Malicious Firefox Extensions - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2008

Malicious Firefox Extensions

Résumé

The purpose of this paper is to warn Mozilla Firefox users about the risk associated with browser extensions, especially the fact that Firefox extensions are more dangerous than ActiveX controls in Internet Explorer. Interestingly, the lack of security of ActiveX controls is well known whereas the security of Firefox extensions seems to be ignored. This danger is platform-independant, Microsoft Windows as well as Mac OS and Linux are vulnerable as long as Firefox is used. Finally, we only consider Firefox but virtually every Mozilla application implementing an extension mechanism is subject to this threat, such as Thunderbird.
Fichier non déposé

Dates et versions

inria-00338077 , version 1 (10-11-2008)

Identifiants

  • HAL Id : inria-00338077 , version 1

Citer

Philippe Beaucamps, Daniel Reynaud. Malicious Firefox Extensions. Symposium sur la sécurité des techniques d'information et de communication, Jun 2008, Rennes, France. ⟨inria-00338077⟩
126 Consultations
0 Téléchargements

Partager

Gmail Facebook X LinkedIn More