Firefox Blocks Microsoft .NET Framework Assistant Add-on

Use Netsparker


This is an interesting development, I noticed the pop-up on my Firefox yesterday. The reason however wasn’t security it was ‘instability’.

It’s a fair move by Mozilla though as the add-on can cause security vulnerabilities in Firefox outside of their control. They can’t fix the software, so the best thing they can do to ensure user safety is to block it.

Compounded with the fact it’s extremely hard for users to remove the add-on themselves the block is a good idea.

Mozilla late Friday blocked the Microsoft-made software that had put Firefox users at risk from attack.

The two-part Microsoft component — an add-on dubbed “.NET Framework Assistant” and a plug-in named “Windows Presentation Foundation” — have been blocked by Mozilla as a precautionary measure, said Mike Shaver, the company’s head of engineering.

“Because of the difficulties some users have had entirely removing the add-on, and because of the severity of the risk it represents if not disabled, we contacted Microsoft today to indicate that we were looking to disable the extension and plug-in for all users via our blocklisting mechanism,” Shaver said in an announcement posted Friday night to the company’s security blog .

The annoying thing is these add-ons are installed in Firefox without any kind of prompt or permission given by the user.

Microsoft pushed them out with the .NET Framework 3.5 Service Pack 1 (SP1) update in February this year, so our browsers have been vulnerable since then.

The software was almost impossible to remove without some registry hacking, Microsoft did remedy this later – but still how many people would know?

Mozilla maintains an add-on/plug-in blocking list that automatically bars risky software from being used by Firefox. The open-source company first used the blocker in 2007. Mozilla has used the tool only nine times, including Friday’s blocking of the Microsoft add-on and plug-in. In May 2008, for example, Mozilla added a Vietnamese language pack for Firefox to the blocking list when the pack was found to contain a worm.

According to Shaver, Microsoft gave Mozilla the go-ahead to block the .Net Framework Assistant and the Windows Presentation Foundation.

Last week, Microsoft’s security team acknowledged that its software — which had been silently installed in Firefox as far back as February 2009 — contained a critical vulnerability that could be used by hackers to hijack Windows PCs. The same vulnerability also affected all versions of Internet Explorer (IE), including the newest version, IE8.

Thankfully Firefox has the blocklist functionality and they have been aggressively moving towards ensuring 3rd party additions are also secure and don’t comprise the integrity of the platform.

Last month they warned users with out of date Flash plugins to update.

Firefox 3.6 will be even more aggressive in this aspect warning users when they visit a site that relies on one or more outdated add-ons.

Source: Network World

Posted in: Exploits/Vulnerabilities, Windows Hacking

, , , , ,


Latest Posts:


NetBScanner - NetBIOS Network Scanner NetBScanner – NetBIOS Network Scanner
NetBScanner is a NetBIOS network scanner tool that scans all computers in the IP addresses range you choose, using the NetBIOS protocol.
Metta - Information Security Adversarial Simulation Tool Metta – Information Security Adversarial Simulation Tool
Metta is an information security preparedness tool in Python to help with adversarial simulation and assess security defense preparation and alerts.
Powershell-RAT - Gmail Exfiltration RAT Powershell-RAT – Gmail Exfiltration RAT
Powershell-RAT is a Python-based Gmail exfiltration RAT that can be used a Windows backdoor to send screenshots or other data as an e-mail attachment.
SCADA Hacking - Industrial Systems Woefully Insecure SCADA Hacking – Industrial Systems Woefully Insecure
It seems like SCADA hacking is still a topic in hacker conferences, and it should be with SCADA systems still driving power stations, manufacturing plants etc.
airgeddon - Wireless Security Auditing Script airgeddon – Wireless Security Auditing Script
Airgeddon is a Bash powered multi-use Wireless Security Auditing Script for Linux systems with an extremely extensive feature list.
Acunetix v12 - Pause & Resume Acunetix v12 – More Comprehensive More Accurate & 2x Faster
Acunetix, the pioneer in automated web application security software, has announced the release of Acunetix v12 - more comprehensive, accurate & 2x faster.


6 Responses to Firefox Blocks Microsoft .NET Framework Assistant Add-on

  1. Hannibal October 20, 2009 at 7:10 am #

    To be honest… Thank GOD at last they blocked these damn fucking things you could not even uninstall.

    BTW…
    http://tech.slashdot.org/story/09/10/19/1215230/Mozilla-Unblocks-Microsofts-NET-Addon?art_pos=20

    damn :(

  2. Morgan Storey October 20, 2009 at 10:18 am #

    I looked at the steps to uninstall it sometime ago, but decided against it, it required a broweser restart which I rarely do, so I just disabled it.
    I actually heard someone say the other day that due to Java locking down on MS distributing their own bad version of a Java Virtual Machine, MS came out with .NET, interesting idea. But even this many years on .NET is not as good as java and javascript in my opinion.

  3. Mony October 20, 2009 at 4:12 pm #

    Initially when I read the news about Microsoft in Digg I hoped Mozilla team to come up with solution and Mozilla rocked again.

  4. Ahmad Barirani November 2, 2009 at 4:25 am #

    This is actually a nice move from Mozilla. Somebody has to care about its customers. If Microsoft doesn’t, then Mozilla has to.

  5. Kane December 17, 2009 at 9:02 am #

    Morgan, You didn’t remove it because it requires a browser restart??? That is the most stupidest thing I’ve ever heard. What, are you afraid it won’t start again? LOL

  6. Morgan Storey December 17, 2009 at 12:09 pm #

    @Kane: Not really my FF browser is stable I usually restart it maybe once a month and at that stage I am not thinking about the .net plugin, besides it is disabled now. I tend to keep tabs open that I am part way through reading, plus my email, RSS feeds, monitoring sites, all up it comes to about 20 tabs.