Firefox now blocks Adobe Flash by default following the discovery of yet more zero-day vulnerabilities in the browser plug-in.
Two ‘critical’ flaws (CVE-2015-5122 and CVE-2015-5123) have been uncovered in files retrieved during the attack on controversial surveillance tools developer Hacking Team and have yet to be patched by Adobe, which expects to make updates available later this week.
Mark Schmidt, head of Firefox support at Mozilla, announced on Twitter that all versions of Flash were now blocked by the browser until a fix is made available.
Mozilla says it routinely blocks add-ons, plugins, or other third-party software that “seriously compromises Firefox security, stability, or performance” when it becomes aware of them. Its block relates specifically to CVE-2015-5122.
Security firm TrendMicro says that at present the vulnerability is just a ‘proof of concept’ and has yet to see it exploited in the wild. If exploited, an attacker could engineer a crash and take control of the affected system.
Adobe’s promised fixes will be the 37th and 38th for the month of July so far, with an update last week fixing 36 flaws, including another vulnerability (CVE-2015-5119) discovered in 400GB worth of internal Hacking Team documents.
Are you a security pro? Try our quiz!
Suspended prison sentence for Craig Wright for “flagrant breach” of court order, after his false…
Cash-strapped south American country agrees to sell or discontinue its national Bitcoin wallet after signing…
Google's change will allow advertisers to track customers' digital “fingerprints”, but UK data protection watchdog…
Welcome to Silicon In Focus Podcast: Tech in 2025! Join Steven Webb, UK Chief Technology…
European Commission publishes preliminary instructions to Apple on how to open up iOS to rivals,…
San Francisco jury finds Nima Momeni guilty of second-degree murder of Cash App founder Bob…
View Comments
I have to admit when I first read about this, one of the first things that comes to mind is a couple of years back when Steve Jobs wrote a "rant" about the many downsides of Flash and how it's time to move on. Hopefully this gets resolved quickly.