Saturday, June 03, 2023

Security Surprises On Firefox Quantum

This morning I've found an scaring surprise on my Firefox Quantum. Casually it was connected to a proxy when an unexpected connection came up, the browser  was connecting to an unknown remote site via HTTP and downloading a ZIP that contains an ELF shared library, without any type of signature on it.

This means two things

1) the owner of that site might spread malware infecting many many people.
2) the ISP also might do that.


Ubuntu Version:


Firefox Quantum version:



The URL: hxxp://ciscobinary.openh264.org/openh264-linux64-0410d336bb748149a4f560eb6108090f078254b1.zip




The zip contains these two files:
  3f201a8984d6d765bc81966842294611  libgmpopenh264.so
  44aef3cd6b755fa5f6968725b67fd3b8  gmpopenh264.info

The info file:
  Name: gmpopenh264
  Description: GMP Plugin for OpenH264.
  Version: 1.6.0
  APIs: encode-video[h264], decode-video[h264]

So there is a remote codec loading system that is unsigned and unencrypted, I think is good to be aware of it.

In this case the shared library is a video decoder, but it would be a vector to distribute malware o spyware massively, or an attack vector for a MITM attacker.




More information


  1. Hacker Search Tools
  2. Hacker Tools Mac
  3. Pentest Automation Tools
  4. Underground Hacker Sites
  5. Pentest Tools Online
  6. Hack Tools Github
  7. Hacking App
  8. Hack Tools
  9. Hack Tools
  10. Pentest Recon Tools
  11. Hacking Tools For Beginners
  12. What Are Hacking Tools
  13. Pentest Tools List
  14. Hack Tools
  15. Pentest Tools Bluekeep
  16. What Is Hacking Tools
  17. Hacker
  18. Pentest Tools For Android
  19. Kik Hack Tools
  20. Hacking Apps
  21. Best Hacking Tools 2020
  22. Hack Tools For Mac
  23. Pentest Tools For Android
  24. Hacker Tools For Pc
  25. Hack Tools For Mac
  26. Free Pentest Tools For Windows
  27. Pentest Tools For Mac
  28. Hacking Tools Name
  29. Pentest Tools Subdomain
  30. Growth Hacker Tools
  31. Pentest Tools Github
  32. Hack Tool Apk No Root
  33. Hacker Tools For Pc
  34. Tools Used For Hacking
  35. Hacking Tools Usb
  36. Hack Tools For Games
  37. World No 1 Hacker Software
  38. Android Hack Tools Github
  39. Pentest Tools Review
  40. Hacker Tools Github
  41. Android Hack Tools Github
  42. Nsa Hack Tools Download
  43. New Hacker Tools
  44. Black Hat Hacker Tools
  45. Hacker
  46. Ethical Hacker Tools
  47. How To Install Pentest Tools In Ubuntu
  48. Hack Tools Mac
  49. How To Hack
  50. Hacker Tools For Ios
  51. Hacker Tools Apk Download
  52. Hacker Tools Online
  53. Hacker Hardware Tools
  54. Pentest Tools For Windows
  55. What Is Hacking Tools
  56. Hack Tools
  57. Pentest Tools
  58. Hacking Tools 2020
  59. Hack Tools
  60. Android Hack Tools Github
  61. Hacker Tools Free Download
  62. What Is Hacking Tools
  63. Pentest Tools Online
  64. Hacker Techniques Tools And Incident Handling
  65. Hackrf Tools
  66. Hacker Tools Free Download
  67. Tools For Hacker
  68. Hacker Search Tools
  69. Wifi Hacker Tools For Windows
  70. Pentest Tools Windows
  71. Hacker Hardware Tools
  72. Github Hacking Tools
  73. Hacking Tools Windows
  74. Hackers Toolbox
  75. New Hack Tools
  76. Pentest Tools For Android
  77. Hacking Tools Github
  78. Pentest Tools Nmap
  79. Hackers Toolbox
  80. Hacking Tools For Beginners
  81. Pentest Tools Framework
  82. Pentest Tools Linux
  83. Pentest Tools Open Source
  84. Hack Tools Github
  85. Hack Tools 2019
  86. Pentest Tools Free
  87. Pentest Tools Nmap
  88. Hacker Security Tools
  89. Hacking Tools For Windows
  90. Hack App
  91. Pentest Tools For Mac
  92. Hacking Tools Usb
  93. Computer Hacker
  94. Hacker Tools Windows
  95. Hacking Apps
  96. Pentest Tools Free
  97. Nsa Hack Tools Download
  98. Hacker Tools Linux
  99. Hacking Tools For Windows Free Download
  100. Hack Tool Apk No Root
  101. Pentest Tools For Mac
  102. Bluetooth Hacking Tools Kali
  103. How To Install Pentest Tools In Ubuntu
  104. Hacking Tools Free Download
  105. Hackrf Tools
  106. Hacking Tools Download
  107. Pentest Tools Online
  108. Hacker Tools Windows
  109. Usb Pentest Tools
  110. Hacker Tools Apk
  111. World No 1 Hacker Software
  112. What Is Hacking Tools
  113. Hacker Tools Github
  114. How To Hack
  115. Hack Tools For Games
  116. Top Pentest Tools
  117. Hack Tool Apk
  118. Hacker Tools Software
  119. Hack Tools Mac
  120. Ethical Hacker Tools
  121. Hack Tools Github
  122. Hacking Tools 2020
  123. Hacking App
  124. Pentest Tools Android
  125. Pentest Tools Subdomain
  126. Hacking Tools Github
  127. Pentest Tools Apk
  128. Hack Rom Tools
  129. Hack Apps
  130. Pentest Box Tools Download
  131. Hack Tools For Ubuntu
  132. Top Pentest Tools
  133. Best Hacking Tools 2020
  134. Hacking Tools 2019
  135. Pentest Box Tools Download
  136. Hacker Hardware Tools
  137. Pentest Tools Open Source
  138. Underground Hacker Sites
  139. Pentest Tools Find Subdomains
  140. Kik Hack Tools
  141. Pentest Tools For Android
  142. Pentest Tools Github
  143. Hacking App
  144. How To Install Pentest Tools In Ubuntu
  145. Best Pentesting Tools 2018
  146. Pentest Tools Linux
  147. Hacking Apps
  148. Hack Tools For Games
  149. Pentest Box Tools Download
  150. Top Pentest Tools
Posted by at

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)