plugin has administrative rights to system
FireFox had an update a couple years ago that allowed any pluggin to gain administrative rights to the system if FireFox installer was "run as another user" that had elevated rights to the system.
I wish to confirm if this loophole has been patched?
Všetky odpovede (1)
Not something I am familiar with, partly because I try to avoid using Windows.
Can you point to any documentation or blog etc about this flaw.
This sounds more like a Windows issue than Firefox issue. A plugin is a program separate from Firefox and I presume most on Windows will be installed globally.
- Use plugins to play audio, video, games and more_what-are-plugins
Quite possibly you are asking about Flash Player, something that is getting less important, and maybe it's protected mode
- Adobe Flash protected mode in Firefox
- NPAPI Plugins in Firefox :
https://blog.mozilla.org/futurereleases/2015/10/08/npapi-plugins-in-firefox/
It is outside the scope of this forum to discuss Windows issues not directly related to Firefox. However it is probably helpful to some readers of this thread if I point to a couple or articles about account use.
- Configuring Windows 7 for a Limited User Account
https://technet.microsoft.com/en-us/library/ee623984%28v=ws.10%29.aspx - XP: Types of user accounts
https://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/ua_c_account_types.mspx?mfr=true
And so I guess also worth mentioning "runas" and Firefox's Maintenance Service