funsec mailing list archives

Compromised file in Vietnamese language pack for Firefox 2


From: Juha-Matti Laurio <juha-matti.laurio () netti fi>
Date: Thu, 8 May 2008 15:53:55 +0300 (EEST)

Auuuts! Oooops! Since Feb 2008...

From Mozilla Security Blog:

"May 7th, 2008

The Vietnamese language pack for Firefox 2 contains inserted code to load remote content.  This code is the result of a 
virus infection, but does not contain the virus itself.
This usually results in the user seeing unwanted ads, but may be used for more malicious actions.

Everyone who downloaded the most recent Vietnamese language pack since February 18, 2008 got an infected copy.
 While we cannot determine the exact number of compromised downloads, there have been 16,667 total downloads of the 
Vietnamese language pack since November 2007, so we anticipate the impact on users to be limited."
--clip--

More at
http://blog.mozilla.com/security/2008/05/07/compromised-file-in-vietnamese-language-pack-for-firefox-2/

Juha-Matti
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: