CVE-2019-11708

This repository contains a full exploit chain for CVE-2019-11708 and CVE-2019-9810, targeting Firefox on Windows 64-bit. It leverages a data corruption vulnerability to achieve privileged JavaScript execution and ultimately compromises the entire browser, including the sandboxed parent process.

This is a functional exploit for CVE-2019-11708, leveraging a type confusion vulnerability in Mozilla Firefox's JavaScript engine to achieve arbitrary read/write primitives and ultimately remote code execution. The exploit manipulates array lengths and corrupts memory to bypass security mechanisms.

This repository contains a functional exploit chain for CVE-2019-9791 and CVE-2019-11708 targeting Firefox 65.0 on Windows 64-bit. The exploit leverages type confusion to achieve arbitrary read/write primitives in the content process and escalates to arbitrary code execution in the main process.