CVE-2013-1690

This Metasploit module exploits a use-after-free vulnerability in Firefox 17.0.6 via a crafted webpage using onreadystatechange events and window.stop(). It achieves RCE through heap spraying and ROP chains on Windows XP SP3.

This is a working exploit PoC for CVE-2013-1690, targeting a memory corruption vulnerability in Firefox's JavaScript engine. The exploit manipulates array buffers and sparse arrays to achieve arbitrary memory read/write, leading to remote code execution.

This Metasploit module exploits a use-after-free vulnerability in Firefox 17.0.6 and 21 via a crafted HTML page using onreadystatechange events and window.stop(). It achieves remote code execution by spraying the heap with shellcode and manipulating the DocumentViewerImpl object.