CVE-2013-1710
EXPLOITEDFirefox toString console.time Privileged Javascript Injection
Title source: metasploitExploitation Summary
CVE-2013-1710 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 2 public exploits from researchers including moz_bug_r_a4, Cody Crews, joev, including a Metasploit module exploits/multi/browser/firefox_tostring_console_injection.
AI-analyzed exploit summary This Metasploit module exploits CVE-2013-1710 in Firefox 5.0-15.0.1 by manipulating the __exposedProps__ property to gain chrome-privileged context and install a malicious addon. It chains with CVE-2012-3993 to override functions and uses crypto.generateCRMFRequest to execute arbitrary code.
Description
The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allows remote attackers to execute arbitrary JavaScript code or conduct cross-site scripting (XSS) attacks via vectors related to Certificate Request Message Format (CRMF) request generation.
Exploits (2)
This Metasploit module exploits CVE-2013-1710 in Firefox 5.0-15.0.1 by manipulating the __exposedProps__ property to gain chrome-privileged context and install a malicious addon. It chains with CVE-2012-3993 to override functions and uses crypto.generateCRMFRequest to execute arbitrary code.
This Metasploit module exploits CVE-2013-1710 to achieve remote code execution on Firefox 15-22 by injecting privileged JavaScript into a chrome:// context via toString and console.time manipulation.