Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm looking for a list of risky browser plugins that we should prevent their use on the desktop.

It's probably safe to assume that old versions of Flash are on the list, but what versions? What other objects should we check for?

share|improve this question
up vote 3 down vote accepted

All plugins. :/

With that being said, I don't think you can practically blacklist plugins. You should really do it on a case by case basis and whitelist them. That way whenever someone askes for one to be installed, you have a record, and can keep track of them to keep them up to date with the latest patches.

share|improve this answer

On the subject of Flash plugins, pretty much the only way to get the most secure version is to block all older than current (as Flash tends to have security patches in every update) - the practicality of this may well depend on your particular environment, however; if you are happy to pop up a "you need the most recent version" message for your users then definitely do this.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.