5
POPSMicrosoft Exposes Firefox Users to Drive-By Malware Downloads
Here, the affected process is the Windows Presentation Foundation (WPF) hosting process, PresentationHost.exe. While the vulnerability is in an IE component, there is an attack vector for Firefox users as well. The reason is that .NET Framework 3.5 SP1 installs a “Windows Presentation Foundation” plug-in in Firefox. Now, Microsoft’s security folks are actually recommending that Firefox users uninstall the buggy add-on: For Firefox users with .NET Framework 3.5 installed, you may use “Tools”-> “Add-ons” -> “Plugins”, select “Windows Presentation Foundation”, and click “Disable" This introduction of vulnerabilities in a competing browser is a colossal embarrassment for Microsoft. At the time of the surreptitious installs, there were prescient warnings from many in the community about the security implications of introducing new code into browsers without the knowledge " and consent " of end users. http://blogs.zdnet.com/security/?p=4614&tag=nl.e589
8
Pops
Newest Clips
Latest Comments
Most Pops
Print
Save
Turn on live update