Help - Search - Members - Calendar
Full Version: windows presentation foundation 3.5.30729.1 and FF
Malwarebytes Forum > Computer Help > PC Help
chimpy
FF just popped up and disabled my windows presentation foundation 3.5.30729.1 and said it was for my protection blink.gif It said I had to close the browser to implement the change but when I checked the plug in it was already disabled and no button visable to enable it, I click on the "more info" link that was there but the list it gave did not mention WPF, I closed my browser which was running sandboxed and re opened it and WPF is enabled and FF has just given me another pop up about it .. unsure.gif

Anyone else have this?



EDIT

I have post a question about it on the forums and found this link while googling http://www.tomsguide.com/us/Firefox-Micros...,news-4888.html makes for a interesting read.
mountaintree16
@ Chimpy

I don't have that add-on, no. That's a strange thing to happen, I hope someone might know what's going on.
calintexas
Mine just did the same thing. .Net 3.5 put the plugin there. It's likely this week's updates caused the issue. I wouldn't worry too much about it. There are questions about whether you really want the WPF attached to Firefox anyway.
chimpy
Thanks Mountaintree16 and calintexas, It seems its been vunrable for some time in the artical I found so I am probably safer without it, Glad I surf sandboxed after reading it!
catscomputer
Which version of firefox are you using? I have the same WPF plugin (and it's enabled), and so far I've not had this warning. I am using FF 3.5.3.
prairie dog
QUOTE (catscomputer @ Oct 16 2009, 10:31 PM) *
Which version of firefox are you using? I have the same WPF plugin (and it's enabled), and so far I've not had this warning. I am using FF 3.5.3.


Same here. No issues so far
Strangedays
I just got mine disabled
mountaintree16
@ Chimpy

You're welcome. I am sorry I wasn't more helpful, though.

I have no idea what this add-on is. Only windows thing I have on my add-ons is Windows Media Player Dynamic Link Library.
Strangedays
Blocked plugins
AdvancedSetup
It should be disabled. One of the news magazines posted about this just today where it can be a victim of a drive by malware attack.
mountaintree16
@ AdvancedSetup

Thanks for the confirmation!

I've never even heard of it till this post, I wonder where it came from and why its even in the FF add-ons list :/
exile360
It came from Microsoft smile.gif .
mountaintree16
@ Exile

Thanks.

dry.gif Hmm I wonder why.
AdvancedSetup
Microsoft exposes Firefox users to drive-by malware downloads
blogs.zdnet.com/security/?p=4614

Sneaky Microsoft plug-in puts Firefox users at risk
www.computerworld.com/s/article/9139459/Sneaky_Microsoft_plug_in_puts_Firefox_users_at_risk

http://blogs.technet.com/srd/archive/2009/...y-bulletin.aspx
chimpy
Ah thanks alot everyone, I see that it is now on FF blocked list as it was not last night, I had .NET disabled but when it changed to WPF I forgot to disable that. Good job FF is looking out for us.

@catscomputer I use the same FF as you 3.5.3
prairie dog
QUOTE (AdvancedSetup @ Oct 17 2009, 01:05 AM) *
It should be disabled. One of the news magazines posted about this just today where it can be a victim of a drive by malware attack.



Thanks AS. I'll be disabling mine now wink.gif
prairie dog
just noticed that Firefox automatically disabled WPF and also MS .NET framework assistant. biggrin.gif Good looking out FF cool.gif
catscomputer
@AdvancedSetup

Thanks heaps for the info. I've disabled WPF plugin now too.

That article you linked to mentions the sliverlight plugin: http://blogs.technet.com/srd/archive/2009/...y-bulletin.aspx

Should that plugin be disabled too?
mountaintree16
Thanks for the article, Ron. I don't completely understand it though, I'll re-read it a few times smile.gif

Ick.

Why would Microsoft do that? sad.gif

I'm glad that FF is on top of this, though smile.gif

Edit: Last February? :/

and this?
QUOTE
What was particularly galling to users was that once installed, the .NET add-on was virtually impossible to remove from Firefox. The usual "Disable" and "Uninstall" buttons in Firefox's add-on list were grayed out on all versions of Windows except Windows 7, leaving most users no alternative other than to root through the Windows registry, a potentially dangerous chore, since a misstep could cripple the PC.

:/

QUOTE
According to Microsoft, the vulnerability is "critical," and also can be exploited against users running any version of IE, including IE8.

I don't really get that, has the IE vulnerability been patched?

I'm just glad that I don't have the WPF add-on! What is wrong with Microsoft?
mountaintree16
@ Catscomputer

Did you see this:

QUOTE
Please note that Silverlight 3 is not affected by this bulletin. Users who have upgraded to Silverlight 3 are not vulnerable to attacks from malicious Silverlight applications.


and this:

QUOTE
2. Temporarily disable Silverlight

a. This workaround is not applicable for Silverlight 3 users as Silverlight 3 is not vulnerable.

b. If you can upgrade to Silverlight 3, we recommend you do that instead of using this workaround.

c. Detailed steps are available in the security bulletin: http://www.microsoft.com/technet/security/...n/MS06-061.mspx.

d. This workaround prevents Silverlight from loading, preventing malicious websites from exploiting this vulnerability, but also preventing non-malicious Silverlight applications from loading.


If you have the most current version, I don't think you are at risk, according to that. Found that on the clickable link that Ron gave smile.gif
chimpy
I do not have .NET anymore, not sure what happened to it really but I thought in another post http://www.malwarebytes.org/forums/index.p...c=26791&hl= that it had just changed into WPF but it seems some people have both version and others like myself just have WPF, Weird, Though Not sure I even need WPF!
yardbird
@ chimpy

I saw one of the admins or exile360 reply to a post if the .net was needed... all the answers were yes! you can PM exile360, he has a good list of ms downloads... Or do a search for what you need here:
http://support.microsoft.com/

how did it disapear?
chimpy
QUOTE
It's still in my Firefox Plugins as Windows Presentation Foundation 3.5.30729.1
ID: C:\Windows\Microsoft.NET\Framework\V3.5\Windows Presentation Foundation\NPWPF.dll
Windows Presentation Foundation (WPF) plug-in for Mozilla browsers


Thats from Jacktivity from the link in my last post so I presume that its the same as mine in the C:\ drive too, just interesting how some people have .NET and WPF if .NET is now supposed to be WPF... All very confusing! blink.gif
yardbird
Think I'm going to shop around for another browser! I'm starting to see too many issues over the past few months about Firefox.... good luck with that.. cheers..
chimpy
I thought about getting chrome but I love my add-ons, well the ones FF does not disable tongue.gif but I know lots of people moving from FF due to the memory leak which is up to 50% in some cases, thankfully I have not had this problem so will stick by FF for the time being.
catscomputer
This is the first time I've heard of the memory leak with FF. I had to consult google to know what it was and what would happen in a memory leak. I don't think I've had anything like that, but I hope I just haven't gone and jinxed myself now. *touches wood*

I love FF too, mainly because of NS & Adblock+, but also because it's so easy for a computer dummy like me to configure! smile.gif

BTW Having disabled my WPF plugin I now see it has a red exclamation by it indicating that it is blocked for my protection.
YoKenny1
I'm not a Firefox user but users should read this
QUOTE
update: .NET Framework Assistant (ClickOnce support) unblocked

We received confirmation from Microsoft this evening that the Framework Assistant add-on is not a mechanism for exploiting the vulnerabilities detailed in the earlier post, so we’ve removed it from the blocklist. As the blocklist update propagates to clients, the add-on should be re-enabled for users who had it previously enabled.
http://shaver.off.net/diary/2009/10/18/upd...pport-unblocked
Firefox
there is some good reading here:

Mozilla blocks Microsoft's sneaky Firefox plug-in
Network World Story
mountaintree16
Thank you Firefox and YoKenny1 for the update. Both links made for very good reading.

It's great to know that Firefox is looking out for its users in regards to vulnerable and/or out of date plug ins smile.gif

Personally I don't think it would hurt to keep these particular plug-ins disabled, as they don't seem to serve any purpose or benefit in Firefox, but its good to know that they aren't bringing in malicious items: )
Firefox
@ mountaintree16 You are quite welcome..... biggrin.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.