Mozilla Disables Microsoft Dotnet Add-On For Firefox

Citing a possible security risk, Mozilla has blocked certain Microsoft-made components from its Firefox web browsers and has termed its move, a precautionary measure to protect its users.

The components that were blocked include the "Windows Presentation Foundation and the .NET Framework Assistant"; Mozilla has used its blocklisting mechanism, which is designed to block potentially risky plug-ins, to disable the components.

Explaining the rationale behind the move, Mike Shaver, head of engineering at Mozilla said that “Because of the difficulties some users have had entirely removing the add-on, and because of the severity of the risk it represents, we contacted Microsoft today to indicate that we were looking to disable the extension and plug-in.”

It is important to note that last week Microsoft’s security team had admitted that its software which had made its way into the Firefox browser in February 2009 had a vulnerability which can be exploited by hackers to gain access to Windows PCs and apparently the same flaw also affects the Internet Explorer 8 browser too.

The vulnerability was addressed by Microsoft on last Tuesday during its security update and it maintains that users who have installed the patches are protected from the vulnerability.

Our Comments

No, there are no conspiracy theories here. Firefox has an issue with Microsoft's Add-on and hopefully, the problem will be resolved soon. WPF and .Net Framework Assistant are not essential for the good running of Firefox. Worryingly, it seems that hackers are cashing in on the fear surrounding what is essentially a small problem. We've seen a number of malware website crop up when looking for the words "Firefox", "WPF" and "Framework"/

Firefox blocks insecure .Net add-on--awkwardly

(Cnet)

Mozilla blocks Microsoft Firefox Add ons for security

(eWeek)

Mozilla Blocking Microsoft Plug-Ins

( PC Mag)

Mozilla blocks Microsoft's sneaky Firefox plug-in

(Computer World)