WiredWX Hobby Weather ToolsLog in

 


descriptionMozilla Blocks Microsoft's Buggy Firefox Plugin EmptyMozilla Blocks Microsoft's Buggy Firefox Plugin

more_horiz
Mozilla developers have blocked a Firefox plugin that was quietly pushed out by Microsoft, saying that it presents a security risk.

Microsoft shipped the Firefox add-on as part of a .Net software update last February, causing outrage among some Firefox users, who complained that the software was sneaked onto their systems without their knowledge or approval and was extremely difficult to remove.

On Tuesday, Microsoft warned that Firefox users who have not applied a recent Internet Explorer patch were vulnerable to a "browse-and-get-owned attack" because of a bug in the Microsoft .Net Framework Assistant add-on.

"All that is needed is for a user to be lured to a malicious website," Microsoft said. Triggering this vulnerability involves the use of a malicious XBAP (XAML Browser Application).

The flaw is a nasty one, but users who have installed the MS09-054 IE update, released Tuesday are protected from this attack, "regardless of the attack vector," Microsoft said.

To protect users who may not have installed Microsoft's patch, Mozilla is automatically blocking two add-ons: the Microsoft .Net Framework Assistant and a related plugin called the Windows Presentation Foundation. The open-source browser started blocking the software late Friday night.

More: http://pcworld.com/article/173858/

descriptionMozilla Blocks Microsoft's Buggy Firefox Plugin EmptyRe: Mozilla Blocks Microsoft's Buggy Firefox Plugin

more_horiz
Does this affect users who down loaded Firefox to their system through the Internet also?

descriptionMozilla Blocks Microsoft's Buggy Firefox Plugin EmptyRe: Mozilla Blocks Microsoft's Buggy Firefox Plugin

more_horiz
That explains the messages I have been seeing. Thanks for the info and link!

descriptionMozilla Blocks Microsoft's Buggy Firefox Plugin EmptyRe: Mozilla Blocks Microsoft's Buggy Firefox Plugin

more_horiz
privacy_tip Permissions in this forum:
You cannot reply to topics in this forum