New Posts  All Forums:Forum Nav:

Firefox and Microsoft Plugin/Add-on

post #1 of 4
10/17/09 at 9:29am
Thread Starter 
"Remember that Microsoft .NET Framework Assistant add-on that Microsoft sneaked into Firefox without explicit permission from end users?

Well, the code in that add-on has a serious code execution vulnerability that exposes Firefox users to the “browse and you’re owned” attacks that are typically used in drive-by malware downloads."

..."The reason is that .NET Framework 3.5 SP1 installs a “Windows Presentation Foundation” plug-in in Firefox.

Now, Microsoft’s security folks are actually recommending that Firefox users uninstall the buggy add-on:

For Firefox users with .NET Framework 3.5 installed, you may use “Tools”-> “Add-ons” -> “Plugins”, select “Windows Presentation Foundation”, and click “Disable”.

This introduction of vulnerabilities in a competing browser is a colossal embarrassment for Microsoft. "

Article in full here!

Safe surfing and ...

cheers ...
Reply
Reply
post #2 of 4
10/17/09 at 9:51am
Thread Starter 
Whilst you are at it, disable the Microsoft .Net framework Assistant extension as well. Big blows for MS lately, counting in the foobar thing with Sidekicks and T-Mobile.

http://www.notebookforums.com/post30...ml#post3096758

cheers ...
Reply
Reply
post #3 of 4
10/17/09 at 10:59am
Firefox is actually actively blocking those particular add-ons as of yesterday.
Reply
Reply
post #4 of 4
10/17/09 at 11:41am
Thread Starter 
^^ I experienced that also.

In all fairness to MS, malware can attach itself to any add-ons/plugins of any browsers if it can find a way to do it. At least that MS has the decency to inform Mozilla and went open about this.

cheers ...
Reply
Reply
New Posts  All Forums:Forum Nav:
  Return Home