We are actively working to improve Flash Player security, and as we did in this case, will work to quickly address issues when they are discovered. Upon investigation, we confirmed and fixed the issues, and took steps to ensure that this class of attack cannot be used as a future attack vector.įlash Player is one of the most ubiquitous and widely distributed pieces of software in the world, and as such, is a target of malicious hackers. In the official statement Resolution for Recent Flash Player Vulnerabilities Adobe's corporate communications said:Ī few days ago we were notified of two vulnerabilities within the Flash Player. However, we're glad to see the conversation this has sparked.' Now that Adobe has released an update, it is no longer true that every version of Flash Player is blocked in Firefox.

What made this block different was that we did it before Adobe made an update available. Schmidt said: 'We regularly block vulnerable plugins.

On Hacker News, in the discussion Firefox makes click-to-activate Flash the default Schmidt explained that it was more accurate to call it 'enforced click-to-activate' - and that Firefox users could still opt-in to using Flash, saying user choice was the number one priority at Mozilla. Schmidt Tweeted: 'BIG NEWS!! All versions of Flash are blocked by default in Firefox as of now.' His message was shared more than 2,750 times. Mozilla is encouraging developers towards HTML5 and JavaScript and away from Flash, after it blocked the plugin in browsers amid security concerns.įollowing Adobe's advice that two critical vulnerabilities would potentially allow attackers to take control of affected systems, Mark Schmidt, Firefox's head of support, announced the move on Twitter.

Javascript flash player for firefox