1543664 - Extension Block Request: Review Adobe Flash Player

Status: RESOLVED FIXED

(Toolkit :: Blocklist Policy Requests, task)

Description

[Sylvain Giroux [:Spoji]]

Extension name	Adobe Flash Player
Extension versions affected	<all versions>
Platforms affected	<all platforms>
Block severity	hard

Reason

Leaking form data.

Extension IDs

{86cd46b6-433a-439c-bff2-722846709f44}
{936f3c79-5dc9-4694-bca8-47932de3357a}

Additional Information

Problematic files in question inside the extension can be looked at
https://reviewers.addons.mozilla.org/en-US/firefox/files/browse/1738954/file/tuto.js
and
https://reviewers.addons.mozilla.org/en-US/firefox/files/browse/1740036/file/tuto.js

Comment 1

[Philipp Kewisch [:Fallen] [:📆][:🧩]]

Extension IDs

{61f433aa-45fd-42a9-9c90-c1d7820661d5}
{86cd46b6-433a-439c-bff2-722846709f44}
{98e126a4-4e70-4300-b893-3b2cca19bc9b}
{8f42dc3a-1c46-4fc2-8c7f-dd76a63b1cf7}
{a24d3582-2fc2-475c-8440-335736e17c6e}
{cf0b5280-cd08-465d-ad7d-70308538f30a}
{936f3c79-5dc9-4694-bca8-47932de3357a}
{e48d5888-8736-4858-83ba-e816378ffef8}
{5305f89c-ceec-4217-8bae-c9c376c7462b}
{a2ac47e5-d225-4718-9b57-18a932f87610}
{79f60f07-6aee-42cd-9105-c0a52f401316}

I've confirmed these add-ons are masking as legit add-ons while exfiltrating user data.

Comment 2

[Philipp Kewisch [:Fallen] [:📆][:🧩]]

The block has been staged. Andreas, can you review and push?

Comment 3

[Andreas Wagner [:TheOne] [use NI]]

Done.