Firefox Blocks Flash By Default To Protect Against Fresh ‘Critical’ Vulnerabilities

Firefox now blocks Adobe Flash by default following the discovery of yet more zero-day vulnerabilities in the browser plug-in.

Two ‘critical’ flaws (CVE-2015-5122 and CVE-2015-5123) have been uncovered in files retrieved during the attack on controversial surveillance tools developer Hacking Team and have yet to be patched by Adobe, which expects to make updates available later this week.

Mark Schmidt, head of Firefox support at Mozilla, announced on Twitter that all versions of Flash were now blocked by the browser until a fix is made available.

Firefox Flash block

“BIG NEWS!! All versions of Flash are blocked by default in Firefox as of now,” he said in a Tweet accompanied by an ‘occupy Flash’ image (left). “To be clear, Flash is only blocked until Adobe releases a version which isn’t being actively exploited by publicly known vulnerabilities.”

Mozilla says it routinely blocks add-ons, plugins, or other third-party software that “seriously compromises Firefox security, stability, or performance” when it becomes aware of them. Its block relates specifically to CVE-2015-5122.

Security firm TrendMicro says that at present the vulnerability is just a ‘proof of concept’ and has yet to see it exploited in the wild. If exploited, an attacker could engineer a crash and take control of the affected system.

Adobe’s promised fixes will be the 37th and 38th for the month of July so far, with an update last week fixing 36 flaws, including another vulnerability (CVE-2015-5119) discovered in 400GB worth of internal Hacking Team documents.

Are you a security pro? Try our quiz!

Steve McCaskill

Steve McCaskill is editor of TechWeekEurope and ChannelBiz. He joined as a reporter in 2011 and covers all areas of IT, with a particular interest in telecommunications, mobile and networking, along with sports technology.

View Comments

  • I have to admit when I first read about this, one of the first things that comes to mind is a couple of years back when Steve Jobs wrote a "rant" about the many downsides of Flash and how it's time to move on. Hopefully this gets resolved quickly.

Recent Posts

Is the Digital Transformation of Businesses Complete?

Digital transformation is an ongoing journey, requiring continuous adaptation, strong leadership, and skilled talent to…

7 hours ago

Craig Wright Faces Contempt Claim Over Bitcoin Lawsuit

Australian computer scientist faces contempt-of-court claim after suing Jack Dorsey's Block and Bitcoin Core developers…

7 hours ago

OpenAI Adds ChatGPT Search Features

OpenAI's ChatGPT gets search features, putting it in direct competition with Microsoft and Google, amidst…

8 hours ago

Google Maps Steers Into Local Information With AI Chat

New Google Maps allows users to ask for detailed information on local spots, adds AI-summarised…

8 hours ago

Huawei Sees Sales Surge, But Profits Fall

US-sanctioned Huawei sees sales surge in first three quarters of 2024 on domestic smartphone popularity,…

9 hours ago

Apple Posts China Sales Decline, Ramping Pressure On AI Strategy

Apple posts slight decline in China sales for fourth quarter, as Tim Cook negotiates to…

9 hours ago