Wednesday, October 21, 2009

Tuesday, October 20, 2009

Sunday, October 18, 2009

Sneaky Microsoft plug-in puts Firefox users at risk

An add-on that Microsoft silently slipped into Firefox [in an update delivered via Windows Update last February] leaves the browser open to attack:
http://www.computerworld.com/s/article/9139459/Sneaky_Microsoft_plug_in_puts_Firefox_users_at_risk


Actually its two Microsoft add-ons. Firefox has since blocked them:
"Microsoft .NET Framework Assistant and Windows Presentation Foundation, all versions, for all applications. Reason: remote code execution vulnerability (see bug 522777)"
https://www.mozilla.com/en-US/blocklist/


I never knew these add-ons were installed until I got a popup saying Firefox has blocked two add-ons! i first thought they were trojans by a 3rd party - because it's so unlikely for a so-called reputed company to install stealth plug-ins.