InformAction Forums

Posted: **Wed Mar 09, 2016 3:47 pm**

The sites are lloydsbank.com and halifax.co.uk

Mozilla crash report 8fc83115-7a93-4752-bc8b-740a32160309

Clicking the Flash report button and interacting with the page logons launches an error form asking to open or save a file with name:

Code: Select all

6a6176617363726970745f5f2866756e6374696f6e28297b66756e6374696f6e206928297b696628747970656f6620584d4c4874747052657175657374213d27756e646566696e656427297b72657475726e206e657720584d4c487474705265717565737428297d7472797b72657475726e206e657720416374697665584f626a656374285f4d73786d6c322e584d4c485454505f297d63617463682865297b7472797b72657475726e206e657720416374697665584f626a6563742e6a6f696e285f265f297d66756e6374696f6e206b2861297b76617220623d7b7d2c643d2861

The forums spam filter won't allow the filename so its been converted to hex.
Use http://www.unit-conversion.info/texttoo ... to-binary/ to recover actual filename.

The saved file is empty.

Remedy: disable NoScript plugin and restart browser to access bank sites.

Posted: **Wed Mar 09, 2016 3:51 pm**

Code: Select all

javascript__(function(){function i(){if(typeof XMLHttpRequest!='undefined'){return new XMLHttpRequest()}try{return new ActiveXObject(_Msxml2.XMLHTTP_)}catch(e){try{return new ActiveXObject.join(_&_)}function k(a){var b={},d=(a

crash linked: https://crash-stats.mozilla.com/report/ ... 0a32160309

And lloydsbank.com has been mentioned before, no?
And sure enough, they do have Flash on their login page!

Heh, marketing... https://marketing.lloydsbank.co.uk/

So... what was the outcome, NoScript crashing FireFox on banking site ?

InformAction Forums

FF bank sites crashing Flash Version: 20.0.0.306

FF bank sites crashing Flash Version: 20.0.0.306

Re: FF bank sites crashing Flash Version: 20.0.0.306