Closed
Bug 722844
Opened 12 years ago
Closed 12 years ago
Malicious "Buzz Video" add-on
Categories
(Toolkit :: Blocklist Policy Requests, defect)
Toolkit
Blocklist Policy Requests
Tracking
()
RESOLVED
FIXED
People
(Reporter: mhammell, Assigned: jorgev)
Details
Attachments
(1 file)
84.48 KB,
application/octet-stream
|
Details |
User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_2) AppleWebKit/535.7 (KHTML, like Gecko) Chrome/16.0.912.77 Safari/535.7 Steps to reproduce: Downloaded an add-on from http://www.nos-delires[.]com/BuzzzzVideos.xpi Actual results: update URL: http://www.buzzzzvideos/[.]info/update.rdf The add-on injects youtube.js from the add-on into every page's DOM That injects http://www.buzzzzvideos/[.]info/plugin.js ... which injects http://www.buzzzzvideos/[.]info/lolz.js?nocache lolz.js: has jQuery embedded in it grabs your Facebook cookies Grabs your email address via http://www.facebook.com/ajax/settings/account/email.php and POSTs it to http://www.buzzzzvideos/[.]info/process/a.php Posts your Facebook UID to http://www.buzzzzvideos/[.]info/process/a1.php Grabs all of your friends via http://www.facebook.com/ajax/typeahead/first_degree.php Sends a like of Facebook page ID 267294696673364 Posts an update to your Facebook wall with one of the following URLs and mentions that you are with all of your friends. http://bit.ly/zh4jFF http://bit.ly/AdMd6C http://bit.ly/zsd4A8 http://bit.ly/xAC7kS http://bit.ly/wQZvKE http://bit.ly/wpDbXz http://bit.ly/wgUPXt http://bit.ly/xfBtNr http://bit.ly/y8rmWJ http://bit.ly/xck4pF Posts to Facebook's Open Graph (https://graph.facebook.com/ajax/ufi/modify.php) one of the following URLs: http://bit.ly/zDo8Pu http://bit.ly/zBBMRT http://bit.ly/wJgdAy http://bit.ly/xTyj4W http://bit.ly/y0zK7n http://bit.ly/yZ1xIh http://bit.ly/w5fUJQ http://bit.ly/yKuGQo http://bit.ly/zWzJaj http://bit.ly/xbPs97 Expected results: It should not steal your Facebook cookies and post to Facebook without your consent.
Assignee | ||
Comment 1•12 years ago
|
||
ID: webmaster@buzzzzvideos.info
Assignee: nobody → jorge
Status: UNCONFIRMED → ASSIGNED
Ever confirmed: true
Assignee | ||
Comment 2•12 years ago
|
||
https://addons.mozilla.org/en-US/firefox/blocked/i58
Status: ASSIGNED → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
Updated•8 years ago
|
Product: addons.mozilla.org → Toolkit
You need to log in
before you can comment on or make changes to this bug.
Description
•