Firefox blocks 2 Microsoft plug-ins silently slipped in last February

SnoopZ · 17-10-2009, 23:31

Firefox users will likely get a popup window over the next few days telling them that 2 plug-ins are being blocked due to a remote code execution vulnerability.

The 2 Plug-ins affected are Microsoft .NET Framework Assistant and Windows Presentation Foundation.

Source

joglynne · 17-10-2009, 23:41

I run 3 FF profiles concurrently but have only had the warning on the 2 profiles using my IP. The profile using a VM proxy hasn't identified the vulnerability. Should I be doing something to safeguard the vulnerability on that profile?

**Graham M** · 17-10-2009, 23:44

Unless there's anything you use that needs it I'd be inclined to disable it, I've just checked and mine's literally just been disabled

joglynne · 17-10-2009, 23:52

I disabled the Windows Presentation Foundation in my add-ons folder some months ago when it was first identified but I can't see where I can disable Microsoft .NET Framework Assistant on the proxy profile. Can you point me in it's direction, pretty please?

**Graham M** · 17-10-2009, 23:53

Tools->addons

Scroll down to the addon
select it
click disable

joglynne · 18-10-2009, 00:00

Cheers Graham.

The only thing showing in the 3 add-on lists is the greyed out (disabled) Windows Presentation Foundation none of them list the Microsoft .NET Framework Assistant, so if that is where it would be listed I guess I am covered.

SnoopZ · 18-10-2009, 00:03

Quote:

Originally Posted by joglynne

Cheers Graham.

The only thing showing in the 3 add-on lists is the greyed out (disabled) Windows Presentation Foundation none of them list the Microsoft .NET Framework Assistant, so if that is where it would be listed I guess I am covered.

Framework Assistant is listed in the Extensions tab if it's installed.

joglynne · 18-10-2009, 00:08

Thanks Snoopz. No trace there either so I shall stop being a worry wort.

18-10-2009, 01:57

I thought firefox had gone wrong lol

Ravenheart · 18-10-2009, 09:05

Aye I had disabled it when it first came to light, but apparently Tuesday's patch day highlighted the risk.

http://www.computerworld.com/s/artic..._users_at_risk

My beta of Thunderbird 3 (beta v3) also blocked the Windows Presentation Foundation plug in last night too.

joglynne · 18-10-2009, 11:20

Thanks for that link Ravenheart it contains a link to the page I was trying to find.

Last night it was driving me mad trying to remember when and why I had disabled the addon. I am such a scaredy cat that I knew I wouldn't have done it without knowing it was OK to do so. Normally I keep a copy of any articles etc that prompt me to be brave so that I can re-read them a zillion times before I venture into the black hole that contains my computer knowledge.

Ravenheart · 18-10-2009, 13:24

Hey np Jo. glad it was of use.

The new plug in checker on the Mozilla site can be handy too.

http://www.mozilla.com/en-US/plugincheck/

and they're planning to extend it to other browsers too

http://www.computerworld.com/s/artic..._security_tool

Dude111 · 18-10-2009, 23:18

I notice alot of MS stuff listed in the add-on section of FF!!

DRM stuff,etc.......

That checker might be handy!! (On the XP upstairs FF 3.5 unfortunetly is installed (1.5 looked much better (BETTER ICONS,ETC)) Ah well......

Thanx for the link!