Firefox blocks insecure .Net add-on--awkwardly

**MIG-31** · Oct 19, 2009, 07:59 AM

Mozilla on Friday disabled a Microsoft plug-in for Firefox called the .Net Framework Assistant because of a security problem--then scrambled to give people with patched systems an override option.

Mike Shaver, Mozilla's vice president of engineering, announced the first step late Friday night on his blog. "It's recently surfaced that it has a serious security vulnerability, and Microsoft is recommending that all users disable the add-on," Shaver said. "Because of the difficulties some users have had entirely removing the add-on, and because of the severity of the risk it represents if not disabled, we contacted Microsoft today to indicate that we were looking to disable the extension and plug-in for all users via our blocklisting mechanism. Microsoft agreed with the plan, and we put the blocklist entry live immediately."
____________
Source: C|Net

~~CitySlicker~~ · Oct 19, 2009, 08:20 AM

Firefox removed those two MS plugins automatically (for me) just telling it just has been uninstalled. It was not just the .net assistant but something else too.

BlueMak · Oct 19, 2009, 08:46 AM

It didn't uninstall them, it disabled them, you can re enable at least the .net one any time you want.
The second one I can't even find it, but I guess I don't need it if FF says I don't...

Rayder · Oct 19, 2009, 04:15 PM

Windows Presentation Foundation was the other one.

I was able to uninstall the .NET one after it got disabled, but the WPF one just says blocked and won't let me do anything with it.

BlueMak · Oct 19, 2009, 04:33 PM

The windows presentation foundation doesn't any more (if ever since I don't remember installing it) display under the addons section. The .net thingy appears disabled, but available.

The Captain · Oct 19, 2009, 05:01 PM

Quote:

Originally Posted by BlueMak

The windows presentation foundation doesn't any more (if ever since I don't remember installing it) display under the addons section. The .net thingy appears disabled, but available.

It's just the opposite for me. I don't see the .Net Framework Assistant addon anywhere (I guess it was completely uninstalled), but the Windows Presentation Foundation plugin is still there (just disabled).

~~CitySlicker~~ · Oct 19, 2009, 11:51 PM

I wonder what have those 2 MS plugs to do with Firefox anyway? - I was not even aware it was installed at all.

CDsDontBurn · Oct 20, 2009, 04:22 AM

what is the vulnerability of this exploit?

Oct 19, 2009, 07:59 AM	#1
MIG-31 HardwareHeaven News Mod Join Date: Dec 2002 Location: Nottingham,UK Posts: 55,779 Rep Power: 444 System Specs	Firefox blocks insecure .Net add-on--awkwardly Mozilla on Friday disabled a Microsoft plug-in for Firefox called the .Net Framework Assistant because of a security problem--then scrambled to give people with patched systems an override option. Mike Shaver, Mozilla's vice president of engineering, announced the first step late Friday night on his blog. "It's recently surfaced that it has a serious security vulnerability, and Microsoft is recommending that all users disable the add-on," Shaver said. "Because of the difficulties some users have had entirely removing the add-on, and because of the severity of the risk it represents if not disabled, we contacted Microsoft today to indicate that we were looking to disable the extension and plug-in for all users via our blocklisting mechanism. Microsoft agreed with the plan, and we put the blocklist entry live immediately." ____________ Source: C\|Net __________________ Please Post Your News Submissions Here

Oct 19, 2009, 08:20 AM	#2
~~CitySlicker~~ Banned Join Date: Sep 2009 Location: Brisbane Australia Posts: 183 Rep Power: 0 System Specs	Re: Firefox blocks insecure .Net add-on--awkwardly Firefox removed those two MS plugins automatically (for me) just telling it just has been uninstalled. It was not just the .net assistant but something else too.

Oct 19, 2009, 08:46 AM	#3
BlueMak HH's Asteroids' Dominator Join Date: Nov 2004 Location: Hellas->Macedonia->Thessaloniki Posts: 13,248 Rep Power: 328 System Specs	Re: Firefox blocks insecure .Net add-on--awkwardly It didn't uninstall them, it disabled them, you can re enable at least the .net one any time you want. The second one I can't even find it, but I guess I don't need it if FF says I don't... __________________ The people who are regarded as moral luminaries are those who forego ordinary pleasures themselves and find compensation in interfering with the pleasures of others(Bertrand Russell)"You go into Afghanistan, you got guys who slap women around for five years because they didn't wear a veil,You know, guys like that ain't got no manhood left anyway. So it's a hell of a lot of fun to shoot them." - Lt. Gen. James N. Mattis This is slavery, not to speak one's thought. [Euripides-The Phoenician Women (c.411-409 B.C.)] http://www.macedonia.info/FALLACIESANDFACTS.htm *Sic semper tyrannis.*

Oct 19, 2009, 04:15 PM	#4
Rayder Mostly lurking lately.... Join Date: Jun 2002 Location: U.S.A. Posts: 2,160 Rep Power: 71	Re: Firefox blocks insecure .Net add-on--awkwardly Windows Presentation Foundation was the other one. I was able to uninstall the .NET one after it got disabled, but the WPF one just says blocked and won't let me do anything with it.

Oct 19, 2009, 04:33 PM	#5
BlueMak HH's Asteroids' Dominator Join Date: Nov 2004 Location: Hellas->Macedonia->Thessaloniki Posts: 13,248 Rep Power: 328 System Specs	Re: Firefox blocks insecure .Net add-on--awkwardly The windows presentation foundation doesn't any more (if ever since I don't remember installing it) display under the addons section. The .net thingy appears disabled, but available. __________________ The people who are regarded as moral luminaries are those who forego ordinary pleasures themselves and find compensation in interfering with the pleasures of others(Bertrand Russell)"You go into Afghanistan, you got guys who slap women around for five years because they didn't wear a veil,You know, guys like that ain't got no manhood left anyway. So it's a hell of a lot of fun to shoot them." - Lt. Gen. James N. Mattis This is slavery, not to speak one's thought. [Euripides-The Phoenician Women (c.411-409 B.C.)] http://www.macedonia.info/FALLACIESANDFACTS.htm *Sic semper tyrannis.*

Oct 19, 2009, 11:51 PM	#7
~~CitySlicker~~ Banned Join Date: Sep 2009 Location: Brisbane Australia Posts: 183 Rep Power: 0 System Specs	Re: Firefox blocks insecure .Net add-on--awkwardly I wonder what have those 2 MS plugs to do with Firefox anyway? - I was not even aware it was installed at all.

Oct 20, 2009, 04:22 AM	#8
CDsDontBurn 127.0.0.1 Join Date: May 2003 Location: Southern California Posts: 22,458 Rep Power: 202 System Specs	Re: Firefox blocks insecure .Net add-on--awkwardly what is the vulnerability of this exploit? __________________ Her First Day \| A year later