545633 - malicious website prevent closing tab and/or reporting broken webpage

Status: RESOLVED INCOMPLETE

(Firefox :: General, defect)

Description

[Gábor Fehér]

User-Agent:       Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.17) Gecko/2009122200 SUSE/3.0.17-0.1.1 Firefox/3.0.17
Build Identifier: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.0.17) Gecko/2009122200 SUSE/3.0.17-0.1.1 Firefox/3.0.17

I've found the following malicious website:
http://free-s(REMOVETHIS)can-pc.in/l/138bb0697aw72g75t (I added "(REMOVETHIS)" so no one goes to the page accidentally.)

The site claims that it is an anti-virus program, and I have to download an exe file, etc.

The problem is, that when I click on "Report web forgery..." then it asks "Are you sure to navigate away from this page?", and it somehow prevents me from going to the reporting site. The same happens when I try to close the tab.

Reproducible: Always

Steps to Reproduce:
1. Navigate to the following url: http://free-s(REMOVETHIS)can-pc.in/l/138bb0697aw72g75t , without the capital letters in the brackets.
2. Try to report it as a web forgery.

Comment 1

[Gábor Fehér]

Attachment: Html file of the malicious site.

Comment 2

[Gábor Fehér]

Attachment: javascript file saved from the malicius site

Comment 3

[Cork]

Dup of bug 61098 or bug 59314 or both.

Comment 4

[Tyler Downer [He/Him]]

Reporter, please retest with Firefox 3.6.12 or later in a fresh profile (http://support.mozilla.com/kb/Managing+profiles). Also update your plugins (flash, adobe reader, java, quicktime, silverlight, etc.) Go to the developer's website and download the latest version from there. If you no longer see this issue, please close this bug as RESOLVED, WORKSFORME. If you do see the bug, please post a comment.

Comment 5

[Tyler Downer [He/Him]]

No reply, INCOMPLETE. Please retest with Firefox 3.6.12 or later and a new profile (http://support.mozilla.com/kb/Managing+profiles). If you continue to see this issue with the newest firefox and a new profile, then please comment on this bug.