CVE-2015-4495
HIGH KEVFirefox < 39.0.3 - Same Origin Policy Bypass via PDF Reader Native Setter
Title source: llmExploitation Summary
CVE-2015-4495 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added May 25, 2022.
EIP tracks 3 public exploits from researchers including Tantaryu MING, vincd, Unknown, fukusa, Unknown, including a Metasploit module auxiliary/gather/firefox_pdfjs_file_theft.
AI-analyzed exploit summary This exploit leverages a same-origin policy bypass in Firefox's pdf.js to read local files and directory listings. It uses JavaScript to manipulate iframe and object elements to escape the sandbox and access restricted resources.
Description
The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.
Exploits (3)
This exploit leverages a same-origin policy bypass in Firefox's pdf.js to read local files and directory listings. It uses JavaScript to manipulate iframe and object elements to escape the sandbox and access restricted resources.
This PoC exploits CVE-2015-4495, a vulnerability in Firefox < 39.0.3 that allows directory listing enumeration via a sandbox escape and JavaScript injection. The exploit uses iframe manipulation and prototype chain traversal to bypass security restrictions and read local filesystem directories.
This Metasploit module exploits an XSS vulnerability in Firefox's PDF.js component (CVE-2015-4495) to exfiltrate arbitrary local files by leveraging privileged frame access. It serves a malicious HTML page that steals specified files via POST requests to the attacker's server.
References (18)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H