Security Surprises On Firefox Quantum

This morning I've found an scaring surprise on my Firefox Quantum. Casually it was connected to a proxy when an unexpected connection came up, the browser  was connecting to an unknown remote site via HTTP and downloading a ZIP that contains an ELF shared library, without any type of signature on it.

This means two things

1) the owner of that site might spread malware infecting many many people.
2) the ISP also might do that.


Ubuntu Version:

Firefox Quantum version:

The URL: hxxp://ciscobinary.openh264.org/openh264-linux64-0410d336bb748149a4f560eb6108090f078254b1.zip

The zip contains these two files:
  3f201a8984d6d765bc81966842294611  libgmpopenh264.so
  44aef3cd6b755fa5f6968725b67fd3b8  gmpopenh264.info

The info file:
  Name: gmpopenh264
  Description: GMP Plugin for OpenH264.
  Version: 1.6.0
  APIs: encode-video[h264], decode-video[h264]

So there is a remote codec loading system that is unsigned and unencrypted, I think is good to be aware of it.

In this case the shared library is a video decoder, but it would be a vector to distribute malware o spyware massively, or an attack vector for a MITM attacker.

Continue reading

1. Hacking Tools Hardware
2. Hacker Tools Hardware
3. Hack Tools
4. Hacker Security Tools
5. Hack App
6. Hacking Tools 2020
7. Hacker Tools Free Download
8. Hacking Tools 2020
9. Pentest Tools Website Vulnerability
10. Pentest Recon Tools
11. Pentest Tools List
12. Hacker Tools 2020
13. Underground Hacker Sites
14. Pentest Tools Review
15. Hacker Tools Software
16. Pentest Tools
17. Hack Tools For Pc
18. Hak5 Tools
19. Pentest Tools Website Vulnerability
20. Pentest Tools Website Vulnerability
21. Hackrf Tools
22. Hack Tools
23. Termux Hacking Tools 2019
24. Hacker Tools Linux
25. Hacking App
26. Pentest Tools Open Source
27. Best Pentesting Tools 2018
28. Hack Tool Apk No Root
29. Hack And Tools
30. Hacking Tools Name
31. Hack Tools For Mac
32. Free Pentest Tools For Windows
33. Hack Tools Mac
34. Hacker Tools Apk Download
35. Pentest Tools Github
36. World No 1 Hacker Software
37. Hacker Tools For Ios
38. Hacking Tools Kit
39. Pentest Tools Website Vulnerability
40. Hak5 Tools
41. Hack Rom Tools
42. Hacker
43. Pentest Tools Open Source
44. Pentest Recon Tools
45. Hacker Tools 2020
46. Hackrf Tools
47. Top Pentest Tools
48. Tools Used For Hacking
49. Hacker Tool Kit
50. What Is Hacking Tools
51. Hack Tools Online
52. Hacker Tools Github
53. What Are Hacking Tools
54. Hacking Tools For Mac
55. Pentest Tools Find Subdomains
56. Hacking Tools For Kali Linux
57. Hacker Hardware Tools
58. How To Install Pentest Tools In Ubuntu
59. Hacker Techniques Tools And Incident Handling
60. Kik Hack Tools
61. Hacker Tools Free Download
62. How To Hack
63. Hacking Tools For Pc
64. Hacking Tools For Pc
65. Hacking Tools For Windows
66. Hack Tools Online
67. Install Pentest Tools Ubuntu
68. Pentest Tools Url Fuzzer
69. Pentest Tools Website Vulnerability
70. Hack Tool Apk No Root
71. Physical Pentest Tools
72. Pentest Tools Apk
73. Best Pentesting Tools 2018
74. Hacker Tools Software
75. Hacking Tools Software
76. Hacker Tools Windows
77. Pentest Tools For Mac
78. Hacker Tools For Ios
79. Kik Hack Tools
80. Pentest Tools Alternative
81. Beginner Hacker Tools
82. Hack Tool Apk No Root
83. Hacking Tools Github
84. Hack Tool Apk
85. Best Pentesting Tools 2018
86. Pentest Tools Subdomain
87. New Hack Tools
88. Hacker Hardware Tools
89. Hacker Tools Windows
90. Hacking Tools 2019
91. Pentest Tools Website Vulnerability
92. What Are Hacking Tools
93. Wifi Hacker Tools For Windows
94. Hacker Tools
95. Underground Hacker Sites
96. Pentest Tools Github
97. Nsa Hack Tools
98. Beginner Hacker Tools
99. Hack Tools
100. Pentest Tools
101. Pentest Tools Kali Linux
102. Hacker Tools Apk
103. Hacker Tools Windows
104. Kik Hack Tools
105. Nsa Hack Tools Download
106. Hacking Tools Usb
107. Hacker Tools List
108. Nsa Hacker Tools
109. Pentest Tools Review
110. Pentest Tools
111. Hacking Tools
112. Pentest Tools Kali Linux
113. Best Pentesting Tools 2018
114. Hacker Tools Free
115. Hack Tools Github
116. Pentest Tools For Ubuntu
117. Hacker Security Tools
118. Hacker Tools For Windows
119. Pentest Tools Subdomain
120. Hacker Security Tools
121. Nsa Hack Tools
122. Hacking Tools Windows
123. Pentest Tools
124. Hack App
125. Hacking Tools 2019
126. Hacking Tools
127. New Hacker Tools
128. Pentest Tools Download
129. How To Hack
130. Pentest Tools Apk
131. Hack Tools For Windows
132. Hack Tool Apk
133. Hack Tools For Ubuntu
134. Hacks And Tools
135. Hacking Tools And Software
136. Hacker Tools For Windows
137. Hacking Tools For Windows Free Download
138. Hacking Tools Hardware