Saturday, May 27, 2023

Security Surprises On Firefox Quantum

This morning I've found an scaring surprise on my Firefox Quantum. Casually it was connected to a proxy when an unexpected connection came up, the browser  was connecting to an unknown remote site via HTTP and downloading a ZIP that contains an ELF shared library, without any type of signature on it.

This means two things

1) the owner of that site might spread malware infecting many many people.
2) the ISP also might do that.


Ubuntu Version:


Firefox Quantum version:



The URL: hxxp://ciscobinary.openh264.org/openh264-linux64-0410d336bb748149a4f560eb6108090f078254b1.zip




The zip contains these two files:
  3f201a8984d6d765bc81966842294611  libgmpopenh264.so
  44aef3cd6b755fa5f6968725b67fd3b8  gmpopenh264.info

The info file:
  Name: gmpopenh264
  Description: GMP Plugin for OpenH264.
  Version: 1.6.0
  APIs: encode-video[h264], decode-video[h264]

So there is a remote codec loading system that is unsigned and unencrypted, I think is good to be aware of it.

In this case the shared library is a video decoder, but it would be a vector to distribute malware o spyware massively, or an attack vector for a MITM attacker.




Read more


  1. Usb Pentest Tools
  2. How To Install Pentest Tools In Ubuntu
  3. Pentest Tools For Android
  4. Pentest Reporting Tools
  5. Hacker Tools
  6. Hacker Tools For Pc
  7. Hacker Tools For Mac
  8. Tools For Hacker
  9. Hack Tools 2019
  10. Hack Tool Apk No Root
  11. Hacking Tools For Mac
  12. Pentest Tools For Android
  13. Growth Hacker Tools
  14. Hacking Tools For Windows Free Download
  15. Nsa Hacker Tools
  16. New Hacker Tools
  17. Hacker Tools Software
  18. Hacker Tools Apk Download
  19. Pentest Tools For Mac
  20. Best Hacking Tools 2019
  21. Hacker Tools
  22. World No 1 Hacker Software
  23. Hacking Tools Usb
  24. Hacking Tools Kit
  25. Pentest Tools Website
  26. Hacker Tool Kit
  27. Pentest Tools Website Vulnerability
  28. Hacking App
  29. Hak5 Tools
  30. Hacking Tools Online
  31. Hack Tools Github
  32. Nsa Hacker Tools
  33. Game Hacking
  34. Hacking Tools And Software
  35. Pentest Tools Alternative
  36. Growth Hacker Tools
  37. Hacker Tools List
  38. Pentest Tools Website
  39. Hacking Tools And Software
  40. Pentest Tools List
  41. How To Make Hacking Tools
  42. Hack Tools
  43. Hack Tools Github
  44. Hacker Tools Mac
  45. Pentest Tools Port Scanner
  46. Pentest Tools Apk
  47. Pentest Tools Kali Linux
  48. Hacker
  49. Pentest Tools List
  50. Hacking Tools Windows
  51. Underground Hacker Sites
  52. Hack Website Online Tool
  53. New Hacker Tools
  54. Hackrf Tools
  55. Hackers Toolbox
  56. Pentest Tools Alternative
  57. Hacking Tools For Windows 7
  58. Hacker Tools Github
  59. Nsa Hack Tools
  60. Tools For Hacker
  61. How To Make Hacking Tools
  62. Underground Hacker Sites
  63. Pentest Tools For Android
  64. Hacker Tools Software
  65. Pentest Tools For Mac
  66. Best Pentesting Tools 2018
  67. Pentest Tools Find Subdomains
  68. Hacking Tools For Mac
  69. Hacks And Tools
  70. Hacking Tools For Windows 7
  71. Hacking Tools Mac
  72. Hacker Tools Mac
  73. Hacker Tools 2019
  74. Kik Hack Tools
  75. Pentest Automation Tools
  76. Free Pentest Tools For Windows
  77. Hack Apps
  78. Nsa Hack Tools Download
  79. Hack Rom Tools
  80. Pentest Recon Tools
  81. Pentest Box Tools Download
  82. Pentest Tools Github
  83. Pentest Tools For Android
  84. Nsa Hack Tools
  85. Hack Tools For Ubuntu
  86. Nsa Hack Tools
  87. Usb Pentest Tools
  88. Hacking Tools Usb
  89. Hacking Tools Software
  90. Beginner Hacker Tools
  91. Hacker Security Tools
  92. Free Pentest Tools For Windows
  93. Pentest Tools
  94. Easy Hack Tools
  95. Hacking Apps
  96. Hack Tools Download
  97. Wifi Hacker Tools For Windows
  98. Hack Tools Mac
  99. Pentest Tools Framework
  100. Pentest Tools Linux
  101. Nsa Hack Tools
  102. Tools For Hacker
  103. Pentest Tools Github
  104. Hack Tools Github
  105. Hacking Tools 2019
  106. Physical Pentest Tools
  107. Pentest Tools For Ubuntu
  108. Easy Hack Tools
  109. Hack Tools Pc
  110. Hacker Tools Hardware
  111. New Hack Tools
  112. Nsa Hack Tools Download
  113. Hacker Tool Kit
  114. Github Hacking Tools
  115. How To Hack
  116. What Is Hacking Tools
  117. Blackhat Hacker Tools
  118. Hacking Tools Usb
  119. Pentest Automation Tools
  120. Bluetooth Hacking Tools Kali
  121. Best Hacking Tools 2020
  122. Pentest Tools Android
  123. Hack Tools
  124. Hacking Tools For Mac
  125. Hacker Tools 2020
  126. Hack Tools For Pc
  127. Hacker Tools For Mac
  128. Hacker
  129. Beginner Hacker Tools
  130. Tools 4 Hack
Posted by at

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)