Mozilla Blocks .NET Framework From Microsoft – Because Of Security Vulnerability

Mozilla has posted on their blog site a notice that they are blocking Microsoft’s .NET Framework because of security concerns. In a statement it says:

I’ve previously posted about the .NET Framework Assistant add-on that was delivered via Windows Update earlier this year. It’s recently surfaced that it has a serious security vulnerability, and Microsoft is recommending that all users disable the add-on.

Because of the difficulties some users have had entirely removing the add-on, and because of the severity of the risk it represents if not disabled, we contacted Microsoft today to indicate that we were looking to disable the extension and plugin for all users via our blocklisting mechanism. Microsoft agreed with the plan, and we put the blocklist entry live immediately. (Some users are already seeing it disabled, less than an hour after we added it!)

I had no problem uninstalling the add-on, only to discover the following day, that .NET Framework was trying to reinstall itself. Fortunately it was blocked by Mozilla.

Comments welcome.

Source.

Update (Sunday Oct 18, 6:30pm PDT): Microsoft has now confirmed that the Framework Assistant add-on is not a vector for this attack, and we have removed the entry from the blocklist. We are also working on a mechanism to allow Firefox users to re-enable the WPF plugin ahead of its eventual removal from the blocklist. For more information, see Mike Shaver’s latest blog post.

Article Written by

I have been writing for LockerGnome since relocating to Missouri seven years ago, where I continue to be a technology enthusiast who enjoys playing with the newest and latest gadgets.

  • Denny

    but I still Use Both Of-Um , IE & Firefox . ?

  • mhz

    Ron, this has been undone, check your source page again.

    >>>>Microsoft has now confirmed that the Framework Assistant
    >>>>add-on is not a vector for this attack,
    >>>>and we have removed the entry from the blocklist….

  • http://wp3.lockergnome.com/nexus/blade/ Ron Schenone

    Thanks mhz! Will do.

  • http://ictheworld.wordpress.com hotrao

    Seems to me that we (intended as users at different degrres of skills) are the playground of some kids trying to disturb each other.

    While I understand commercial means of this move, doesn’t seem to me it’s a fair way to play.

    And at least is not serious.