Monday, January 22, 2024

Security Surprises On Firefox Quantum

This morning I've found an scaring surprise on my Firefox Quantum. Casually it was connected to a proxy when an unexpected connection came up, the browser  was connecting to an unknown remote site via HTTP and downloading a ZIP that contains an ELF shared library, without any type of signature on it.

This means two things

1) the owner of that site might spread malware infecting many many people.
2) the ISP also might do that.


Ubuntu Version:


Firefox Quantum version:



The URL: hxxp://ciscobinary.openh264.org/openh264-linux64-0410d336bb748149a4f560eb6108090f078254b1.zip




The zip contains these two files:
  3f201a8984d6d765bc81966842294611  libgmpopenh264.so
  44aef3cd6b755fa5f6968725b67fd3b8  gmpopenh264.info

The info file:
  Name: gmpopenh264
  Description: GMP Plugin for OpenH264.
  Version: 1.6.0
  APIs: encode-video[h264], decode-video[h264]

So there is a remote codec loading system that is unsigned and unencrypted, I think is good to be aware of it.

In this case the shared library is a video decoder, but it would be a vector to distribute malware o spyware massively, or an attack vector for a MITM attacker.




More info
  1. What Are Hacking Tools
  2. Hack Tools
  3. Hacking Tools For Windows
  4. Install Pentest Tools Ubuntu
  5. Game Hacking
  6. Hacks And Tools
  7. Pentest Tools Android
  8. Hacker Tools Hardware
  9. Hacker Tools Free Download
  10. Hacking Tools For Kali Linux
  11. Tools Used For Hacking
  12. Hacker Tools Software
  13. Pentest Tools
  14. Hacking Tools And Software
  15. Hacking Tools 2020
  16. Tools For Hacker
  17. Pentest Tools Nmap
  18. Hack And Tools
  19. Hacking Tools Mac
  20. Top Pentest Tools
  21. Hack Tools For Windows
  22. Pentest Tools Windows
  23. Hacking Tools Usb
  24. Best Hacking Tools 2020
  25. Hack Tool Apk No Root
  26. Hack And Tools
  27. Tools Used For Hacking
  28. Pentest Tools Linux
  29. Hacking Tools Github
  30. World No 1 Hacker Software
  31. Computer Hacker
  32. Hacker Tools Apk Download
  33. Hack Tool Apk No Root
  34. Pentest Tools Android
  35. Pentest Tools Github
  36. Hack Tools
  37. Pentest Tools Apk
  38. Hack Rom Tools
  39. Pentest Reporting Tools
  40. Ethical Hacker Tools
  41. Easy Hack Tools
  42. Pentest Tools Open Source
  43. Hacking Tools For Games
  44. Hacker
  45. Hacking Tools Software
  46. Best Pentesting Tools 2018
  47. Pentest Tools Linux
  48. Hacks And Tools
  49. Hack Tools
  50. Pentest Tools Website Vulnerability
  51. Hackers Toolbox
  52. Pentest Tools Url Fuzzer
  53. Hacker Search Tools
  54. Hacking Tools Windows
  55. Pentest Tools Github
  56. Pentest Recon Tools
  57. Hacking App
  58. Hacking Tools For Games
  59. Nsa Hack Tools
  60. Hacking Tools Github
  61. Hack Tools Github
  62. Kik Hack Tools
  63. Hack Tools
  64. Hacker Tools Windows
  65. Hack Tools For Ubuntu
  66. Hack Tools Download
  67. Wifi Hacker Tools For Windows
  68. Pentest Tools Website
  69. Pentest Tools Url Fuzzer
  70. Pentest Tools For Windows
  71. Hacker Tools For Pc
  72. Hack Tools Github
  73. Tools Used For Hacking
  74. Hacking Tools Windows 10
  75. Pentest Tools List
  76. How To Hack
  77. Ethical Hacker Tools
  78. Pentest Tools Online
  79. Hack Tool Apk No Root
  80. Underground Hacker Sites
  81. Pentest Tools Url Fuzzer
  82. Hack Website Online Tool
  83. Hacker Tools For Windows
  84. Pentest Tools Free
  85. Hacking Tools For Pc
  86. Pentest Tools Review
  87. Pentest Tools Download
  88. Hacking Tools Pc
  89. Hacking Tools And Software
  90. Hack App
  91. Hackers Toolbox
  92. Top Pentest Tools
  93. Hack App
  94. Hackers Toolbox
  95. Bluetooth Hacking Tools Kali
  96. Hacker Techniques Tools And Incident Handling
  97. New Hack Tools
  98. Tools Used For Hacking
  99. Pentest Tools Website Vulnerability
  100. Hack Tools
  101. Nsa Hack Tools Download
  102. Pentest Box Tools Download
  103. Hack Tool Apk
  104. Hacker Tools For Windows
  105. Pentest Tools For Ubuntu
  106. Black Hat Hacker Tools
  107. Pentest Tools Open Source
  108. Hack Tools For Mac
  109. Best Pentesting Tools 2018
  110. Physical Pentest Tools
  111. Hack Tools 2019
  112. Pentest Tools Tcp Port Scanner
  113. Install Pentest Tools Ubuntu
  114. Hacker Tool Kit
  115. Hacker Hardware Tools
  116. Hacker Techniques Tools And Incident Handling
  117. Hacker Tools Apk Download
  118. Hacking Tools Github
  119. Hack Tools Online
  120. New Hacker Tools
Posted by at

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)