 merrie says: Here, the affected process is the Windows Presentation Foundation (WPF) hosting process, PresentationHost.exe. While the vulnerability is in an IE component, there is an attack vector for Firefox users as well. The reason is that .NET Framework 3.5 SP1 installs a “Windows Presentation Foundation” plug-in in Firefox. Now, Microsoft’s security folks are actually recommending that Firefox users uninstall the buggy add-on: For Firefox users with .NET Framework 3.5 installed, you may use “Tools”-> “Add-ons” -> “Plugins”, select “Windows Presentation Foundation”, and click “Disable" This introduction of vulnerabilities in a competing browser is a colossal embarrassment for Microsoft. At the time of the surreptitious installs, there were prescient warnings from many in the community about the security implications of introducing new code into browsers without the knowledge " and consent " of end users. http://blogs.zdnet.com/security/?p=4614&tag=nl.e589 I just got a pop-up warning 15 min. ago. I better check it out now! SEE: Microsoft says Google Chrome Frame doubles IE attack surface This episode also underscores some of the hypocrisy that has risen to the surface in the new browser wars. When Google announced it would introduce a plug-in that runs Google Chrome inside Microsoft’s Internet Explorer, Microsoft whipped out the security card and warned that Google’s move increased IE’s attack surface. “Given the security issues with plug-ins in general and Google Chrome in particular, Google Chrome Frame running as a plug-in has doubled the attach area for malware and malicious scripts. This is not a risk we would recommend our fr... I could temporarily disable it from my "All-In-One" toolbar, but I'm nervous that it might be something that I should keep.  I was getting some sluggish performance out of Firefox a while back and disabling that plug in helped. So fortunately I already had it disabled. Firefox is not auto prompting a "block" to disable these 2 programs on Restart. correction: Firefox is NOW (delete "not" typo) blocking these programs on restart. I just received my auto-prompt to click on "restart FF" to disable IE NET Framework, but I have FF "All-In-One" add-on, which allows you options to either "disable" or "uninstall", which comes in handy in certain situations. I was getting some sluggish performance out of Firefox a while back Now that you've mentioned it n2, I've noticed that my FF performance has improved measurably since I disabled it today. |
View the Top Clips from October 17, 2009
Embed This Clip In Your Site...
|
|
|
|
|
New from the makers of Clipmarks: Amplify.com - Don't just share the news...Amplify it!
|
|
