Zero-Day Firefox Vulnerability Exploited to Distribute Trojan

My Computer My Computer

OS
Windows 7 & Windows Vista Ultimate
No script is great

I run my Firefox on a standard user with UAC visualization and DEP enabled on it, along with no script, adblock etc etc.
Also of interest is Graham Cluley's blog, recommending NoScript:
Mozilla says it is working on a fix, but in the meantime Firefox users might be wise to turn JavaScript off and use the popular NoScript addon.

NoScript is a great idea - I'd never use Firefox without it, and neither should you.
Firefox hit by critical zero-day vulnerability

Thanks for the info OP
 

My Computer My Computer

Computer Manufacturer/Model Number
HP DV6 1330sa
OS
Windows 7 Professional 64 Bit SP1
CPU
INTEL DUAL CORE 2.1Ghz
Motherboard
N/A
Memory
4GB DDR3
Graphics Card(s)
INTEL
Sound Card
LAPTOP
Monitor(s) Displays
2
Screen Resolution
3200x1080
Hard Drives
250GB
PSU
LAPTOP
Case
LAPTOP
Cooling
LAPTOP
Keyboard
SOLID YEAR 260U
Mouse
USB
Internet Speed
20 MB/S
Firefox 3.6.12 Fixes Critical Security Vulnerability
Now that was fast. The Firefox developers have updated the web browser only a day after the discovery of a 0-day vulnerability on the Nobel Prize website targeting Firefox 3.6 Windows installations. The critical vulnerability affected all Firefox 3.6 and 3.5 releases, and allowed the attacker to compromise a system without user interaction or warning messages.

The new versions of the browser are currently distributed to the release servers. It usually takes a couple of hours before the releases are pushed to the users who will receive an update notification once the new version becomes officially available.
...
 

My Computer My Computer

OS
Arch Linux 64-bit
So as long as I didn't go to that site I'm fine?
 

My Computer My Computer

Computer Manufacturer/Model Number
HP p6270z
OS
Windows 7 Home Premium x64
CPU
AMD Athlon II X4 620
Motherboard
Foxconn ALOE (CPU 1)
Memory
4.00GB Dual Channel DDR3 @ 666Mhz (9-9-9-24)
Graphics Card(s)
HD Radeon 4200 (Integrated)
Sound Card
Realtek High Definition Audio
Monitor(s) Displays
HP 2311 (1920x1080) @ 60Hz
Screen Resolution
1920x1080
Hard Drives
488GB Seagate ST3500418AS SCSI Disk Device (RAID)
Cheers for this info... :)
 

My Computer My Computer

Computer Manufacturer/Model Number
Dell Optiplex GX620
OS
Windows 7 Ultimate
CPU
Pentium D 2.80GHz
Memory
4.00 GB
Graphics Card(s)
1.00 GB nVidia GeForce 9500GT
Monitor(s) Displays
Dual - 23" Samsung P2370 & 22" Samsung 2232GW
Hard Drives
c: 250 GB
d: 320 GB
USB External 1.0 TB
Keyboard
Logitech Illuminated \ Logitech DiNovo Edge
Mouse
Logitech Trackman
Internet Speed
DSL

My Computer My Computer

Computer Manufacturer/Model Number
Home built
OS
Windows 7 Ultimate 32 bit
CPU
Intel(R) Pentium(R) 4 CPU 3.00GHz
Motherboard
ASUS P4P800-VM Motherboard Chipset: Intel 865G + ICH5
Memory
2.50 GB RAM
Graphics Card(s)
NVIDIA GeForce 7600 GS
Sound Card
SoundMax Integrated Digital Audio (Chip)
Monitor(s) Displays
ViewSonic VX 1962 wm
Screen Resolution
1680 X 1050
Hard Drives
Seagate Barracuda 7200.10 80 GB
ST380215A ATA Device 18.6 GB
Western Digital "My Book" external hard drive 750 GB
Cooling
Fan based
Keyboard
Microsoft Comfort Curve Keyboard 2000 v10 USB
Mouse
Logitec optic USB
Internet Speed
3.01 Mb/s download 0.64 Mb/s upload

My Computer My Computer

OS
Windows 7 & Windows Vista Ultimate
Just got the update request to 3.6.12 some 20 mins ago...used chrome in the meantime :D

With NoScript...the only thing that really bothered me, was that with every of the frequent updates, I was redirected to their page and that kept messing with my tabs.

