Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: VLC media player plugin for Firefox

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as resolved.
onedeafeye VLC media player plugin for Firefox
Member 16th Jul, 2011 09:45
Ranking: 2
Posts: 24
User Since: 11th Jun, 2009
System Score: N/A
Location: N/A
I just updated VLC to v1.1.11 and did a scan, and it still comes up as having an insecure Firefox plugin. I read the PSI links and they seem to refer to older versions of Firefox (I have FF 5.0.1), and I also don't have the plugin installed.
Could someone please check to see if this information is current and still valid, and why it would show an insecure plugin where none exists? Thanks.

Post "RE: VLC media player plugin for Firefox" has been selected as an answer.
Anthony Wells RE: VLC media player plugin for Firefox
Expert Contributor 16th Jul, 2011 13:13
Score: 2414
Posts: 3,310
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hi ,

"Yes" it is valid and "No" it is not likely to be fixed in the foreseeable future .

All the info you require is here :-

http://secunia.com/community/forum/?forum=2&vendor...

Take care

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+1
-0
onedeafeye RE: VLC media player plugin for Firefox
Member 16th Jul, 2011 17:24
Score: 2
Posts: 24
User Since: 11th Jun 2009
System Score: N/A
Location: N/A
Last edited on 16th Jul, 2011 17:26
Thanks for your response. Everything I read suggested that updating to the next version would be the solution, and I read nothing about whether VLC 1.1.11 is vulnerable or not. So, sidestepping that issue, if I run VLC in a sandbox, will that be safe?
As an afterthought edit, is there a media player with the abilities of VLC that you could recommend as being capable and safe?
Was this reply relevant?
+0
-0
Anthony Wells RE: VLC media player plugin for Firefox
Expert Contributor 16th Jul, 2011 17:54
Score: 2414
Posts: 3,310
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 16th Jul, 2011 18:00
Hello again ,

You must have missed something ; this (other) thread applies to version 1.1.10 and nothing has changed for 1.1.11 :ie : the Ff plug-in is insecure and the PSI "secure browsing" module bug always reports it as being there and insecure" - it also links to alternatives :-

http://secunia.com/community/forum/thread/show/979...

A sandbox is never 100% secure but I do consider it to be a very important security tool :eg: I use Sandboxie with it's Drop (my) Rights setting enabled . If you do not know what your sandbox does , how it does it or how to set it , you may wish to seek advice at the publisher's Forum .

Anthony


--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
onedeafeye RE: VLC media player plugin for Firefox
Member 16th Jul, 2011 18:13
Score: 2
Posts: 24
User Since: 11th Jun 2009
System Score: N/A
Location: N/A
Thanks, I did miss the info you linked to. I think that answers my questions adequately. And I use Sandboxie as well, with my rights dropped. I think I'm done with this one. Thanks for the help.
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability