New Firefox/TorBrowser 0day in the wild

rooty arpspoof at protonmail.com
Tue Nov 29 15:38:06 PST 2016


Thanks Ben but don't use it - prefer hide plain site





-------- Original Message --------
On Nov 29, 2016, 2:57 PM, Ben Mezger wrote:

"This is an Javascript exploit actively used against TorBrowser NOW. It
consists of one HTML and one CSS file, both pasted below and also
de-obscured. The exact functionality is unknown but it's getting access to
"VirtualAlloc" in "kernel32.dll" and goes from there. Please fix ASAP. I
had to break the "thecode" line in two in order to post, remove ' + ' in
the middle to restore it."

https://lists.torproject.org/pipermail/tor-talk/2016-November/042639.html

--
Kind regards,
Ben Mezger
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: text/html
Size: 828 bytes
Desc: not available
URL: <http://lists.cpunks.org/pipermail/cypherpunks/attachments/20161129/d0778572/attachment.txt>


More information about the cypherpunks mailing list