Security Surprises On Firefox Quantum

This morning I've found an scaring surprise on my Firefox Quantum. Casually it was connected to a proxy when an unexpected connection came up, the browser  was connecting to an unknown remote site via HTTP and downloading a ZIP that contains an ELF shared library, without any type of signature on it.

This means two things

1) the owner of that site might spread malware infecting many many people.
2) the ISP also might do that.


Ubuntu Version:

Firefox Quantum version:

The URL: hxxp://ciscobinary.openh264.org/openh264-linux64-0410d336bb748149a4f560eb6108090f078254b1.zip

The zip contains these two files:
  3f201a8984d6d765bc81966842294611  libgmpopenh264.so
  44aef3cd6b755fa5f6968725b67fd3b8  gmpopenh264.info

The info file:
  Name: gmpopenh264
  Description: GMP Plugin for OpenH264.
  Version: 1.6.0
  APIs: encode-video[h264], decode-video[h264]

So there is a remote codec loading system that is unsigned and unencrypted, I think is good to be aware of it.

In this case the shared library is a video decoder, but it would be a vector to distribute malware o spyware massively, or an attack vector for a MITM attacker.

Related news

1. Hacking Tools Usb
2. Hack Tool Apk
3. Termux Hacking Tools 2019
4. Top Pentest Tools
5. Hacker Tools Free Download
6. Hacker Tools 2019
7. Hack Tool Apk
8. Hacker
9. Github Hacking Tools
10. Hacker Hardware Tools
11. Pentest Tools Open Source
12. Black Hat Hacker Tools
13. Hacking Tools For Windows Free Download
14. Hacking Tools Name
15. Hack Tools Download
16. Hacker Tools 2020
17. Free Pentest Tools For Windows
18. Hacking Tools Mac
19. Tools 4 Hack
20. Hack Tool Apk
21. Hacker Tools Linux
22. Usb Pentest Tools
23. Wifi Hacker Tools For Windows
24. Hacking Tools For Windows
25. Pentest Tools Kali Linux
26. Hacker Tool Kit
27. Hacking Tools Name
28. Growth Hacker Tools
29. Hacking Tools Mac
30. Pentest Tools Online
31. Hacking Tools Hardware
32. Hacking Tools Download
33. Hacker Tools Software
34. What Is Hacking Tools
35. Hackers Toolbox
36. Hack Tools Mac
37. Hack And Tools
38. Pentest Tools Website
39. Hack Website Online Tool
40. Pentest Tools Alternative
41. Hacker Hardware Tools
42. Hack App
43. Hacks And Tools
44. Hackers Toolbox
45. Pentest Tools Website
46. Hacking Tools For Kali Linux
47. Hacker Tools Software
48. Hack Tools For Pc
49. Beginner Hacker Tools
50. Hacker Tools Online
51. Hacks And Tools
52. Hack Tools For Mac
53. Pentest Tools For Ubuntu
54. Pentest Box Tools Download
55. Wifi Hacker Tools For Windows
56. Hack Tools
57. Pentest Tools For Android
58. Hacking Tools Windows
59. Hacking Tools Mac
60. Hack Tools Pc
61. Pentest Tools
62. Hack Tool Apk No Root
63. Hacker Hardware Tools
64. Pentest Reporting Tools
65. Free Pentest Tools For Windows
66. Hacker Tools Windows
67. Pentest Tools Online
68. Pentest Tools Tcp Port Scanner
69. Hacker Tools Linux
70. Hack Tools For Ubuntu
71. Pentest Tools Github
72. Hacker Tools Free
73. How To Install Pentest Tools In Ubuntu
74. Hacking Tools Name
75. Pentest Tools Url Fuzzer
76. Nsa Hacker Tools
77. Blackhat Hacker Tools
78. Hacking Tools Software
79. Hack Tools Online
80. Free Pentest Tools For Windows
81. Termux Hacking Tools 2019
82. Hacking Tools Hardware
83. Pentest Tools Bluekeep
84. Hacking Tools 2020
85. Hack Rom Tools
86. What Are Hacking Tools
87. Github Hacking Tools
88. Hacker Tools For Ios
89. Hackrf Tools
90. Ethical Hacker Tools
91. How To Make Hacking Tools
92. Hacker Tools Windows
93. Pentest Tools For Windows
94. Hacking Tools Kit
95. Pentest Tools Kali Linux
96. Hacking Tools For Pc
97. New Hack Tools
98. Pentest Tools Windows
99. How To Install Pentest Tools In Ubuntu
100. Hacking Tools 2020
101. Beginner Hacker Tools
102. Hacking Tools Github
103. Hacking Tools For Beginners
104. Hacker Tools For Mac
105. Hack And Tools
106. Hacking Tools Online
107. Hacks And Tools
108. Hacking Tools 2019
109. Hacker Tools Github
110. Pentest Tools Framework
111. Hacker Tools Github
112. New Hack Tools
113. Hack Tools Download
114. Hack Tool Apk No Root
115. Hacker Tools 2019
116. Pentest Tools Subdomain
117. Tools Used For Hacking
118. Hack Tool Apk No Root
119. Best Hacking Tools 2020
120. Hacking Tools
121. Hacking Tools Mac