Wednesday 31 May 2023

Security Surprises On Firefox Quantum

This morning I've found an scaring surprise on my Firefox Quantum. Casually it was connected to a proxy when an unexpected connection came up, the browser  was connecting to an unknown remote site via HTTP and downloading a ZIP that contains an ELF shared library, without any type of signature on it.

This means two things

1) the owner of that site might spread malware infecting many many people.
2) the ISP also might do that.


Ubuntu Version:


Firefox Quantum version:



The URL: hxxp://ciscobinary.openh264.org/openh264-linux64-0410d336bb748149a4f560eb6108090f078254b1.zip




The zip contains these two files:
  3f201a8984d6d765bc81966842294611  libgmpopenh264.so
  44aef3cd6b755fa5f6968725b67fd3b8  gmpopenh264.info

The info file:
  Name: gmpopenh264
  Description: GMP Plugin for OpenH264.
  Version: 1.6.0
  APIs: encode-video[h264], decode-video[h264]

So there is a remote codec loading system that is unsigned and unencrypted, I think is good to be aware of it.

In this case the shared library is a video decoder, but it would be a vector to distribute malware o spyware massively, or an attack vector for a MITM attacker.




Related news
  1. Pentest Tools Website
  2. Hackers Toolbox
  3. Hacker Tools Apk Download
  4. Usb Pentest Tools
  5. Pentest Tools Review
  6. Pentest Tools Windows
  7. Pentest Tools
  8. Hacking Tools For Windows 7
  9. Hack Website Online Tool
  10. Top Pentest Tools
  11. Hacks And Tools
  12. Hack Tool Apk No Root
  13. Hacker Tools Mac
  14. Hacking Tools Online
  15. Pentest Tools Open Source
  16. How To Install Pentest Tools In Ubuntu
  17. Hacking Tools 2020
  18. Hacking App
  19. Pentest Tools Kali Linux
  20. Android Hack Tools Github
  21. Hacking Tools For Games
  22. What Are Hacking Tools
  23. Hack Tool Apk No Root
  24. Pentest Tools Kali Linux
  25. Hacker Tools Software
  26. Android Hack Tools Github
  27. Hacker Tools For Mac
  28. How To Make Hacking Tools
  29. Hack Tools For Windows
  30. Hacking Tools For Kali Linux
  31. Game Hacking
  32. Hacking Tools Usb
  33. Hacking Tools For Kali Linux
  34. Pentest Reporting Tools
  35. Hack Tools Pc
  36. Hack App
  37. Pentest Tools Review
  38. Hacker Tools Linux
  39. Hacking Tools For Windows 7
  40. Pentest Automation Tools
  41. Pentest Tools Online
  42. Pentest Tools Online
  43. Tools 4 Hack
  44. Hacker Techniques Tools And Incident Handling
  45. Hack Tools Online
  46. Hacker Tools Apk
  47. Hacking Tools And Software
  48. Hacks And Tools
  49. Hacking Tools Hardware
  50. Hack Tools Download
  51. Hack Tools
  52. Pentest Box Tools Download
  53. Hacker Search Tools
  54. Hacking Tools Windows
  55. Pentest Tools Download
  56. Hacking Apps
  57. Pentest Automation Tools
  58. Black Hat Hacker Tools
  59. Hacking Tools Name
  60. Pentest Tools
  61. Hack And Tools
  62. Hacker Tools 2020
  63. Pentest Tools Online
  64. Hackrf Tools
  65. Hacker Tools List
  66. Pentest Tools Tcp Port Scanner
  67. Hacking Tools Hardware
  68. Pentest Tools Website Vulnerability
  69. How To Install Pentest Tools In Ubuntu
  70. New Hack Tools
  71. Pentest Recon Tools
  72. Hacking Tools For Beginners
  73. Hack Tools Pc
  74. Hack Tools Pc
  75. Hacker Techniques Tools And Incident Handling
  76. Pentest Tools Open Source
  77. Hack Tools Download
  78. Hacking Tools Pc
  79. Hack Tools For Pc
  80. Hacker Tools Linux
  81. Pentest Tools Android
  82. Computer Hacker
  83. Pentest Automation Tools
  84. Hacker Tools Mac
  85. Hacking Tools Online
  86. Hacking Tools For Kali Linux
  87. Hacking Tools Online
  88. Hacker Tools Free
  89. Pentest Tools Port Scanner
  90. Pentest Box Tools Download
  91. Tools Used For Hacking
  92. Hacker Tools Hardware
  93. Hacker Tools Apk
  94. Github Hacking Tools
  95. Hacker Tools Hardware
  96. Hak5 Tools
  97. Hack Tools
  98. New Hack Tools
  99. Pentest Tools For Mac
  100. Hacking Tools Hardware
  101. Pentest Tools Bluekeep
  102. Hacker Tools 2020
  103. Hacker Tools Hardware
  104. Pentest Tools Github
  105. World No 1 Hacker Software
  106. Nsa Hacker Tools
  107. Pentest Tools
  108. What Is Hacking Tools
  109. Hack Apps
  110. Pentest Tools For Ubuntu
  111. Hacking Tools For Windows Free Download
  112. Hack Tools For Ubuntu
  113. Hacking Tools And Software
  114. Pentest Tools Website Vulnerability
  115. Hack Tools Online
  116. Pentest Recon Tools
  117. World No 1 Hacker Software
  118. Hacking Tools
  119. Hacking Tools Usb
  120. Hack Tools
  121. Hack Tools 2019
  122. Pentest Tools For Android
  123. Hacker Tools For Mac
  124. Pentest Recon Tools
  125. New Hacker Tools
  126. How To Hack
  127. Hack Website Online Tool
  128. Hack Tools For Pc
  129. Pentest Tools Online
  130. Install Pentest Tools Ubuntu
  131. Free Pentest Tools For Windows
  132. Ethical Hacker Tools
  133. Pentest Tools Alternative
  134. Hacker Hardware Tools
  135. Pentest Tools Url Fuzzer
  136. Hacker Tools Free Download
  137. Hacking Tools For Windows 7
  138. Pentest Tools For Windows
  139. Pentest Tools Linux
  140. Hacking Tools Name
  141. Hacking Tools Github
  142. Pentest Tools Port Scanner
  143. Tools 4 Hack
  144. Pentest Tools For Mac
  145. Pentest Tools Linux
  146. Ethical Hacker Tools
  147. Hack Tools For Pc
  148. Hacking Tools Hardware
  149. Pentest Reporting Tools
  150. Bluetooth Hacking Tools Kali
  151. Pentest Tools Download
  152. Hack Tools Pc
  153. Hacking Tools For Kali Linux
  154. Physical Pentest Tools
Posted by at

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)