Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I'm looking for a list of risky browser plugins that we should prevent their use on the desktop.

It's probably safe to assume that old versions of Flash are on the list, but what versions? What other objects should we check for?

share|improve this question
add comment

2 Answers

up vote 3 down vote accepted

All plugins. :/

With that being said, I don't think you can practically blacklist plugins. You should really do it on a case by case basis and whitelist them. That way whenever someone askes for one to be installed, you have a record, and can keep track of them to keep them up to date with the latest patches.

share|improve this answer
add comment

On the subject of Flash plugins, pretty much the only way to get the most secure version is to block all older than current (as Flash tends to have security patches in every update) - the practicality of this may well depend on your particular environment, however; if you are happy to pop up a "you need the most recent version" message for your users then definitely do this.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.