Firefox blocks latest Flash version on Windows and Linux

Firefox currently blocks the current version of Flash Player on Windows and Linux because of known security vulnerabilities. If Adobe releases a new version that no longer contains dangerous, known bugs, the plugin will be accepted again.

Mozilla has long blocked older, vulnerable Flash versions in Firefox, but now version 18.0.0.203 has also been blocked, which is currently the latest version of Flash for Windows. The latest version is also blocked for Linux; the situation on OS X is unclear.

Mozilla’s decision to block the current Flash version was interpreted by various media as a sign that Flash would be blocked altogether by the browser maker. That is not the case: as soon as a version with no known security vulnerabilities is released, the plug-in is accepted again. Until then, however, users will not be able to load Flash content.

Last weekend, two new zero-day vulnerabilities in Flash surfaced: those are dangerous bugs for which no patch is yet available. Since last week, another zero day in Flash has been actively exploited by attackers. That security problem appeared in files from security company Hacking Team that an attacker had leaked.

On Sunday, Facebook’s chief security officer said Flash should be phased out. According to Alex Stamos, who until recently had the same role at Yahoo, Adobe and the browser makers must agree a date after which Flash will no longer work. This would improve the entire ecosystem on the internet, Stamos said.