1534835 - Extension Block Request: {9fa797e8-d7d4-4851-b7e9-76b61ecf046f}

Status: RESOLVED DUPLICATE of bug 1535088

(Toolkit :: Blocklist Policy Requests, task)

Description

[Zitronella]

Extension name	{9fa797e8-d7d4-4851-b7e9-76b61ecf046f}
Extension versions affected	<all versions>
Platforms affected	<all platforms>
Block severity	hard

Reason

remote code injection. redirect google-search and bing-search on other sites

Extension GUIDs

Name: Selection
Version: 3.2

Additional Information

Site hxxps://s3.us-east-2.amazonaws.com/hresxx/de/index.html force to fullscreen-mode and force to install extension

Comment 1

[FF]

Can you provide the exact page with the installation? Where did you get this add-on?
The given page is not correct.

Comment 2

[Zitronella]

it was the right site when i created the bug. So it is not possible.
They always change their site very fast and spread the extensions again on another fake page

Comment 3

[FF]

Can you send a screenshot? Do you have anything to confirm your bug?

Comment 4

[Zitronella]

Site spread new extension with same behavior i mention above
h**p://s3.us-east-2.amazonaws.com/extgs/de.xpi
Name:Seconds
Version: 6.2
UUID:{f010d9e9-0878-4c83-af45-df966cbe8d26}

Comment 5

[Zitronella]

UUID: {2aa8c5cd-18fa-4991-b354-d6f459efeca9} from same page in another language h**p://s3.us-east-2.amazonaws.com/extgs/ww.xpi
(maybe other on other languages exist?)

Comment 6

[Andreas Wagner [:TheOne] [use NI]]

https://bugzilla.mozilla.org/show_bug.cgi?id=1535088 will cover these as well.