Aug 31, 2020

Security Surprises On Firefox Quantum

This morning I've found an scaring surprise on my Firefox Quantum. Casually it was connected to a proxy when an unexpected connection came up, the browser  was connecting to an unknown remote site via HTTP and downloading a ZIP that contains an ELF shared library, without any type of signature on it.

This means two things

1) the owner of that site might spread malware infecting many many people.
2) the ISP also might do that.


Ubuntu Version:


Firefox Quantum version:



The URL: hxxp://ciscobinary.openh264.org/openh264-linux64-0410d336bb748149a4f560eb6108090f078254b1.zip




The zip contains these two files:
  3f201a8984d6d765bc81966842294611  libgmpopenh264.so
  44aef3cd6b755fa5f6968725b67fd3b8  gmpopenh264.info

The info file:
  Name: gmpopenh264
  Description: GMP Plugin for OpenH264.
  Version: 1.6.0
  APIs: encode-video[h264], decode-video[h264]

So there is a remote codec loading system that is unsigned and unencrypted, I think is good to be aware of it.

In this case the shared library is a video decoder, but it would be a vector to distribute malware o spyware massively, or an attack vector for a MITM attacker.




Related articles


  1. Hack Rom Tools
  2. Best Pentesting Tools 2018
  3. Pentest Tools List
  4. Usb Pentest Tools
  5. Pentest Tools For Windows
  6. Hacker Tools List
  7. Hacker Tools 2019
  8. Hacker Tools Hardware
  9. Pentest Automation Tools
  10. Hacking Tools 2020
  11. Ethical Hacker Tools
  12. Hacking Tools
  13. Top Pentest Tools
  14. Nsa Hacker Tools
  15. Hacking Tools Name
  16. What Are Hacking Tools
  17. Pentest Tools Apk
  18. Pentest Automation Tools
  19. Hacker Tools Free
  20. Pentest Tools Bluekeep
  21. Tools For Hacker
  22. Hacker Tools For Windows
  23. World No 1 Hacker Software
  24. Free Pentest Tools For Windows
  25. Hack And Tools
  26. Hacker Tools
  27. Hack Tools Pc
  28. Hack Rom Tools
  29. Pentest Tools
  30. Hacking Tools
  31. Hacker Tools Linux
  32. Pentest Tools Apk
  33. Hacker Tools 2019
  34. Game Hacking
  35. Hack Tools Pc
  36. Install Pentest Tools Ubuntu
  37. Hack Rom Tools
  38. Kik Hack Tools
  39. How To Install Pentest Tools In Ubuntu
  40. Hack Apps
  41. Termux Hacking Tools 2019
  42. Hacker Tools 2019
  43. Hacking Tools For Windows Free Download
  44. Hacker Tools Free
  45. Hacker Tools List
  46. Pentest Tools List
  47. Hacker Tools Mac
  48. Hack Tools Pc
  49. Nsa Hack Tools Download
  50. Top Pentest Tools
  51. Black Hat Hacker Tools
  52. Pentest Tools Download
  53. Hacking Tools Usb
  54. Kik Hack Tools
  55. Hacking App
  56. Blackhat Hacker Tools
  57. Pentest Tools Website Vulnerability
  58. Hacker Tools Apk
  59. Hacker Tools For Pc
  60. New Hack Tools
  61. Hacking Tools 2020
  62. Hacking Tools For Games
  63. Pentest Tools Url Fuzzer
  64. How To Hack
  65. Bluetooth Hacking Tools Kali
  66. Pentest Reporting Tools
  67. Hack Tools Github
  68. Pentest Tools For Mac
  69. Tools For Hacker
  70. Usb Pentest Tools
  71. Pentest Tools For Mac
  72. Hacker Tools Software
  73. Hacking Tools Mac
  74. World No 1 Hacker Software
  75. Hack Tools For Games
  76. Pentest Tools Nmap
  77. Growth Hacker Tools
  78. Hacker Tools Windows
  79. Beginner Hacker Tools
  80. What Is Hacking Tools
  81. Tools For Hacker
  82. Hacker Tools Apk
  83. Pentest Tools Android
  84. Hack Tools
  85. Underground Hacker Sites
  86. Hacking App
  87. Wifi Hacker Tools For Windows
  88. Hacker Security Tools
  89. Nsa Hack Tools
  90. Hackers Toolbox
  91. Wifi Hacker Tools For Windows
  92. Hacks And Tools
  93. Hacking Tools And Software
  94. Pentest Tools For Android
  95. Hack Website Online Tool
  96. Pentest Tools Website
  97. Hack Tool Apk
  98. Hacking Apps
  99. Wifi Hacker Tools For Windows
  100. Hack Tools Github
  101. Hacker Tools Linux
Posted by at