.Net Extension cannot be uninstalled

RESOLVED DUPLICATE of bug 476430

Status

()

Toolkit
Add-ons Manager
--
major
RESOLVED DUPLICATE of bug 476430
9 years ago
9 years ago

People

(Reporter: David E. Ross, Unassigned)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

(URL)

(Reporter)

Description

9 years ago
User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.21) Gecko/20090403 SeaMonkey/1.1.16
Build Identifier: 

Per the article at the cited URI (and the link therein to <http://annoyances.org/exec/show/article08-600>), Microsoft's .NET Framework 3.5 Service Pack 1 includes a Firefox extension that gets installed in the Firefox root.  Once installed, this extension disables the Uninstall button.  The extension reportedly enables other Web sites "to easily and quietly install software on your PC", thereby creating a severe vulnerability in Firefox.  

No extension should have the ability to disable its own removal.  The Addons Manager should not allow this to happen, even if the addon is installed in the root instead of in a profile.  

Reproducible: Always




I have not confirmed the reports in th cited URI or the annoyances.org URI.  I am merely reporting a potential problem that, if true, represents a serious software vulnerability.  

Note:  I avoid the problem by (1) selectively (not automatically) downloading and installing Windows updates and (2) never downloading or installing .NET Framework updates.  This means, I plan to remain at Windows XP SP2 and not upgrade to Windows XP SP3, which might include the .NET Framework malware.
Not malware and it doesn't disable uninstall. The add-ons mgr doesn't provide uninstall for extensions installed via the registry.
Summary: Malware Extension Disables Its Own Removal → .Net Extension cannot be uninstalled
Status: NEW → RESOLVED
Last Resolved: 9 years ago
Resolution: --- → DUPLICATE
Whiteboard: [DUPEME]
Duplicate of bug: 476430
You need to log in before you can comment on or make changes to this bug.