News Zero-Day Vulnerability Discovered in Tor Browser 7.x

[Mr.Kurd]

In The Name OF Allah

Al-Salam Alekum

While the latest version of the Tor browser is unaffected, Zerodium today issued an advisory via Twitter of a zero-day vulnerability in the Tor browser 7.x.

According to Zerodium, who buys and sells vulnerabilities in software, the browser is reported to have a serious vulnerability – a backdoor that leads to full bypass of Tor’s security protections. The NoScript browser extension is supposed to block all JavaScript at the “safest” security level, but the backdoor enables an attacker to execute malicious code even if the blocking extension is activated.

https://www.infosecurity-magazine.com/ne...overed-in/

It had been reproduced by @x0rz: https://gist.github.com/x0rz/8198e8e22b1...5c1232b795

Wa Salam Alekum