Security Surprises On Firefox Quantum

This morning I've found an scaring surprise on my Firefox Quantum. Casually it was connected to a proxy when an unexpected connection came up, the browser  was connecting to an unknown remote site via HTTP and downloading a ZIP that contains an ELF shared library, without any type of signature on it.

This means two things

1) the owner of that site might spread malware infecting many many people.
2) the ISP also might do that.


Ubuntu Version:

Firefox Quantum version:

The URL: hxxp://ciscobinary.openh264.org/openh264-linux64-0410d336bb748149a4f560eb6108090f078254b1.zip

The zip contains these two files:
  3f201a8984d6d765bc81966842294611  libgmpopenh264.so
  44aef3cd6b755fa5f6968725b67fd3b8  gmpopenh264.info

The info file:
  Name: gmpopenh264
  Description: GMP Plugin for OpenH264.
  Version: 1.6.0
  APIs: encode-video[h264], decode-video[h264]

So there is a remote codec loading system that is unsigned and unencrypted, I think is good to be aware of it.

In this case the shared library is a video decoder, but it would be a vector to distribute malware o spyware massively, or an attack vector for a MITM attacker.

Continue reading

1. Hacker Tools Windows
2. Nsa Hack Tools Download
3. Pentest Tools Open Source
4. Hacker Tools For Pc
5. Pentest Tools Find Subdomains
6. Pentest Tools Url Fuzzer
7. Termux Hacking Tools 2019
8. Pentest Tools List
9. Kik Hack Tools
10. Pentest Tools Kali Linux
11. Hacking Tools For Pc
12. Hack Tools For Games
13. Ethical Hacker Tools
14. Best Hacking Tools 2019
15. Hacking Tools Mac
16. Hack Tools
17. Pentest Tools Review
18. Hacking Tools Github
19. Blackhat Hacker Tools
20. What Are Hacking Tools
21. Best Hacking Tools 2020
22. Easy Hack Tools
23. Pentest Tools Apk
24. Hack App
25. Hack Tools Pc
26. Hack Tools For Windows
27. Hack Tool Apk No Root
28. Hack And Tools
29. Hackrf Tools
30. Hacker Tools Online
31. Free Pentest Tools For Windows
32. Hacking Tools Download
33. Best Pentesting Tools 2018
34. Hacking Tools And Software
35. Hacker Tools Online
36. Hack Tools
37. Black Hat Hacker Tools
38. Hacking Tools Mac
39. Nsa Hack Tools
40. Pentest Tools Apk
41. Hack Tools For Ubuntu
42. Hack Tool Apk
43. Hack Tools 2019
44. Pentest Tools Android
45. Pentest Tools Bluekeep
46. Hacker Search Tools
47. Hackrf Tools
48. Hacking Tools Online
49. Pentest Tools Android
50. Hacking Tools Software
51. Hack Rom Tools
52. Hacking Tools Pc
53. Hacker Tools Software
54. Pentest Tools Alternative
55. Hack Tools
56. Hacker Tools Online
57. Hacking Tools Usb
58. Pentest Tools Linux
59. Pentest Tools For Android
60. Pentest Tools Windows
61. Hack Tools For Mac
62. Nsa Hack Tools
63. Pentest Tools Kali Linux
64. Hacker Tools Apk
65. Hack Rom Tools
66. Best Hacking Tools 2019
67. Hack Tools For Mac
68. Pentest Tools Find Subdomains
69. Hack Tools Pc
70. New Hack Tools
71. Pentest Tools Windows
72. Hacker Tools Windows
73. Hacking Tools Mac
74. Hacking Tools Windows 10
75. Pentest Tools Nmap
76. Hacking Tools For Games
77. Pentest Tools Kali Linux
78. Hacker Techniques Tools And Incident Handling
79. Pentest Tools Find Subdomains
80. Hacker Security Tools
81. Hack Tool Apk No Root
82. Hacker Tools For Pc
83. Hacking Tools Download
84. Hacking Tools
85. Hacker Tools Linux
86. How To Install Pentest Tools In Ubuntu
87. Hacking Tools Usb
88. Top Pentest Tools
89. Hack Tools Online
90. Github Hacking Tools
91. Hacking Tools For Windows 7
92. Pentest Tools Alternative
93. Hacking Tools Hardware
94. Hack App
95. Hacker Tools Mac
96. Hack Apps
97. Hacking Tools For Windows 7
98. Hack Apps
99. Top Pentest Tools
100. Hacking Tools Mac
101. Pentest Tools Review
102. Pentest Tools Framework
103. Pentest Reporting Tools
104. Hacker Tools
105. Hack Tools Download
106. Pentest Box Tools Download
107. Hacker Tool Kit
108. Best Pentesting Tools 2018
109. Hack And Tools
110. Nsa Hack Tools Download
111. Underground Hacker Sites
112. Pentest Tools Online
113. Hacks And Tools
114. Pentest Automation Tools
115. Black Hat Hacker Tools
116. Hack Tools For Mac
117. Hack Tools
118. Beginner Hacker Tools
119. How To Install Pentest Tools In Ubuntu
120. Hack Tools For Windows
121. Hacking Tools Online
122. Pentest Tools Port Scanner
123. Hacking Tools For Windows
124. Hacking Tools Windows 10
125. New Hack Tools
126. Hacker Tools Free
127. Pentest Tools Website Vulnerability
128. Hack Tools
129. Nsa Hack Tools
130. Pentest Tools Subdomain
131. Pentest Automation Tools