I'm looking for a list of risky browser plugins that we should prevent their use on the desktop.
It's probably safe to assume that old versions of Flash are on the list, but what versions? What other objects should we check for?
Asked
Active
Viewed 514 times
2 Answers
3
All plugins. :/
With that being said, I don't think you can practically blacklist plugins. You should really do it on a case by case basis and whitelist them. That way whenever someone askes for one to be installed, you have a record, and can keep track of them to keep them up to date with the latest patches.
Steve
- 15,155
- 3
- 37
- 66
2
On the subject of Flash plugins, pretty much the only way to get the most secure version is to block all older than current (as Flash tends to have security patches in every update) - the practicality of this may well depend on your particular environment, however; if you are happy to pop up a "you need the most recent version" message for your users then definitely do this.
Rory Alsop
- 61,367
- 12
- 115
- 320