578232 - Blocklist versions of CoolPreviews 3.0.1 and older

Status: RESOLVED WONTFIX

(Toolkit :: Blocklist Policy Requests, defect, P1)

Description

[Jorge Villalobos [:jorgev] (he/him)]

See bug 573678 for more information. This is just a vulnerability and not a malicious add-on, so if there's an option to force an update instead of nuking the add-on, that would be best. Fire away otherwise.

GUID is {CE6E6E3B-84DD-4cac-9F63-8D2AE4F30A4B}.

Thanks!

Comment 1

[Jorge Villalobos [:jorgev] (he/him)]

There's a blog post planned for this one as well, so maybe we should wait until that's up so that we can provide more info.

Comment 2

[Michael Morgan [:morgamic]]

It's possible to block with a lower severity.  We can do that for this one.  Let us know when the post is ready.

Comment 3

[Jorge Villalobos [:jorgev] (he/him)]

Here's the post for both CoolPreviews and Mozilla Sniffer: http://blog.mozilla.com/addons/2010/07/13/add-on-security-announcement/

Comment 4

[Jorge Villalobos [:jorgev] (he/him)]

I think we can drop blocklisting this add-on. Usage of older versions has dropped significantly, and it doesn't seem worthwhile to exploit this bug anymore.
-> FIXED

Comment 5

[Jorge Villalobos [:jorgev] (he/him)]

Er, WONTFIX, actually.