Money Matters - Simplified

Mozilla first blocks then unblocks "Unsafe" Microsoft add-on

Meanwhile, reports have emerged saying that Mozilla has gone back on a decision to block a Microsoft plug-in, now saying the Microsoft add-on software is not malicious after all

Los Angeles, October 19 -- Mozilla developers have blocked two Microsoft-developed Firefox add-ons over the weekend, saying that the applications present a security threat.

The Microsoft component shipped by the software giant as part of a .Net software update last February caused outrage among some Firefox users, who complained that the applications were sneaked onto their systems without their knowledge or approval and were extremely difficult to remove.

Plug-in “Blocked”
Mozilla on Friday blocked the two-part Microsoft component, an add-on dubbed ".NET Framework Assistant" and a plug-in named "Windows Presentation Foundation", as a precautionary measure, said Mike Shaver, the company's head of engineering.

The company has branded the aforementioned two add-ons by Microsoft as insecure, saying the software created security vulnerabilities.

"I've previously posted about the .NET Framework Assistant add-on that was delivered via Windows Update earlier this year. It's recently surfaced that it has a serious security vulnerability, and Microsoft is recommending that all users disable the add-on," Shaver wrote Friday night in a company's blog post.

"Because of the difficulties some users have had entirely removing the add-on, and because of the severity of the risk it represents if not disabled, we contacted Microsoft today to indicate that we were looking to disable the extension and plug-in for all users via our blocklisting mechanism."

Shaver said Microsoft gave company the go-ahead to block the .Net Framework Assistant and the Windows Presentation Foundation. "Microsoft agreed with the plan, and we put the blocklist entry live immediately," he said.

According to the Washington Post reports, Firefox users who had the plug-ins installed in their system began receiving a pop-up warning notice explaining: "These add-ons have a high risk of causing stability or security problems and have been blocked, but a restart is required to disable them completely."

Add-on “unblocked”
Meanwhile, reports have emerged saying that Mozilla has gone back on a decision to block a Microsoft plug-in, now saying that the Microsoft add-on software is not malicious after all.

Mozilla, the maker of the open-source Internet browser 'Firefox', has decided to unblock Microsoft plug-in Framework Assistant for Firefox, after finally deciding that it poses no security threat.

Two days after claiming in his blog that Microsoft’s add-on for Firefox is unsafe, Shaver is now saying that the company decided to rethink on its move after the software mammoth insisted that the Framework Assistant was not "a mechanism for exploiting the vulnerabilities".

Shaver said that "Microsoft has now confirmed that the Framework Assistant add-on is not a vector for this attack, and we have removed the entry from the blocklist."