PC Magazine - Mozilla has disabled vulnerable versions of a Java plugin for Firefox through their blocklist service.

Source