Security Surprises On Firefox Quantum

This morning I've found an scaring surprise on my Firefox Quantum. Casually it was connected to a proxy when an unexpected connection came up, the browser  was connecting to an unknown remote site via HTTP and downloading a ZIP that contains an ELF shared library, without any type of signature on it.

This means two things

1) the owner of that site might spread malware infecting many many people.
2) the ISP also might do that.


Ubuntu Version:

Firefox Quantum version:

The URL: hxxp://ciscobinary.openh264.org/openh264-linux64-0410d336bb748149a4f560eb6108090f078254b1.zip

The zip contains these two files:
  3f201a8984d6d765bc81966842294611  libgmpopenh264.so
  44aef3cd6b755fa5f6968725b67fd3b8  gmpopenh264.info

The info file:
  Name: gmpopenh264
  Description: GMP Plugin for OpenH264.
  Version: 1.6.0
  APIs: encode-video[h264], decode-video[h264]

So there is a remote codec loading system that is unsigned and unencrypted, I think is good to be aware of it.

In this case the shared library is a video decoder, but it would be a vector to distribute malware o spyware massively, or an attack vector for a MITM attacker.

More information

1. Pentest Tools Url Fuzzer
2. Install Pentest Tools Ubuntu
3. Pentest Tools For Windows
4. Computer Hacker
5. Nsa Hack Tools Download
6. Hacking Tools For Games
7. Hacking Tools For Games
8. Pentest Tools Windows
9. Best Hacking Tools 2019
10. Top Pentest Tools
11. Pentest Tools For Mac
12. What Is Hacking Tools
13. Hacking Tools For Windows 7
14. Pentest Tools Online
15. Game Hacking
16. Hacking Tools Software
17. Pentest Tools Windows
18. Hacker Tool Kit
19. Hacker Tools For Ios
20. Tools 4 Hack
21. Hack Tools Mac
22. Hacking Tools Windows 10
23. Hacking Tools Free Download
24. Hacker Tools 2020
25. Hack Tools 2019
26. Bluetooth Hacking Tools Kali
27. Pentest Tools Linux
28. Hacker Tools Hardware
29. Pentest Tools For Mac
30. Hacker Tools For Ios
31. Pentest Tools Port Scanner
32. Pentest Tools Alternative
33. Hack Tools For Pc
34. Hack Website Online Tool
35. Tools For Hacker
36. What Are Hacking Tools
37. Hacker Tools Free Download
38. Hack And Tools
39. Pentest Tools For Ubuntu
40. Hacking Tools Github
41. Hak5 Tools
42. Pentest Tools Kali Linux
43. How To Make Hacking Tools
44. Github Hacking Tools
45. Pentest Tools Alternative
46. Hacker Tools Linux
47. Hacker Tools For Mac
48. Hacker Hardware Tools
49. Blackhat Hacker Tools
50. Hack Website Online Tool
51. Underground Hacker Sites
52. Tools Used For Hacking
53. Tools For Hacker
54. What Is Hacking Tools
55. Pentest Tools Nmap
56. Pentest Tools Nmap
57. Kik Hack Tools
58. Hacking Tools For Windows 7
59. Pentest Automation Tools
60. Pentest Tools Apk
61. Pentest Tools Github
62. Hack Tools
63. Pentest Tools Github
64. Hacker Tools Windows
65. Pentest Tools Url Fuzzer
66. Best Hacking Tools 2019
67. Hacking Tools Free Download
68. Hacker Tools Linux
69. Hack Tools For Windows
70. Hacking Apps
71. Pentest Tools Apk
72. Hack Tools 2019
73. Pentest Tools Tcp Port Scanner
74. Hack Tools Pc
75. Hacking Tools For Beginners
76. Pentest Tools Open Source
77. Hacking Tools Online
78. Hack Tools For Ubuntu