Adobe Patches Flash Bugs, Attackers Targeted Firefox Users

Hilbert Hagedoorn

If you are a Firefox userÂ*and missed the update released yesterday, Adobe has patched three security flaws that specifically targeted the Mozilla Firefox browser.Adobe patched three new security flaw...

Adobe Patches Flash Bugs, Attackers Targeted Firefox Users

Veeshush · 03-01-2013, 08:34 | posts: 254

For my main browser I have all plugins, such as Java, Flash, Shockwave etc disabled. If I do run across anything that needs flash I just download it (like say a video or game) or open it in a secondary browser.

For those that have a hard time keeping up with all the updates while maintaining their sanity:
https://browsercheck.qualys.com/

RoadKillNL · 03-01-2013, 08:44 | posts: 2,548 | Location: The Netherlands

Quote:

Originally Posted by Veeshush

For my main browser I have all plugins, such as Java, Flash, Shockwave etc disabled. If I do run across anything that needs flash I just download it (like say a video or game) or open it in a secondary browser.

For those that have a hard time keeping up with all the updates while maintaining their sanity:
https://browsercheck.qualys.com/

If i had to use the internet like that id just unplug my lan cable and be done with it.

Veeshush · 03-01-2013, 09:03 | posts: 254

Well, I don't come across too many flash things for what I do.

sverek · 03-01-2013, 09:33 | posts: 1,036 | Location: Japan, Soka

Quote:

Originally Posted by Veeshush

Well, I don't come across too many flash things for what I do.

of course, all you need is a terminal and curl.

Rich_Guy · 03-01-2013, 11:54 | posts: 6,679 | Location: UK

Well this one works, been stuck on 11.4.402.265, as the update after that wouldn't work, couldn't use the net as it just kept hanging.

Veeshush · 03-02-2013, 09:22 | posts: 254

I find this compliments Noscript on Firefox for plugin security:
https://blog.mozilla.org/security/20...ocklist-style/

Quote:

At the moment, click-to-play blocklisted plugins is a security feature that protects against drive-by attacks targeting plugins that are known to be vulnerable. It does not prevent attacks where a user is convinced to activate a vulnerable plugin on a malicious site. It also is not an all-purpose plugin management system.

This feature is enabled by default, so users are automatically protected. For the adventurous, the about:config preference “plugins.click_to_play” can be set to true to enable click-to-play for all plugins, not just out-of-date ones. However, this aspect of the feature is still in development

tsunami231 · 03-02-2013, 22:45 | posts: 2,288 | Location: USA

this update to flash seems to of fix the whole issue of FF freezing a few seconds when loading heavy websites, with lots of things being loaded. Which in turn would freeze everything else like games in windowed fullscreen while FF was frozen for those few seconds. Atlest I have yet to see it happen this update.