EDB-47752

PoC

Mozilla FireFox (Windows 10 x64) - Full Chain Client Side Attack

view exploit source exploit_dbtype localauthor Axel Souchetpublished 2019-12-07catalog exploit_db
01

exploited CVEs (2)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2019-11708UScritical10.0OT criticalKEV
Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content cho…
CVE-2019-9810UShigh8.8Exploit
Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This vulnerability affects Firefox <…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan