Nobel Peace Prize Site Serves Firefox 0day
Summary: Oslo-based Norman ASA warned that the Nobel Peace Prize website was serving malicious software exploiting a newly discovered Firefox vulnerability to visitors who browsed the site with Firefox early Tuesday. Mozilla said the critical flaw affects Firefox 3.5 and 3.6, that exploit code had been detected in the wild, and that it was developing a fix, while Norman analyst Snorre Fagerland described a use-after-free condition exploited through JavaScript with shellcode and a large heapspray, checking for Firefox 3.6.8 through 3.6.11 and excluding Vista and Windows 7.
Bottom line: The exploit deliberately excluded Windows Vista and 7, limiting the attack to XP-family systems, and the payload reported by commenters was a connect-back shell rather than a botnet recruitment tool - a profile that points at surveillance of a specific visitor population rather than mass infection.
Read the original at Krebs on Security ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026