Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

A Firefox PDF plugin XSS vulnerability

Posted Jan 4, 2007 18:59 UTC (Thu) by emgrasso (subscriber, #4029)
Parent article: A Firefox PDF plugin XSS vulnerability

Two questions (Well, two and a half):

Does this vulnerability also affect browsers like Konqueror that can load
Firefox plugins?

Is there a clean way to uninstall the Adobe plugin if it is present? And a
good way to find out whether it is present and active?

(Log in to post comments)

A Firefox PDF plugin XSS vulnerability

Posted Jan 4, 2007 20:26 UTC (Thu) by glettieri (subscriber, #15705) [Link]

If you type "about:plugins" as url, you will get a list of installed plugins. To remove acroread, you should find the directory where firefox plugins are installed (/usr/lib/nsbrowser/plugins on my Gentoo box, but maybe /usr/lib/mozilla-firefox/plugins on other systems) and remove the file or symlink "nppdf.so".