Mozilla blocks, unblocks Microsoft add-ons for Firefox


From the ‘Browser Security‘ files:

Over the weekend, potentially tens of millions of users around the world booted their Firefox browser and were told that their Microsoft add-ons were being blocked (see my screenshot left).

Specifically, Mozilla began blocking the Windows Presentation Foundation (WPF) add-on and the .NET Framework Assistant add-on. Both of those add-ons were added to Mozilla’s blocklist for security issues.

Late Sunday, Mozilla VP Mike Shaver blogged that the .NET Framework Assistant add-on is now set to be removed from the blocklist but the WPF framework would stay on the list.

“We received confirmation from Microsoft this evening that the Framework
Assistant add-on is not a mechanism for exploiting the vulnerabilities
detailed in the earlier post,
so we’ve removed it from the blocklist,” Shaver wrote. “As the blocklist update
propagates to clients, the add-on should be re-enabled for users who
had it previously enabled.”

As of 9 AM EDT today (Monday Oct 19), I personally still see both Microsoft add-ons on the blocklist as published by Mozilla at I’m not sure how long it takes to change a web page, (let alone propagate a change to tens of millions of users).

The reason why Mozilla is blocking the Microsoft add-ons in the first place is because  during this month’s Microsoft patch Tuesday update, the two add-ons were identified as being risky.

News Around the Web