435336 - Malicious popup locks up firefox

Status: RESOLVED DUPLICATE of bug 61098

(Firefox :: Security, defect)

Description

[Mark Whitis]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.11) Gecko/20071128 Iceweasel/2.0.0.11 (Debian-2.0.0.11-1)
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.11) Gecko/20071128 Iceweasel/2.0.0.11 (Debian-2.0.0.11-1)

Loading this URL gives you a popup window.   When you dismiss that one, you get an infinite loop of two other popups trying to trick you into downloading virus software.  The two looping pops say the following.

The page at http://bestsearchworld.info says:
Windows Security: Virus Warning. You browser may be infected with danger virus
"NetSky.q".  Click 'OK' to download and install Antivirus 2008.

Please install new Antivirus 2008 to restore you browser.

You can't close them without looping.   You can't switch tabs.   I almost lost a post I was making to another site because of this.

I finally got out of it by downloading their software and aborting the download.   Which isn't very acceptable.   And with a slight change to the malicous code, you wouldn't have that exit strategy either.    Even exiting and restarting firefox and restoring windows you would be screwed.  You would lose all your form data (recovery doesn't work on some sites that don't allow caching and you wouldn't have use of the browser anyway) and all your tabs.

Reproducible: Always

Steps to Reproduce:
Visit malicious site.