Skip to main content
Participant
January 12, 2021
Answered

I want to allow Flash to run on my internal system.

  • January 12, 2021
  • 1 reply
  • 682 views

Flash has been blocked since January 12.

 

We have a system running on Internet Explorer 11 with Flash.
We are working to fix the system so that it runs on something other than Flash, but
However, we were unable to release the fix in time, so we took the following measures to avoid the operation.

Created mms.cfg for each terminal and described the white list settings.

 

EOLUninstallDisable=1
EnableWhiteList=1
WhitelistUrlPattern=http://*.domain.com/

 

On the terminal with the above settings, I created a
http://99999.system.domain.com
Flash is blocked when I open the website of

WhitelistUrlPattern=http://99999.system.domain.com/

I tried changing the settings to the above, but it didn't change the blocked Flash status.

 

I'm very confused and need your help.
Can anyone tell me what settings I need to review?

 

System Requirements
 Windows 8.1 or Windows 10
 Internet Explorer 11
 Flash Player 32.0.0.387(KB4561600) or Flash Player 32.0.0.445(KB4580325)

 

This topic has been closed for replies.
Correct answer jeromiec83223024

The ActiveX Flash Player on Windows 8 and higher is distributed by Microsoft.  They control the installation paths, and they're only writable by Windows Update, so Adobe was not able to produce installers that target this platform.

 

There's a bug in the AllowListUrlPattern that prevents matching canonical hostnames that begin three or more digits.  That bug is fixed in Flash Player 32.0.0.462 and higher; however, for ActiveX on Windows 8 and 10, Microsoft chose to not distribute that build because it did not contain security-related fixes (which is their bar for deploying a Flash Player release). 

 

You have two options in this instance: 

  • Create and use a DNS alias for these hosts that begins with a letter
  • License and Deploy a build of Flash Player with this patch from HARMAN, after removing the Microsoft-distributed Flash Player by applying the appopriate Windows Update package to remove the old Flash Player.

1 reply

jeromiec83223024
Community Manager
jeromiec83223024Community ManagerCorrect answer
Community Manager
January 19, 2021

The ActiveX Flash Player on Windows 8 and higher is distributed by Microsoft.  They control the installation paths, and they're only writable by Windows Update, so Adobe was not able to produce installers that target this platform.

 

There's a bug in the AllowListUrlPattern that prevents matching canonical hostnames that begin three or more digits.  That bug is fixed in Flash Player 32.0.0.462 and higher; however, for ActiveX on Windows 8 and 10, Microsoft chose to not distribute that build because it did not contain security-related fixes (which is their bar for deploying a Flash Player release). 

 

You have two options in this instance: 

  • Create and use a DNS alias for these hosts that begins with a letter
  • License and Deploy a build of Flash Player with this patch from HARMAN, after removing the Microsoft-distributed Flash Player by applying the appopriate Windows Update package to remove the old Flash Player.
can_do_jpAuthor
Participant
January 20, 2021

I understand, Thanks for your inputs, will check with the team what better can be worked.

 

Thanks