Mozilla disables Microsoft plug-ins
Mozilla is disabling a pair of components stealthily installed by Microsoft earlier this year for Windows users of the Firefox Web browser, warning that the software suffers from serious security vulnerability.
Firefox users may already have seen a pop-up notice about an unstable or insecure add-on being disabled. The message would look something like image below.
There are two confusing parts to this issue as I see it: first, the same Microsoft SRD blog entry states unequivocally that “…any customers that have applied the update associated with MS09-054 are protected, regardless of the attack vector.” I did this Tuesday, and yet Firefox just blocked it for me anyway. In fact, the block list says clearly that all versions of the add-on are blocked. The other thing is that Mozilla is blocking the “Microsoft .NET Framework Assistant” add-on too.
After Mozilla contacted Microsoft about this, and talked about the possibility of Mozilla disable the extension and plugin for all users via their block listing mechanism. Microsoft agreed with the plan, and Mozilla put the block list entry live immediately













