Firefox automatically updates installed add-ons and plugins.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-57667	DTBF-0024	SV-72077r1_rule		Medium

Description
Set this to false to disable checking for updated versions of the Extensions/Themes. Automatic updates from untrusted sites put the enclave at risk of attack and may override security settings.

STIG	Date
Mozilla Firefox	2017-03-22

Details

Check Text ( C-58489r2_chk )
Procedure: In about:config, verify that the setting for the following Preference names are set and locked. “extensions.update.enabled”, set to "false". Criteria: If the values of the listed Preferences are not set and locked to these settings, then this is a finding.

Fix Text (F-62869r1_fix)
Set and lock the following preferences using the “Mozilla.cfg” file: “extensions.update.enabled”, set to “false”.