[tbb-bugs] #12736 [Applications/Tor Browser]: DLL hijacking vulnerability in TBB

Thu Aug 25 12:04:41 UTC 2016

#12736: DLL hijacking vulnerability in TBB
------------------------------------------------+--------------------------
 Reporter:  underdoge                           |          Owner:  tbb-team
     Type:  defect                              |         Status:  new
 Priority:  High                                |      Milestone:
Component:  Applications/Tor Browser            |        Version:
 Severity:  Normal                              |     Resolution:
 Keywords:  tbb-security, TorBrowserTeam201608  |  Actual Points:
Parent ID:                                      |         Points:
 Reviewer:                                      |        Sponsor:
------------------------------------------------+--------------------------

Comment (by boklm):

 Vanilla firefox is also affected by this issue when HTTPS Everywhere is
 installed.

 I opened #19976 with a patch to fix the issue in HTTPS Everywhere.

 Whith this patch applied, firefox.exe is no longer trying to find a .DLL
 library.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12736#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online