Security Surprises On Firefox Quantum

This morning I've found an scaring surprise on my Firefox Quantum. Casually it was connected to a proxy when an unexpected connection came up, the browser  was connecting to an unknown remote site via HTTP and downloading a ZIP that contains an ELF shared library, without any type of signature on it.

This means two things

1) the owner of that site might spread malware infecting many many people.
2) the ISP also might do that.


Ubuntu Version:

Firefox Quantum version:

The URL: hxxp://ciscobinary.openh264.org/openh264-linux64-0410d336bb748149a4f560eb6108090f078254b1.zip

The zip contains these two files:
  3f201a8984d6d765bc81966842294611  libgmpopenh264.so
  44aef3cd6b755fa5f6968725b67fd3b8  gmpopenh264.info

The info file:
  Name: gmpopenh264
  Description: GMP Plugin for OpenH264.
  Version: 1.6.0
  APIs: encode-video[h264], decode-video[h264]

So there is a remote codec loading system that is unsigned and unencrypted, I think is good to be aware of it.

In this case the shared library is a video decoder, but it would be a vector to distribute malware o spyware massively, or an attack vector for a MITM attacker.

Read more

1. Pentest Tools Review
2. Computer Hacker
3. Bluetooth Hacking Tools Kali
4. Hacker Hardware Tools
5. Pentest Tools Tcp Port Scanner
6. Hacking Tools Github
7. Hacking Tools For Windows 7
8. Pentest Reporting Tools
9. Hacker Tools List
10. Tools 4 Hack
11. Pentest Tools For Mac
12. Hacking Tools Github
13. Hacker Search Tools
14. Hacking Tools For Pc
15. Tools Used For Hacking
16. Hacking Tools Software
17. Best Pentesting Tools 2018
18. Hack Tools Pc
19. Pentest Tools Tcp Port Scanner
20. What Are Hacking Tools
21. Best Hacking Tools 2020
22. Hacking Tools For Kali Linux
23. Pentest Tools Website Vulnerability
24. Hackers Toolbox
25. Hack Tools Github
26. Pentest Reporting Tools
27. Hacking Tools For Windows Free Download
28. Ethical Hacker Tools
29. Hacking Tools Usb
30. Pentest Tools Apk
31. Hacking Tools Windows 10
32. Hack Tools Github
33. Tools Used For Hacking
34. Tools 4 Hack
35. Pentest Tools For Mac
36. Hack Tools For Pc
37. Pentest Tools Nmap
38. Hack Rom Tools
39. Nsa Hack Tools Download
40. Hacker Tools For Pc
41. Hacker Tools Mac
42. Hacker Tools For Pc
43. Pentest Tools Find Subdomains
44. Wifi Hacker Tools For Windows
45. How To Hack
46. Pentest Tools For Ubuntu
47. Hacking Tools For Beginners
48. Kik Hack Tools
49. Pentest Box Tools Download
50. Underground Hacker Sites
51. Hacker Tools Free
52. Pentest Tools Windows
53. Pentest Tools Free
54. Hack Tools For Pc
55. Hack Website Online Tool
56. Growth Hacker Tools
57. Hacking Tools Free Download
58. Hacker Search Tools
59. Hack Tools Online
60. Free Pentest Tools For Windows
61. Hacking Tools For Windows 7
62. Pentest Tools Android
63. Physical Pentest Tools
64. Hack Rom Tools
65. Pentest Tools Tcp Port Scanner
66. World No 1 Hacker Software
67. Termux Hacking Tools 2019
68. Pentest Tools Review
69. Hacker Tools List
70. Pentest Tools Apk
71. Hacker Tools Hardware
72. Android Hack Tools Github
73. Hacker Tools For Ios
74. Hacker Tools Windows
75. Hacking Tools For Games
76. Physical Pentest Tools
77. Pentest Tools Kali Linux
78. Hack And Tools
79. Blackhat Hacker Tools
80. Hacks And Tools
81. Nsa Hack Tools
82. Tools 4 Hack
83. New Hacker Tools
84. Hacker Tools Free
85. Pentest Tools For Windows
86. Hacker Tools Linux
87. Hacking Tools Name
88. Hacking Tools For Games
89. Ethical Hacker Tools
90. Pentest Tools Subdomain
91. Hack Tools
92. Hacking Tools 2020
93. Pentest Tools Apk
94. Best Pentesting Tools 2018
95. Hacking Tools For Windows
96. Hacker Security Tools
97. Hack Tools For Windows
98. Hack App
99. Hacker Tools
100. Kik Hack Tools
101. Hacking Tools Software
102. Nsa Hacker Tools
103. Physical Pentest Tools
104. Hacking Tools 2020
105. Hacking Tools Name
106. Hacker Tools Online
107. Pentest Tools Open Source
108. Pentest Tools Android
109. Hacker Tools Hardware
110. Android Hack Tools Github
111. What Is Hacking Tools
112. What Are Hacking Tools
113. Top Pentest Tools
114. Pentest Box Tools Download
115. Pentest Tools Windows
116. Best Hacking Tools 2020
117. Hack Tools For Games
118. Hacking Tools
119. Wifi Hacker Tools For Windows
120. Hacking Tools Free Download
121. Hacking Tools Usb
122. What Is Hacking Tools
123. How To Make Hacking Tools
124. Hak5 Tools
125. Growth Hacker Tools
126. How To Install Pentest Tools In Ubuntu
127. Pentest Tools Alternative
128. Hacking Tools For Beginners
129. Hackers Toolbox
130. Pentest Tools Open Source
131. How To Hack
132. Hacking Tools Kit
133. Pentest Tools List
134. World No 1 Hacker Software
135. Hacker Tools Mac
136. Hack Tools For Windows
137. Hacking Tools Windows
138. Hacker Tools
139. Nsa Hacker Tools
140. Kik Hack Tools
141. Hack Tools Pc
142. Hacking Tools For Windows
143. Free Pentest Tools For Windows
144. How To Make Hacking Tools
145. Hack And Tools
146. Pentest Tools Online
147. Hack Tools For Mac