1. #1
    hackerman1 is offline Senior Member
    Join Date
    Dec 2008
    Location
    Sweden
    Posts
    1,525

    Default Firefox exploit found in the wild

    Important information for Firefox-users

    "Yesterday morning, August 5, a Firefox user informed us that an advertisement on a news site in Russia was serving a Firefox exploit that searched for sensitive files,
    and uploaded them to a server that appears to be in Ukraine.

    The vulnerability comes from the interaction of the mechanism that enforces JavaScript context separation (the “same origin policy”), and Firefox’s PDF Viewer.
    Mozilla products that don’t contain the PDF Viewer, such as Firefox for Android, are not vulnerable.
    The vulnerability does not enable the execution of arbitrary code but the exploit was able to inject a JavaScript payload into the local file context.
    This allowed it to search for and upload potentially sensitive local files."

    "If you use Firefox on Windows or Linux it would be prudent to change any passwords and keys......"

    Read the full story: https://blog.mozilla.org/security/20...d-in-the-wild/

    This a good reason why you should not use the built-in PDF-reader in Firefox.
    Use a "real" PDF-reader like fx. PDF-XChange Viewer instead.

    Note: Its not recommended to use Adobe Reader because vulnerabilities are regularly found.
    Last edited by hackerman1; 8th August 2015 at 07:58.

  2. #2
    Kapil Arya's Avatar
    Kapil Arya is offline Microsoft MVP
    Join Date
    May 2012
    Location
    INDIA
    Posts
    143

    Default

    Thanks hackerman for the news. Just wanted to suggest, you can use Reader app as your PDF viewer, if you're on Windows 8 or later

    Regards.

  3. #3
    hackerman1 is offline Senior Member
    Join Date
    Dec 2008
    Location
    Sweden
    Posts
    1,525

    Default

    W8 or later ???
    What do you think of me ?
    Im using WS2008-R2...
    Last edited by hackerman1; 8th August 2015 at 10:16.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Log in

Log in

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22