Avatar for Username

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信，及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

话题已存档。 如果需要帮助请提出新问题。

Malware webm using unknown exploit [test&report to developers]

  • 1 个回答
  • 2 人有此问题
  • 1 次查看
  • 最后回复者为 user709721

MalwareWebM
MalwareWebM
more options

Hello! I found a malware webm that crashes firefox if you open it. WebM is attached to this post: https:/2ch.hk/s/res/1065365.html#1073228

According to user from the thread above, it crashed his FF with message:

out of memory: 0xFFFFFFFFFFFFFFFF bytes requested zsh: segmentation fault (core dumped) firefox

Unfortunately, no other info was provided. I created a thread on mozillazine: http://forums.mozillazine.org/viewtopic.php?f=38&t=2884157 And it was confirmed by user osceola that his FF31.2.0ESR crashed when he opened this webm. So, I created this thread for two reasons: 1. Maybe someone will test this exploit with other FF versions like 33.0.2 2. Report this exploit to developers

Also, Mozilla has already fixed webm exploit in 33 and ESR31.2 but it looks like it was not enough: https://www.mozilla.org/security/announce/2014/mfsa2014-77.html

Hello! I found a malware webm that crashes firefox if you open it. WebM is attached to this post: https:/2ch.hk/s/res/1065365.html#1073228 According to user from the thread above, it crashed his FF with message: out of memory: 0xFFFFFFFFFFFFFFFF bytes requested zsh: segmentation fault (core dumped) firefox Unfortunately, no other info was provided. I created a thread on mozillazine: http://forums.mozillazine.org/viewtopic.php?f=38&t=2884157 And it was confirmed by user osceola that his FF31.2.0ESR crashed when he opened this webm. So, I created this thread for two reasons: 1. Maybe someone will test this exploit with other FF versions like 33.0.2 2. Report this exploit to developers Also, Mozilla has already fixed webm exploit in 33 and ESR31.2 but it looks like it was not enough: https://www.mozilla.org/security/announce/2014/mfsa2014-77.html

所有回复 (1)

user709721
user709721
more options

Hi,

The people who answer questions here, for the most part, are other Firefox users volunteering their time (like me), not Mozilla employees or Firefox developers.

If you want to leave feedback for Firefox developers, you can go to the Firefox Help menu and select Submit Feedback... or use this link. Your feedback gets collected at http://input.mozilla.org/, where a team of people read it and gather data about the most common issues.

Hope this helps!

Curtis Parfitt-Ford Mozilla Support