="3010" reboot="true" />
   </install>
 
   <upgrade cmd='msiexec /q /i  %SOFTWARE%\Flash\install_flash_player_active_x.msi'>
     <exit code="0" />
     <exit code="3010" reboot="true" />
   </upgrade>
 
   <remove cmd='MsiExec.exe /q /X{BB65C393-C76E-4F06-9B0C-2124AA8AF97B}'/>
</package>



This is a silent installer for Adobe Flash Player.

There are versions of Adobe Flash Player for Internet Explorer and for Mozilla Firefox.

Adobe Flash Player for Firefox should be installed after Firefox is installed - and hence the Firefox installer should have a higher priority (or set a dependency).

This is an Adobe Flash Player for Mozilla Firefox installer: 

<package
  id="flashplayerfirefox"
  name="Flash Player Firefox"
  revision="1"
  reboot="false"
  priority="0">
 
  <check type="file" condition="exists" path="%PROGRAMFILES%\Mozilla Firefox\plugins\NPSWF32.dll" />
 
  <install cmd='%SOFTWARE%\Flash_Firefox\flashplayer7installer.exe /S' />
 
</package>

This is an Adobe Flash Player for Internet Explorer installer: 

<package
  id="flashplayerie"
  name="Flash Player IE"
  revision="1"
  reboot="false"
  priority="0">
 
   <check type="file" condition="exists" path="%WINDIR%\system32\Macromed\Flash\Flash.ocx" />
 
   <install cmd='%SOFTWARE%\Flash_IE\flashplayer7_winax.exe /Q' />
 
 </package>
Retrieved from "https://wpkg.org/index.php?title=Flash_Player&oldid=6313"