CVE-2014-1510

CRITICAL EXPLOITED

Firefox < 28.0 - Remote Code Execution via Web IDL Fragment

Title source: llm

Exploitation Summary

CVE-2014-1510 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 2 public exploits from researchers including Marius Mlynski, joev, including a Metasploit module exploits/multi/browser/firefox_webidl_injection.

AI-analyzed exploit summary This Metasploit module exploits CVE-2014-1510 and CVE-2014-1511 to achieve remote code execution on Firefox 22-27 by abusing privilege escalation vulnerabilities in Firefox's JavaScript APIs. It uses a multi-step approach involving WebIDL injection and chrome-privileged window manipulation.

Description

The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call.

Exploits (2)

exploitdb WORKING POC

rubyremotemultiple

https://www.exploit-db.com/exploits/34448

View Code ZIP pw:eip

This Metasploit module exploits CVE-2014-1510 and CVE-2014-1511 to achieve remote code execution on Firefox 22-27 by abusing privilege escalation vulnerabilities in Firefox's JavaScript APIs. It uses a multi-step approach involving WebIDL injection and chrome-privileged window manipulation.

Classification

Working Poc 100%

Attack Type

Rce

Complexity

Complex

Reliability

Reliable

Target: Mozilla Firefox 22.0 to 27.0

No auth needed

Prerequisites: Victim must visit a malicious webpage using a vulnerable version of Firefox

MITRE ATT&CK

T1189 - Drive-by Compromise T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 19, 2026 Full analysis →

metasploit WORKING POC EXCELLENT

by Marius Mlynski, joev · rubypocfirefox

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_webidl_injection.rb

View Code ZIP pw:eip

This Metasploit module exploits two Firefox privilege escalation vulnerabilities (CVE-2014-1510 and CVE-2014-1511) to achieve remote code execution by injecting privileged JavaScript via WebIDL manipulation and chrome:// URL loading.