[tor-bugs] #12455 [Tor bundles/installation]: Flash Player files sometimes start in background-using TB-without user action

[Tor Bug Tracker & Wiki]

#12455: Flash Player files sometimes start in background-using TB-without user
action
-----------------------------------------------+-----------------------
 Reporter:  joebt                              |          Owner:  erinn
     Type:  defect                             |         Status:  new
 Priority:  normal                             |      Milestone:
Component:  Tor bundles/installation           |        Version:
 Keywords:  plugin, Flash Player, Tor Browser  |  Actual Points:
Parent ID:                                     |         Points:
-----------------------------------------------+-----------------------
 For several Torbrowser versions & Flash Player versions, I've randomly
 found flash files running in background, when no Flash content was played,
 nor was there any user request to start Flash player or download / install
 it.

 It's happened perhaps 12 or more times, easily.  It took a long time to
 figure out what may trigger the files to start in background.

 In both TB & vanilla Fx, the Flash plugin is & always has been disabled.
 The only reason it's installed, is for rare use in vanilla Fx.  No way to
 "uninstall" it only for Torbrowser.

 * Maybe there should be a method, by default, to block Flash plugin from
 *automatically* showing under Torbrowser, if Flash is installed for other
 "plugin-based browsers."  Unless users specifically request it.

 I'm reporting this, because others may use Flash in Firefox & may be
 unaware if Flash files start running in background under TB (if it
 actually happened).  I may just uninstall Flash, but this still needs
 reporting.

 I finally determined when the flash files start in background, it's
 (sometimes) very soon after page was visited that had flash content.  But
 it doesn't happen on all pages w/ flash content (where Flash files wind up
 not being played, by any method, e.g., html5).

 I do NOT play or attempt to play the flash files in TB, the times when
 Flash files start running.
 On the sites where the files DO start in background, appears all I must do
 is LOAD the page w/ flash content.

 The websites report that Flash is disabled or not installed (it IS always
 disabled).
 The times the files start in background, I did NOT play any Flash content
 in IE (don't use it), or vanilla Fx.  I've confirmed that many times.
 Besides, the processes are ALWAYS listed under the *TB Plugin Manager*
 process, never vanilla Fx.

 I don't click anything on the webpages to download or install Flash.
 I don't attempt to play Flash content, then "back out" (would be
 impossible w/ Flash disabled).

 The command line for one of the background files looks like:
 "C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe"
 --channel=4128.0027F650.1150601763
 --proxy-stub-channel=Flash5736.60497F48.24779
 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.d
 ll" --host-npapi-version=27 --type=renderer

 (this was for a previous Flash ver., but still does it w/ later ones)

 Don't have the full command line for the 2nd Flash process, but it
 contains the same "FlashPlayerPlugin_x.x.x.exe\...\NPSWF32x.x.x.dll."

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12455>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online