Here's the page we think you wanted. See search results instead:

Mozilla Firefox WebIDL Privilege Esacalation

Strike ID:
E14-45y01
CVSS:
9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)
False Positive:
f
Variants:
1
Year:
2014

Description

This strike exploits a privilege escalation vulnerability in Mozilla Firefox. The vulnerability is due to a failed security check allowing XUL applications to be loaded within an iframe via a call to window.open(). An attacker could exploit this vulnerability by enticing a user to view a malicious web page, possibly leading to execution of arbitrary code on the victim machine.

CVE

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-1510

References

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_webidl_injection.rb

Bid