792132 - Extension block request: a3a5c777-f583-4fef-9380-ab4add1bc2a8

Status: RESOLVED FIXED

(Toolkit :: Blocklist Policy Requests, defect)

Description

[Camilo Viecco (:cviecco)]

Extension name: Cuevana Stream
Extension UUID: a3a5c777-f583-4fef-9380-ab4add1bc2a8
Extension versions to block: 4.2
Applications, versions, and platforms affected affected: Firefox Desktop, all platforms
Block severity: hard


Homepage, AMO listing, other references and contact info: 
Homepage: http://www.cuevana.tv/
Malware detected references:
[1] http://www.dragonjar.org/cuevana-tv-y-su-plugin-espia.xhtml
[2] http://www.forocoches.com/foro/showthread.php?t=2923803
[3] https://twitter.com/Cuevana/status/247490958697041920
[4] http://blog.segu-info.com.ar/2012/09/el-plug-in-de-cuevana-roba-informacion.html
[5] http://www.addictware.com.mx/index.php/seguridad/3244-cuevana-distribuye-malware
contact info: Tomas Escobar <[e-mail]>

Reasons: Addon not hosted in AMO, hosting server got compromised and a malicious version of the malware was hosted. The compromised version steals passwords. 

Vendor has been contacted and has agreed to the blocking (they prefer softblock).

Comment 1

[Jorge Villalobos [:jorgev] (he/him)]

Is there a newer version of this add-on with a number above 4.2?

Comment 2

[Camilo Viecco (:cviecco)]

Yes. They created a version 4.3, that is currently available at:
http://www.cuevana.tv/player/plugins/cstream-4.3.xpi

Comment 3

[Camilo Viecco (:cviecco)]

They have also asked us if we would be willing to host their extension inside AMO.

Comment 4

[Jorge Villalobos [:jorgev] (he/him)]

Their extension is legal in their country (I think), but I don't think it would pass our current copyrighted content policies, unfortunately.

Comment 5

[Jorge Villalobos [:jorgev] (he/him)]

The add-on version is (hard) blocked now in production:

https://addons.mozilla.org/en-US/firefox/blocked/i142

Removing security flag, since this is very public and the block points to this bug.