(The quickest way to register)

Forum

  1. User picture
    • Warxas on Sat 17 Oct 2009
    • 02:56:30 AM UTC

    New Firefox exploit from NET Framework SP

    In case everyone hasn't read it yet; http://isc.sans.org/diary.html?storyid=7381
    The newest patch from Microsoft's patch Tuesday, (MS09-054) installs a vulnerable plug-in in Firefox.

    So just go to Firefox's add-ons, click plugins, then chose disable for the Windows Presentation Foundation plugin.

    To get rid of the plugin (Unless I understood this wrong.) go to %SYSTEMDRIVE%\Windows\Microsoft.NET\Framework\v3.5\
    and delete the folder named Windows Presentation Foundation.

Comments:

  2. User picture
    • jpvip on Sat 17 Oct 2009
    • 03:36:32 AM UTC

    oooh

    Vista and lower, is what this advisory is for.

    I am in Windows 7 (release), and I do not see the plugin in Firefox. :)

    ~DragonMaster Jay, malware researcher,
    Admin, helpmyos.com
  3. User picture
    • demonluo on Sat 17 Oct 2009
    • 05:16:38 AM UTC

    what about IE?

    what about IE?
  4. User picture
    • Warxas on Sat 17 Oct 2009
    • 05:23:52 AM UTC

    Here

    Are the institutions to determine if you are affected, and how to fix the vulnerability in IE. http://securitygarden.blogspot.com/2009/10/ms09-05...

    Hope that helps demonluo. :)
  5. User picture
    • jpvip on Sat 17 Oct 2009
    • 06:04:09 AM UTC

    oh no...

    Not security garden...

    ~DragonMaster Jay, malware researcher,
    Admin, helpmyos.com
  6. User picture
    • Warxas on Sat 17 Oct 2009
    • 06:11:52 AM UTC

    Why?

    Why?
  7. User picture
    • jpvip on Sat 17 Oct 2009
    • 06:46:59 AM UTC

    uhh..

    See my comment: http://www.mywot.com/en/scorecard/securitygarden.b...

    ~DragonMaster Jay, malware researcher,
    Admin, helpmyos.com
  8. User picture
    • demonluo on Sat 17 Oct 2009
    • 10:41:47 AM UTC

    thanks for the links good

    thanks for the links good info but r this site owner really deframe/mean to other since jpvip seem to know the site owner...
  9. User picture
    • tinfoil on Sat 17 Oct 2009
    • 10:47:27 AM UTC

    Thank you for the warning; I

    Thank you for the warning; I have deleted the add-on. Hopefully the Mozilla staff will blacklist this soon.
  10. User picture
    • phantazm on Sat 17 Oct 2009
    • 12:27:51 PM UTC

    What is WPF..?

    What is this "Windows Presentation Foundation" supposed to do?

    I suppose it has some kind of functionality,
    but who needs it and who don't..?
  11. User picture
    • jpvip on Sat 17 Oct 2009
    • 12:32:08 PM UTC

    ...

    WPF is a GUI rendering program for Windows-based programs.

    @demonluo
    Security Garden is owned by an MS-MVP Corrine. I have read some nasty reports she spills out. I have no idea why she gets so rash, but I guess that is her passion.

    ~DragonMaster Jay, malware researcher,
    Admin, helpmyos.com
  12. User picture
    • tinfoil on Sat 17 Oct 2009
    • 06:08:28 PM UTC

    Firefox just blacklisted it,

    Firefox just blacklisted it, along with the Microsoft .NET plugin.
    • User picture
      • jpvip on Sat 17 Oct 2009
      • 09:26:27 PM UTC

      lol

      Good. I guess it was bad enough.

      ~DragonMaster Jay, malware researcher,
      Admin, helpmyos.com
  13. User picture
    • Warxas on Sat 17 Oct 2009
    • 06:19:48 PM UTC

    Yay

    Firefox! Too bad I already got rid of it. :P