CVE-2024-4367 PoC — Mozilla Firefox 安全漏洞

Source

https://github.com/Masamuneee/CVE-2024-4367-Analysis

Associated Vulnerability

Title:Mozilla Firefox 安全漏洞 (CVE-2024-4367)
Description:Mozilla Firefox是美国Mozilla基金会的一款开源Web浏览器。 Mozilla Firefox 126 版本之前存在安全漏洞，该漏洞源于处理 PDF.js 中的字体时缺少类型检查，这将允许在 PDF.js 环境中执行任意 JavaScript。

Readme

# CVE-2024-4367: Arbitrary JavaScript Execution in PDF.js

## Overview
CVE-2024-4367 is a critical vulnerability in the PDF.js library that allows arbitrary JavaScript execution in a user's browser, leading to Cross-Site Scripting (XSS) attacks. This affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.

## Usages

### Node in /app
```bash
npm install
```
```bash
npm start
```

### PoC
- `python3 poc.py <payload>`
- Example: `python3 poc.py "alert(1)"`

### Demo Videos
- [Demo 1 (Firefox)](https://www.youtube.com/watch?v=s4V5fL3AQew)
- [Demo 2 (pdfjs-dist)](https://www.youtube.com/watch?v=dWHtNF5-MKk)

## Mitigation
- Update PDF.js to a version higher than 4.1.392.
- Ensure your Firefox, Firefox ESR, or Thunderbird is up-to-date with the latest security patches.

## Detailed Analysis
For a comprehensive analysis of CVE-2024-4367, [read here](https://masamuneee.github.io/posts/cve-2024-4367/).

## PoC references
- https://github.com/LOURC0D3/CVE-2024-4367-PoC
- https://github.com/s4vvysec/CVE-2024-4367-POC

File Snapshot


 [4.0K]  /data/pocs/2ca2ce839549b1f422df974a0c608d4a25448738
├── [4.0K]  app
│   ├── [ 331]  package.json
│   ├── [4.0K]  public
│   │   └── [2.0K]  index.html
│   └── [ 522]  server.js
├── [4.0K]  poc
│   ├── [1.8K]  poc.pdf
│   ├── [2.4K]  poc.py
│   └── [ 18K]  sample.pdf
└── [1.0K]  README.md

3 directories, 7 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!