exploitguard icon indicating copy to clipboard operation
exploitguard copied to clipboard

Issues with media playback in Firefox

Open n-zhi opened this issue 3 years ago • 1 comments

Hello, it seems that recently any media (audio&video) playback in Firefox became broken with exploit guard settings provided in this repository. I checked that any of these options trigger this behavior:

EnableExportAddressFilter
EnableExportAddressFilterPlus
EnableImportAddressFilter
EnableRopStackPivot
EnableRopCallerCheck
EnableRopSimExec

So working settings are Set-ProcessMitigation -Name firefox.exe -Enable DEP,BottomUp,ForceRelocateImages,CFG,AuditRemoteImageLoads,AuditLowLabelImageLoads,SEHOP,TerminateOnError,AuditChildProcess

Checked in Firefox 93.0 x64 and Windows 10 19043.1237

n-zhi avatar Oct 13 '21 16:10 n-zhi

It seems that almost all of these are working again in Firefox 94.0.2:

EnableExportAddressFilter
EnableImportAddressFilter
EnableRopStackPivot
EnableRopCallerCheck
EnableRopSimExec

But "EnableExportAddressFilterPlus" rule is now crashing Firefox all the time just on startup.

Working settings are: Set-ProcessMitigation -Name firefox.exe -Enable DEP,BottomUp,ForceRelocateImages,CFG,AuditRemoteImageLoads,AuditLowLabelImageLoads,EnableExportAddressFilter,EnableImportAddressFilter,EnableRopStackPivot,EnableRopCallerCheck,EnableRopSimExec,SEHOP,TerminateOnError,AuditChildProcess

Firefox 94.0.2 x64, Windows 10 19043.1348

n-zhi avatar Dec 05 '21 16:12 n-zhi