exploit/multi/browser/firefox_webidl_injection

weaponized

Firefox WebIDL Privileged Javascript Injection

view exploit source metasploittype exploitpublished 2014-03-17catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2014-1511US	critical9.8	83.5% (100th)	Exploit	2014-03-19
Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vec…
CVE-2014-1510US	critical9.8	82.2% (100th)	Exploit	2014-03-19
The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbit…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.