CVE-2017-5415

MEDIUM

Firefox < 52.0 - Address Bar Spoofing via Blob URL

Title source: llm

Exploitation Summary

EIP tracks 3 public exploits for CVE-2017-5415. PoCs published by 649, 0x1.

AI-analyzed exploit summary This exploit leverages a DOM-based XSS vulnerability in Firefox by creating a malicious blob URL that redirects users to a spoofed Google page. The PoC demonstrates how arbitrary JavaScript execution can be achieved via URL manipulation.

Description

An attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by "blob:" as the protocol, leading to user confusion and further spoofing attacks. This vulnerability affects Firefox < 52.

Exploits (3)

exploitdb WORKING POC

by 649 · htmllocalmultiple

https://www.exploit-db.com/exploits/44266

View Code ZIP pw:eip

This exploit leverages a DOM-based XSS vulnerability in Firefox by creating a malicious blob URL that redirects users to a spoofed Google page. The PoC demonstrates how arbitrary JavaScript execution can be achieved via URL manipulation.

Classification

Working Poc 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: Mozilla Firefox < 52

No auth needed

Prerequisites: Victim must be using a vulnerable version of Firefox · Victim must visit a malicious page or have the script injected

MITRE ATT&CK