Mozilla extends security tool to other browsers
IE, Firefox and Chrome users can check for outdated, vulnerable add-ons
Computerworld - Mozilla is preparing a tool to give users of rival browsers, including Internet Explorer (IE), Chrome, Safari and Opera, a way to find out whether important add-ons are up to date.
According to a schedule published last week, Mozilla plans to switch on cross-browser functionality of its Web-based tool today. The tool, an adjunct to a checking mechanism embedded in Firefox 3.6, allows Chrome 4, Opera 10.5 and Safari 4 users to check for outdated plug-ins, such as Adobe's Flash and Apple's QuickTime, that are frequently targeted by hackers.
Support for IE is limited to IE7 and IE8, and to checking a smaller number of plug-ins than the other browsers.
As of mid-day Tuesday, Mozilla had enabled the plug-in checking for other browsers on a preliminary version of the tool, but had not turned it on in the real deal.
Outdated plug-ins are tagged with an "Update" label to mark them as potentially vulnerable, while others are marked as "Up to Date," or if their status is unknown, with "Research." Other tags, including "Maybe Outdated" and "Maybe Vulnerable," are to be introduced in the final tool.
Last year, Mozilla kicked off the checker by verifying only Adobe Flash, citing that add-on's dual popularity and propensity for being exploited by attackers. Later, Mozilla added other Firefox plug-ins to the list, and integrated the tool into Firefox 3.6, the version that debuted last January.
The idea behind the checker is to show users which plug-ins may be vulnerable to attack because they have not been patched. The tool works by pinging Mozilla's servers, which compare the plug-in versions found on the machine with the newest edition numbers. Links for those marked "Update" lead to the appropriate vendor's plug-in download page, where users can acquire the current version.
Firefox 3.6 sports features, including a warning when users surf to a page that tries to load an outdated plug-in, which aren't offered to other browsers via the Web tool. Mozilla has also said it will integrate a plug-in update service, similar to what it offers for the browser's extensions, into Firefox at some point. At the moment, the newest edition, Firefox 3.6.2, still leads users to the plug-in checking page when the "Find Update" button is clicked in the "Plugins" section of the "Add-ons" tool.
The plug-in page can be found on Mozilla's Web site.
Gregg Keizer covers Microsoft, security issues, Apple, Web browsers and general technology breaking news for Computerworld. Follow Gregg on Twitter at
@gkeizer or subscribe to Gregg's RSS feed
. His e-mail address is gkeizer@ix.netcom.com.
Browser wars
- Pwnium hacking contest winners exploited 16 Chrome zero-days
- Microsoft-backed groups praise EU's antitrust ultimatum to Google
- Chrome trumps IE as world's top browser
- Mozilla product director says Firefox on Window RT 'probably not worth it'
- EU-Microsoft browser deal requires ballot screen in Windows 8
- Senate to look at Mozilla's browser competition allegations
- Mozilla accuses Microsoft of anticompetitive behavior with Windows RT
- IE 'silent' upgrade helps put newest browser on Windows
- Mozilla ponders major Firefox UI refresh
- IE on a rebound, browser share data shows
Read more about Web 2.0 and Web Apps in Computerworld's Web 2.0 and Web Apps Topic Center.


- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- Practice Management: Double Billing Rate and Improve Patient Services
- Would you like to double your billing rate and achieve faster payment for services?
Download this customer success story to see how One Health... - Mission Critical Data Explosion and Customer Case Study
- Would you like to double your tier 1 storage capacity while simultaneously reducing your storage footprint?
Download this customer success story to see how... - Protecting Against Database Attacks and Insider Threats: Top 5 Scenarios
- Read this new eBook to learn the top five scenarios and essential best practices for preventing database attacks and insider threats.
- Database Activity Monitoring Is Evolving
- Read the analyst report and learn how you can leverage the core capabilities of a DAP solution for better database security.
- Establishing a Strategy for Database Security is No Longer Optional
- The options for securing increasingly valuable databases are very broad and deep, and can be confusing. This research provides an overview of three... All Web 2.0 and Web Apps White Papers
- Distributed Database Security with Real-time Monitoring
- View this demo and learn how IBM InfoSphere Guardium database activity monitoring can help protect your sensitive data in distributed DBMS environments with...
- InfoSphere Warehouse Packs Demo
- These flash modules make warehousing more tangible and relevant to business users through detailed explanations of the InfoSphere Warehouse Packs.
- Delivery Management -- Extending Lifecycle Management
- Date: Wednesday, June 20, 2012, 1:00 PM EDT
Siloed organizations continue doing the wrong things and doing things wrong, leading to increased costs,... - Leverage automation today to reduce IT complexity
- Date: Tuesday, June 5, 2012, 2:00 PM EDT
Whether your B2B complexity is caused by multiple technologies due to M&A, business or application specific... - Redefine Expectations in the Data Center
- Need to do more with less? Watch this video to learn how HP ProLiant Gen8 servers can help your business deploy servers three... All Web 2.0 and Web Apps Webcasts
