sysinfo Help->About page lists a bogus contact URL: http://sysinfo.r8.org - this URL redirects thru r8.org to such suspect sites as drivecleaner.com, errorprotector.com, etc.

Bug #138801 reported by Jim Hopkins
4
Affects Status Importance Assigned to Milestone
sysinfo (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

Binary package hint: sysinfo

The sites named in the summary produce the following ridiculous JavaScript popups:

---------- begin drivecleaner popup ----------

<www.drivecleaner.com>

NOTICE: Your computer has tracks of all adult sites you had visited. In most cases, you are not even aware of the files that get installed by themselves , violate your online privacy and could compromise your career and your marriage.
These files leave tracks of your online behavior and even compromise your credit card's security. It is possible to clean up all the temporary and history records of your computer to remove these tracks.

Would you like to install DriveCleaner to check your computer for free? (Recommended)

---------- end drivecleaner popup, begin errorprotector popup ----------

<www.errorprotector.com>

NOTICE: If your computer has errors in the registry database or file system, it could cause unpredictable or erratic behavior, freezes and crashes.
Fixing these errors can increase your computer's performance and prevent data loss.

Would you like to install ErrorProtector to check your computer for free? (Recommended)

---------- end errorprotector popup ----------

None of this has anything to do with sysinfo for Linux.

Related branches

Revision history for this message
Kees Cook (kees) wrote :

Thanks for taking the time to report this bug and helping to make Ubuntu better. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privilege boundaries nor directly cause loss of data/privacy. Please feel free to report any other bugs you may find.

Revision history for this message
Koen (koen-beek) wrote :

confirmed

Changed in sysinfo:
status: New → Confirmed
Koen (koen-beek)
Changed in sysinfo:
assignee: nobody → koen-beek
status: Confirmed → In Progress
Revision history for this message
Koen (koen-beek) wrote :

I've created a patch that corrects this issue and some others : https://bugs.launchpad.net/ubuntu/+source/sysinfo/+bug/121068/comments/4

Changed in sysinfo:
status: In Progress → Confirmed
Koen (koen-beek)
Changed in sysinfo:
status: Confirmed → In Progress
Revision history for this message
Koen (koen-beek) wrote :

debdiff included in bug 121068

Changed in sysinfo:
assignee: koen-beek → nobody
status: In Progress → Confirmed
Revision history for this message
Koen (koen-beek) wrote :

sysinfo (0.7-0ubuntu2) hardy; urgency=low

  * References to website http://sysinfo.r8.org replaced by http://sourceforge.net/projects/gsysinfo (LP: #138801)
  * About box could only be used once, secodn, etc times it just produced a small rectangle (LP: #174863)
  * Crash when clicking on Nvidia icon (LP: #159974)
  * Use of lsb-release version information (now shows ubuntu release in stead of debian release on ubuntu) (LP: #121068)
  * SystemInfo.cs contained a double + which made the build of the source package fail

 -- Koen Beek <email address hidden> Sat, 08 Dec 2007 21:13:41 +0100

Changed in sysinfo:
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.