Security Surprises On Firefox Quantum

This morning I've found an scaring surprise on my Firefox Quantum. Casually it was connected to a proxy when an unexpected connection came up, the browser  was connecting to an unknown remote site via HTTP and downloading a ZIP that contains an ELF shared library, without any type of signature on it.

This means two things

1) the owner of that site might spread malware infecting many many people.
2) the ISP also might do that.


Ubuntu Version:

Firefox Quantum version:

The URL: hxxp://ciscobinary.openh264.org/openh264-linux64-0410d336bb748149a4f560eb6108090f078254b1.zip

The zip contains these two files:
  3f201a8984d6d765bc81966842294611  libgmpopenh264.so
  44aef3cd6b755fa5f6968725b67fd3b8  gmpopenh264.info

The info file:
  Name: gmpopenh264
  Description: GMP Plugin for OpenH264.
  Version: 1.6.0
  APIs: encode-video[h264], decode-video[h264]

So there is a remote codec loading system that is unsigned and unencrypted, I think is good to be aware of it.

In this case the shared library is a video decoder, but it would be a vector to distribute malware o spyware massively, or an attack vector for a MITM attacker.

Related posts

1. Pentest Tools Windows
2. Wifi Hacker Tools For Windows
3. Hacking Tools For Mac
4. Underground Hacker Sites
5. Hack Tool Apk No Root
6. Easy Hack Tools
7. Hack And Tools
8. Hacker Security Tools
9. Hacking Tools Download
10. How To Install Pentest Tools In Ubuntu
11. Nsa Hack Tools Download
12. Pentest Tools Nmap
13. Pentest Tools Github
14. Free Pentest Tools For Windows
15. Hacks And Tools
16. Pentest Tools Linux
17. Hack Tool Apk
18. Pentest Tools Find Subdomains
19. Pentest Tools Apk
20. Hacker Tools Windows
21. Pentest Tools For Mac
22. Physical Pentest Tools
23. Physical Pentest Tools
24. Nsa Hack Tools Download
25. Pentest Tools Find Subdomains
26. Pentest Tools Download
27. Hackrf Tools
28. Game Hacking
29. Hacker Tools Hardware
30. Hacker Techniques Tools And Incident Handling
31. Hack Tool Apk
32. Physical Pentest Tools
33. Hacking Tools For Beginners
34. Hack Tools Download
35. Hacking Tools Pc
36. Hack Tools Pc
37. Pentest Tools For Windows
38. Pentest Tools Find Subdomains
39. Hack Tools For Games
40. Hacking Tools Github
41. Hack Tools For Games
42. Hacking Tools Name
43. Hacker Techniques Tools And Incident Handling
44. Pentest Tools Nmap
45. Hack Tools Github
46. Hacker Tools Mac
47. Pentest Tools Nmap
48. Pentest Tools Port Scanner
49. Hack Rom Tools
50. Hacking Tools Github
51. Install Pentest Tools Ubuntu
52. Hacking Tools Kit
53. Easy Hack Tools
54. Hak5 Tools
55. Pentest Tools Review
56. Install Pentest Tools Ubuntu
57. Hacking Tools Windows
58. Pentest Tools Find Subdomains
59. Hacker Tools For Ios
60. Hack Tools Download
61. Hack Tools For Games
62. Hack Tool Apk No Root
63. Hacker Tools For Ios
64. Usb Pentest Tools
65. Best Pentesting Tools 2018
66. Underground Hacker Sites
67. Hacking Tools Kit
68. Pentest Reporting Tools
69. What Is Hacking Tools
70. Hacks And Tools
71. Game Hacking
72. Hack Tools 2019
73. Tools For Hacker
74. How To Hack
75. Hacking Apps
76. Hack Tools Pc
77. Hacker Hardware Tools
78. Hacking Tools For Beginners
79. Hack Tools Mac
80. Hacker Tools Linux
81. Hacking Tools Name
82. Hacking Tools For Pc
83. Hacking Tools For Windows Free Download
84. Hack And Tools
85. Hack Tools Download
86. Pentest Tools Online
87. Pentest Tools For Windows
88. Hacker Tools Windows
89. Hacker Security Tools
90. Hacker Tools Software
91. Top Pentest Tools
92. Pentest Tools Tcp Port Scanner
93. Hack Apps
94. Pentest Tools Find Subdomains