Security Surprises On Firefox Quantum

This morning I've found an scaring surprise on my Firefox Quantum. Casually it was connected to a proxy when an unexpected connection came up, the browser  was connecting to an unknown remote site via HTTP and downloading a ZIP that contains an ELF shared library, without any type of signature on it.

This means two things

1) the owner of that site might spread malware infecting many many people.
2) the ISP also might do that.


Ubuntu Version:

Firefox Quantum version:

The URL: hxxp://ciscobinary.openh264.org/openh264-linux64-0410d336bb748149a4f560eb6108090f078254b1.zip

The zip contains these two files:
  3f201a8984d6d765bc81966842294611  libgmpopenh264.so
  44aef3cd6b755fa5f6968725b67fd3b8  gmpopenh264.info

The info file:
  Name: gmpopenh264
  Description: GMP Plugin for OpenH264.
  Version: 1.6.0
  APIs: encode-video[h264], decode-video[h264]

So there is a remote codec loading system that is unsigned and unencrypted, I think is good to be aware of it.

In this case the shared library is a video decoder, but it would be a vector to distribute malware o spyware massively, or an attack vector for a MITM attacker.

Related articles

1. Growth Hacker Tools
2. Hacker Tools Hardware
3. Pentest Tools Nmap
4. What Are Hacking Tools
5. Usb Pentest Tools
6. Hacking Tools For Pc
7. Pentest Tools Github
8. Pentest Tools Online
9. Hack Tools Pc
10. Hack Tools Download
11. Hack Tools Online
12. Pentest Tools Linux
13. Pentest Tools Free
14. Pentest Tools Nmap
15. Hacker Security Tools
16. Hacker Tools Windows
17. Pentest Tools Url Fuzzer
18. Tools 4 Hack
19. Pentest Tools List
20. Underground Hacker Sites
21. Pentest Tools List
22. Hack Apps
23. Hack Tool Apk
24. Hack Tools For Ubuntu
25. Hacker Techniques Tools And Incident Handling
26. Hacking Tools Download
27. Hack Tools For Ubuntu
28. Hacker Tools For Windows
29. Pentest Tools Kali Linux
30. Hacker
31. Hacking Tools For Mac
32. Pentest Tools Port Scanner
33. Best Hacking Tools 2019
34. Hacking Tools Windows
35. Hack Tools Pc
36. Pentest Tools Download
37. Computer Hacker
38. Hack Tools Download
39. Pentest Tools For Windows
40. Hacking Tools Github
41. Underground Hacker Sites
42. Computer Hacker
43. Hacking Tools 2019
44. Hacking Tools For Mac
45. Hack Tools For Windows
46. Pentest Tools Framework
47. How To Hack
48. Hacking Tools For Kali Linux
49. Pentest Tools Url Fuzzer
50. Hacker Tools List
51. Hacking Tools For Beginners
52. Pentest Tools For Windows
53. Nsa Hacker Tools
54. Hack Tools
55. Pentest Reporting Tools
56. Hack App
57. Growth Hacker Tools
58. Hacker Search Tools
59. Hacker Tools 2019
60. Hackers Toolbox
61. Hacker Tools List
62. Hacking Tools Mac
63. Hack Tools Online
64. Hacking Tools Windows 10
65. Hacking Tools For Kali Linux
66. Nsa Hack Tools
67. Hacking App
68. Hacker Tools 2020
69. Hack Tool Apk No Root
70. Black Hat Hacker Tools
71. Github Hacking Tools
72. Pentest Tools Framework
73. Tools Used For Hacking
74. Computer Hacker
75. Hacking Tools Windows 10