1316179 - Plugin block request: Adobe Flash Player

Status: RESOLVED FIXED

(Toolkit :: Blocklist Policy Requests, defect)

Description

[guigs [:guigs] PST (please needinfo me!)]

Plugin name: 
Plugin versions to block: 
Applications, versions, and platforms affected: 
Block severity: (hard/soft)

How does this plugin appear in about:plugins?

    File: Flash Player.plugin
    Path: /Library/Internet Plug-Ins/Flash Player.plugin
    Version: 23.0.0.205
    State: Enabled
    Shockwave Flash 23.0 r0

Homepage and other references and contact info: 
https://helpx.adobe.com/security/products/flash-player/apsb16-37.html

Reasons:Priority 1

Comment 1

[Andrew Williamson [:eviljeff]]

The blocks are now staged:

Flash Player Plugin 23.0.0.185 to 23.0.0.205 (click-to-play)
https://addons-dev.allizom.org/en-US/firefox/blocked/p950

Flash Player Plugin on Linux 11.2.202.637 to 11.2.202.643 (click-to-play)
https://addons-dev.allizom.org/en-US/firefox/blocked/p949

test please

Comment 2

[Kamil Jozwiak [:kjozwiak]]

Win 10 x64: PASSED
==================

File: NPSWF32_23_0_0_205.dll
Path: C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_23_0_0_205.dll
Version: 23.0.0.205
State: Enabled (STATE_VULNERABLE_UPDATE_AVAILABLE)
Shockwave Flash 23.0 r0

* build used: https://archive.mozilla.org/pub/firefox/candidates/50.0b9-candidates/
* browser console log: Blocklist state for Shockwave Flash changed from 0 to 4
* "Update Now" --> https://blocklist-dev.allizom.org/en-US/firefox/blocked/p950
* ensured that "Always Active" is disabled
* ensured flash is correctly being blocked

File: NPSWF32_23_0_0_207.dll
Path: C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_23_0_0_207.dll
Version: 23.0.0.207
State: Enabled
Shockwave Flash 23.0 r0

* build used: build used: https://archive.mozilla.org/pub/firefox/releases/49.0.2/
* browser console log: Blocklist state for Shockwave Flash changed from 0 to 0
* ensured that "Always Active" enabled

macOS 10.12.1 x64: PASSED
=========================

File: Flash Player.plugin
Path: /Library/Internet Plug-Ins/Flash Player.plugin
Version: 23.0.0.205
State: Enabled (STATE_VULNERABLE_UPDATE_AVAILABLE)
Shockwave Flash 23.0 r0

* build used: https://archive.mozilla.org/pub/firefox/releases/49.0.2/
* browser console log: Blocklist state for Shockwave Flash changed from 0 to 4
* "Update Now" --> https://blocklist-dev.allizom.org/en-US/firefox/blocked/p950
* ensured that "Always Active" is disabled
* ensured flash is correctly being blocked

File: Flash Player.plugin
Path: /Library/Internet Plug-Ins/Flash Player.plugin
Version: 23.0.0.207
State: Enabled
Shockwave Flash 23.0 r0

* build used: build used: https://archive.mozilla.org/pub/firefox/nightly/2016/11/2016-11-10-03-02-11-mozilla-central/
* browser console log: Blocklist state for Shockwave Flash changed from 0 to 0
* ensured that "Always Active" enabled

Ubuntu 16.04.1 LTS x64: PASSED
==============================

File: libflashplayer.so
Path: /usr/lib/mozilla/plugins/libflashplayer.so
Version: 11.2.202.643
State: Enabled (STATE_VULNERABLE_UPDATE_AVAILABLE)
Shockwave Flash 11.2 r202

* build used: https://archive.mozilla.org/pub/firefox/nightly/2016/11/2016-11-10-03-02-11-mozilla-central/
* browser console log: Blocklist state for Shockwave Flash changed from 0 to 4
* "Update Now" --> https://blocklist-dev.allizom.org/en-US/firefox/blocked/p949
* ensured that "Always Active" is disabled
* ensured flash is correctly being blocked

File: libflashplayer.so
Path: /usr/lib/mozilla/plugins/libflashplayer.so
Version: 11.2.202.644
State: Enabled
Shockwave Flash 11.2 r202

* build used: build used: https://archive.mozilla.org/pub/firefox/nightly/2016/11/2016-11-10-00-40-22-mozilla-aurora/
* browser console log: Blocklist state for Shockwave Flash changed from 0 to 0
* ensured that "Always Active" enabled

Comment 3

[Andrew Williamson [:eviljeff]]

The blocks are now live:

Flash Player Plugin 23.0.0.185 to 23.0.0.205 (click-to-play)
https://addons.mozilla.org/en-US/firefox/blocked/p1420

Flash Player Plugin on Linux 11.2.202.637 to 11.2.202.643 (click-to-play)
https://addons.mozilla.org/en-US/firefox/blocked/p1419