[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
New Firefox/TorBrowser 0day in the wild
- Subject: New Firefox/TorBrowser 0day in the wild
- From: benmezger at autistici.org (Ben Mezger)
- Date: Tue, 29 Nov 2016 20:57:59 -0200
"This is an Javascript exploit actively used against TorBrowser NOW. It
consists of one HTML and one CSS file, both pasted below and also
de-obscured. The exact functionality is unknown but it's getting access to
"VirtualAlloc" in "kernel32.dll" and goes from there. Please fix ASAP. I
had to break the "thecode" line in two in order to post, remove ' + ' in
the middle to restore it."
https://lists.torproject.org/pipermail/tor-talk/2016-November/042639.html
--
Kind regards,
Ben Mezger