Solution: in the URL bar enter about:config
search for a key named noscript.firstRunRedirection (if it's not there, create it)
and set it to false

Capture.JPG

-DG
 

My Computer My Computer

Computer Manufacturer/Model Number
HP m8000n
OS
Windows 7 Ultimate x86
CPU
DualCore AMD Athlon 64 X2, 2600 MHz 5200+
Motherboard
Asus M2N68-LA (Narra)
Memory
Samsung 2GB DDR2
Graphics Card(s)
Onboard NVIDIA GeForce 6150SE nForce 430
Sound Card
Onboard nVIDIA nForce 6100-430 (MCP61P)
Monitor(s) Displays
Westinghouse 19" LED
Screen Resolution
1280x1024
Hard Drives
SATA II Seagate Barracuda 500GB
USB II WD Elements 500GB
USB II WD My Book 1TB
USB II WD My Book 2TB
PSU
Stock (HP)
Case
Stock (HP)
Cooling
Stock
Keyboard
Logitech Classic KB 200
Mouse
Standard HP opticle USB mouse

My Computer My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
Home Built
OS
Windows 8.1 Pro w/Media Center 64bit, Windows 7 HP 64bit
CPU
Phenom II X6 1100T
Motherboard
ASUS M5A99X EVO
Memory
Crucial Balistic 8gb DDR3-1866 CL9
Graphics Card(s)
MSI R6850 Cyclone IGD5 PE
Sound Card
On Board
Monitor(s) Displays
ASUS VE258Q 25" LED with DVI-HDMI-DisplayPort
Screen Resolution
1920 x 1080
Hard Drives
Two WD Cavier Black 2TB Sata III, WD My Book Essential 2TB USB 3.0
PSU
Seasonic X650 80 Plus GOLD Modular
Case
Corsair 400R
Cooling
Antec Kuhler H2O 620, Two 120mm and four 140mm
Keyboard
Logitech K120
Mouse
Logitech Marble Mouse USB, Logitech Precision Game Pad
Internet Speed
15MB
Antivirus
Norton IS 2013, Malwarebytes Pro Beta 2
Browser
IE-11, FF-27
Other Info
APC UPS ES 750, Netgear WNR3500L Gigabit & Wireless N Router with SamKnows Test Program, Motorola SB6120 Gigabit Cable Modem. Brother HL-2170W Laser Printer, Epson V300 Scanner
So I should download this addon? My addons usually involve:

Chromifox Theme Extreme
Adblock Plus
Echofon
GameFox
Linkification
Download Statusbar
Foxytunes
 

My Computer My Computer

Computer Manufacturer/Model Number
HP p6270z
OS
Windows 7 Home Premium x64
CPU
AMD Athlon II X4 620
Motherboard
Foxconn ALOE (CPU 1)
Memory
4.00GB Dual Channel DDR3 @ 666Mhz (9-9-9-24)
Graphics Card(s)
HD Radeon 4200 (Integrated)
Sound Card
Realtek High Definition Audio
Monitor(s) Displays
HP 2311 (1920x1080) @ 60Hz
Screen Resolution
1920x1080
Hard Drives
488GB Seagate ST3500418AS SCSI Disk Device (RAID)
I run NoScript ever since I discovered it and haven't regret it one single bit.
Of course occasionally I coma across a webpage that relies heavily on Javascript . In that case you can right-click the "S" icon in the bottom bar and allow JS for certain pages either permanent or on a session base.
It's a nice addition and even stops some ads, Adblock Plus can't/doesn't.

-DG
 

My Computer My Computer

Computer Manufacturer/Model Number
HP m8000n
OS
Windows 7 Ultimate x86
CPU
DualCore AMD Athlon 64 X2, 2600 MHz 5200+
Motherboard
Asus M2N68-LA (Narra)
Memory
Samsung 2GB DDR2
Graphics Card(s)
Onboard NVIDIA GeForce 6150SE nForce 430
Sound Card
Onboard nVIDIA nForce 6100-430 (MCP61P)
Monitor(s) Displays
Westinghouse 19" LED
Screen Resolution
1280x1024
Hard Drives
SATA II Seagate Barracuda 500GB
USB II WD Elements 500GB
USB II WD My Book 1TB
USB II WD My Book 2TB
PSU
Stock (HP)
Case
Stock (HP)
Cooling
Stock
Keyboard
Logitech Classic KB 200
Mouse
Standard HP opticle USB mouse
I run NoScript ever since I discovered it and haven't regret it one single bit.
Of course occasionally I coma across a webpage that relies heavily on Javascript . In that case you can right-click the "S" icon in the bottom bar and allow JS for certain pages either permanent or on a session base.
It's a nice addition and even stops some ads, Adblock Plus can't/doesn't.

-DG

Ditto and I agree. NoScript is one of the reasons I stick with Firefox. I updated my FF this morning.
 

My Computer My Computer

Computer Manufacturer/Model Number
Home built
OS
Windows 7 Ultimate 32 bit
CPU
Intel(R) Pentium(R) 4 CPU 3.00GHz
Motherboard
ASUS P4P800-VM Motherboard Chipset: Intel 865G + ICH5
Memory
2.50 GB RAM
Graphics Card(s)
NVIDIA GeForce 7600 GS
Sound Card
SoundMax Integrated Digital Audio (Chip)
Monitor(s) Displays
ViewSonic VX 1962 wm
Screen Resolution
1680 X 1050
Hard Drives
Seagate Barracuda 7200.10 80 GB
ST380215A ATA Device 18.6 GB
Western Digital "My Book" external hard drive 750 GB
Cooling
Fan based
Keyboard
Microsoft Comfort Curve Keyboard 2000 v10 USB
Mouse
Logitec optic USB
Internet Speed
3.01 Mb/s download 0.64 Mb/s upload
Back
Top