Published in News

Mozilla kills Flash

by on15 July 2015


It will kill every one of us

The big cheeses at the Mozzarella Foundation have disabled all versions of Flash in Firefox, by default. 

"All versions of Adobe's Flash Player plugin are currently deactivated by default, until Adobe releases an updated version to address known critical security issues," Mozilla said on its support site.

The move comes after a recent document dump from Hacking Team indicated that an easy way to turn over a computer would be to attack certain flaws in Flash.

One of the flaws is in Action Script 3 while the other is in the BitMapData component of Flash. The ActionScript 3 flaw has already been integrated into the Angler exploit kit already and there's a module for it in the Metasploit Framework, as well.

This makes 38 flaws found in Flash so far this month. Alex Stamos, Facebook's new chief security officer, urged Adobe to set an 'end of life' date for the much-maligned software.

The move is temporary one as Adobe patched two vulnerabilities in Flash this morning, but most sane people are wondering if they can survive without the software.

Last modified on 15 July 2015
Rate this item
(5 votes)

Read more about: