Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox

githubexploit · 2024-06-13

Description

This exploit lets attackers run arbitrary JavaScript by opening a malicious document in Firefox.

Affected software

Mozilla Firefox< 115.11.0, 126.0

Mozilla Thunderbird< 115.11.0

All known vulnerabilities by product

Alt Linux Almalinux Astra Linux Centos Confluence Firefox Firefox Esr Linuxmint

CVSS 8.8 for CVE-2024-4367

8.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:HIGH

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:LOW

Integrity:LOW

Availability:LOW

Working code

82%confidence this exploit runs

Based on 3 file(s) in the source

EPSS Score

70.7%higher than 99.3% of all CVEs

Updated 2026-08-25

Exploit Details

Modified:2025-07-01 03:36

Last Seen:2025-09-06 14:41

Reporter:Zombie-Kaiser

Written in:Python

Last commit:2024-06-13

Tags

mozilla firefoxpdf viewercode executionexploit vector

Other exploits for CVE-2024-4367

pdfjs_disable_eval

2026-09-07 KitPloitKITPLOIT

CVE-2024-4367-Analysis

2026-09-07 KitPloitKITPLOIT

cve-2024-4367-poc

2026-09-07 KitPloitKITPLOIT

pdfjs-vuln-demo

2026-09-07 KitPloitKITPLOIT

CVE-2024-4367-hands-on-01

2026-09-07 KitPloitKITPLOIT

CVE-2024-4367-PoC

2026-09-07 KitPloitKITPLOIT

CVE-2024-4367_test

2026-09-07 KitPloitKITPLOIT

CVE-2024-4367-PDF.js-xss

2026-09-07 KitPloitKITPLOIT

Exploit Code

README3 lines

## https://sploitus.com/exploit?id=4E7AEFC5-D034-5BB0-ACBE-3A4DD2888D29
# cve-2024-4367-PoC-fixed  
PDF.js is a JavaScript-based PDF viewer maintained by Mozilla. This vulnerability allows attackers to execute arbitrary JavaScript code immediately after opening a malicious PDF file. This affects all Firefox users (<126), as Firefox uses PDF.js to display PDF files. However, it also severely impacts many web and Electron-based applications that use PDF.js for previewing functions (indirectly).